Privacy Notice

We've tried to keep this short. The summary: we collect what we need to teach you, we don't sell or share it for advertising, and you can take a copy of your data or delete it any time.

What we collect

• Account basics: the email, name, and password you provide.
• Profile: country, province, and grade, used to pick your real syllabus.
• Age band: the age band you gave at sign-up (13 to 17, or 18 and over); never your age or date of birth. An account made before this question existed has none until it buys a plan, when the buyer confirms they are 18 or older.
• Learning activity: topics started, milestones completed, quizzes attempted, videos watched and how much of each was watched, homework submitted, and AI tutoring transcripts.
• Files you create: documents, sheets, slides, and graph homework stored in Google Cloud Storage on our account.
• Billing: if you choose a plan, Stripe handles your card. Stripe receives your email address and a customer number; we keep only Stripe ids, the plan, its dates and refund records, never a card number. Stripe emails your receipts. We email you about your plan (when it starts, renews, ends or a payment fails, and before your free month ends) through our email provider, Resend, and keep only which email went out and when. In the iPhone app, Plus is bought with your Apple ID: Apple takes the payment and handles refunds, and RevenueCat checks the purchase for us with an account number only, never your name or email.
• Learning settings: a teacher may set, for a student in their class, extra time on quizzes, captions, read aloud, large print or a calm display. Your device applies them after you sign in, and you can still change them. We record the setting only, never a reason.
• Pages and actions, adult accounts only: for a teacher, parent or family account we keep a list of the pages opened and the main actions taken (for example creating a document or sending an assignment), with the time, so our support team can help when something goes wrong. We keep the page address without anything after it and the action's name, never what you typed. Only our staff can see it, and it is deleted after 90 days. Student accounts, children's profiles and login card accounts are never included.
• Technical logs: IP address, device type, and timing, used for security and debugging only, retained for 90 days.

What we don't do

• We don't sell your data, ever.
• We don't run ads, third-party analytics with identifiers, or pixel tracking.
• We don't train third-party AI models on your work or your tutoring transcripts.
• We don't share student data with anyone outside KMF except as required to operate the service (Stripe for billing, Google for the Gemini tutor, LiveKit for voice).

Children (COPPA & FERPA)

No account is created for anyone under 13 by their own hand: a teacher or a parent creates it. A teacher prints a login card or sets up a nickname class; a parent adds the child as a profile on a family account. They consent for the child, and we rely on that consent to comply with COPPA. Parents can:

• Review what we've collected about their child.
• Refuse further collection.
• Delete the child's account permanently.

To request any of these, email [email protected] from the address on file, or open Account → Privacy & data.

For schools using KMF in a classroom: where applicable we operate as a "school official" under FERPA. We don't use student data for any purpose other than providing the service.

Your rights

Wherever you are, you can:

• Download a copy of everything we hold on you.
• Correct anything that's wrong.
• Delete your account and all related data.
• Object to a specific use of your data.

GDPR (EU/UK) and CCPA (California) residents have additional rights, including the right to a copy of any "sale" of personal information. For us that's easy: we don't sell anything.

Where data lives

Application data is stored in Google Cloud SQL (managed Postgres) and Google Cloud Storage, both operated by us in US and EU regions depending on where you signed up.

Retention

• Active accounts: kept as long as you use the service.
• Inactive accounts: archived after 24 months of no activity, then deleted after a further 12 months unless you sign back in.
• Deletion requests: completed within 30 days; security logs may persist for an additional 90 days.
• Pages and actions of adult accounts: deleted after 90 days, and with the account.

Cookies

We use a small number of strictly necessary cookies (orlocalStorage entries) to keep you signed in. No advertising cookies, no cross-site tracking. We may add anonymous performance metrics in the future, we'll update this page first. When you watch lessons without an account, a cookie named kmf_sample remembers which two lessons you have watched, for 30 days. It holds no name, no account and no address, and we do not share it.

Contact

Privacy questions go to [email protected]. For everything else, [email protected].

See also: Terms of Service.