Privacy Policy

Last updated: August 18, 2026

Koko is a product of Tsumida AI Inc. (“Koko,” “we,” “us”). Koko turns short travel videos into sortable lists of places and day‑by‑day plans, on the web and in our mobile apps for iOS and Android. This policy explains what information we collect, how we use it, and the choices you have.

Koko is currently an early‑access preview operated by a small independent team. The core of Koko is free to use. Some certified creators sell their curated lists in Koko's Discover marketplace; those purchases are billed entirely by Apple's App Store or Google Play — we never receive your card number or billing details. We do not sell your personal information, and we collect the minimum needed to run the service.

1. Information we collect

Information you provide

Account information — a username, email address, and password when you create an account (or just your email address if you sign in with a one‑time emailed code). Passwords are stored only as a salted cryptographic hash, never in plain text. If you sign in with Google or Apple, we receive your name and email address from that provider (Apple lets you hide your real address) — never your password there.
Content you submit — the video or map links you paste, and the lists, plans, notes, place selections, and other content you create or save in Koko.
Purchases — if you buy a paid list from a creator, the purchase is processed entirely by Apple's App Store or Google Play. We receive a signed transaction record — the product, the amount you were charged and its currency, and a transaction identifier — which we use to unlock your copy, prevent the same receipt being reused, and keep our books. We never see your card number or billing address.
Communications — messages you send us (for example, support requests by email).

Information collected automatically

Usage and log data — basic technical information such as your IP address, device and browser type, pages or screens viewed, and timestamps, used to operate, secure, and debug the service.
Product analytics — we record how Koko itself is used: which screens are opened and for how long, which buttons are pressed, how long a plan takes to build, and when something goes wrong (an error code, a retry, a screen that came up empty). We keep counts, durations, and short fixed labels — never the text you write. No list titles, no notes, no place names, and no search terms: a search is recorded as how many characters it was and how many results came back, never as what you typed. These records carry your account identifier when you are signed in, and before that a random identifier stored on your device so that a visit can be joined to the account it becomes.

This is not “tracking” as Apple defines it, clause by clause. We do not link this data with data collected from other companies' apps, websites, or offline properties. We do not use it for targeted advertising or advertising measurement — Koko shows no ads. We do not share it with data brokers. And there is no third‑party analytics SDK anywhere in Koko: no Google Analytics, no Facebook SDK, no advertising or attribution kit of any kind. The data is sent to Koko's own servers, is used only to make Koko better, and is never sold or joined to another company's dataset.
Cookies and local storage — we use one essential session cookie to keep you signed in, and one preference cookie (koko_site_lang) that remembers the language you chose for this website. That is all of them. We do not use third‑party advertising or cross‑site tracking cookies. The product‑analytics identifier described above is deliberately not a cookie: it is held in your browser's local storage on the web and in the app's own storage on your phone, it is never sent to any other site, and clearing your browser's site data — or deleting the app — removes it.
Push notification tokens — if you turn on notifications in the mobile app, we store your device's push token so we can tell you when a list you started is ready. Turning notifications off (in the app or in your device settings) or signing out removes the registration.

Information from the links you paste

When you paste a public video or map link (for example from Instagram, TikTok, YouTube, or Google Maps), Koko retrieves the publicly available content at that link — such as the on‑screen text, caption, and top comments — in order to identify the places it mentions. We do not log in to those platforms on your behalf or access your private accounts there.

2. How we use your information

To provide and operate Koko — extracting places from the content you submit, building your lists and plans, mapping locations, and syncing across the web and the mobile apps.
To process the purchases you choose to make — unlocking your copy of a paid list, and keeping honest records of sales for creators.
To maintain, secure, and improve the service, including debugging and preventing abuse.
To understand how Koko is actually used — which screens people spend time on, where a flow is slow, confusing, or fails outright, and which features earn their place — so we can fix what is broken and build the right things next. We use this to improve Koko itself, and for nothing else: not to advertise to you, and not on anyone else's behalf.
To respond to your requests and communicate with you about the service.
To comply with legal obligations.

3. How we share information

We do not sell your personal information. We share information only in these limited cases:

Service providers. We use trusted third parties to deliver core features. The text extracted from the content you submit is processed by Anthropic (Claude) to identify places; place names and coordinates are sent to Google Maps / Google Places to geocode and display locations; the service is hosted on Amazon Web Services, which also delivers our emails (sign‑in codes and share invitations). Purchases are billed by Apple (App Store) or Google (Google Play) under their own terms. These providers process the data on our behalf under their own terms and privacy policies.
Sharing you initiate. If you create a share link for a list or plan, anyone with that link can view what you shared, until you disable it. If you invite someone by email, we send an invitation to the address you enter.
Creator profiles. If you become a certified creator, your creator handle, display name, photo, bio, links, and the lists you publish to Discover are public. Creators see aggregate view and sales figures for their own listings — never a buyer's identity.
AI assistants you connect. Koko can be connected to third‑party AI assistants (such as ChatGPT or Claude) as an app/connector. If you choose to connect, you sign in to your Koko account and grant that assistant permission to create, read, and update the lists and plans in your account on your behalf. We receive only the requests the assistant makes for you (for example, a list of places to save); your conversations with the assistant stay with the assistant's provider under their own privacy policy. You can disconnect at any time from the assistant's settings, which revokes its access to your account.
Legal and safety. We may disclose information if required by law or to protect the rights, safety, or property of Koko, our users, or others.

4. Data retention

We keep your account and content for as long as your account is active. Video files fetched during processing are deleted from our servers shortly after the places are extracted; we retain the resulting lists and plans you save. Records of purchases and sales are kept for as long as accounting and legal obligations require. When you delete content or your account, we remove the associated data from our active systems within a reasonable period, except where we must retain it to comply with law.

Product analytics records are kept on a fixed schedule and then deleted automatically: 400 days for records attached to an account, and 90 days for anonymous ones — a visit to this website by someone who never signed in. Deleting your account also deletes its analytics records, including the anonymous ones recorded on that device before you signed up.

5. Your choices and rights (including account deletion)

Access and correction — you can view and edit your lists, plans, and profile within the app.
Deleting content — you can delete individual lists and plans at any time from within the app.
Deleting your account — you can permanently delete your account and its associated data (your profile, lists, plans, notes, and place states) directly in the app: open Profile → the gear → the ⋯ menu → Delete account. Deletion takes effect immediately. If you can't access the app, submit a request in the account deletion section of our FAQ — or email [email protected] from the email address on your account with the subject “Delete my account” — and we will process it within 30 days. In every case we remove your data from our active systems, except where we must retain it to comply with law.
Opting out of product analytics — email [email protected] from the address on your account and ask us to stop. We will delete the product‑analytics records we hold for your account and exclude it from our analytics from then on. We do this by hand — Koko is an early‑access product run by a small team — so please allow a few days, and we will confirm by email when it is done. This is separate from deleting your account, which you can do yourself at any time.
Depending on where you live, you may have additional rights over your personal information (such as access, portability, or objection). Contact us to exercise them.

6. Security

We take reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS) and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Children

Koko is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

8. International users

Koko is operated from Japan, and your information may be processed there and in other countries where our service providers operate. By using Koko you consent to this transfer and processing.

9. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

10. Contact us

Questions or requests about this policy or your data? Email us at [email protected].