Koalala: Animate Drawings for iPhone and iPad · Effective October 15, 2026
Who we are
Koalala is made by Kozmonos ("we", "us"), the operator responsible for the app and for this policy. Contact for privacy questions and requests: support@kozmonos.com. This policy covers the Koalala app for iPhone and iPad and this page.
What Koalala does not collect
- No Koalala account, sign-up or login, and no name, age, birthday, e-mail address, phone number, address or contacts. (A grown-up may choose to connect Google Drive for backups; see below. That sign-in is with Google, and we never receive it.)
- No location. Koalala never asks for your location, and we have turned off location lookup at our analytics provider. The only hint of where a device is, its time zone, is sent with usage events (see below).
- No advertising, no advertising SDKs, no advertising identifier (IDFA), no tracking across other apps or websites, and no App Tracking Transparency prompt.
- No chat, no public profiles and no way to contact other users.
- No face, voice or other biometric templates. Koalala looks for the outline and limbs of a drawn character; it does not recognise people.
Drawings and photos
- When your child photographs a drawing or picks one from the photo library, Koalala finds the character and builds its dances on the device itself. The photo, the cut-out drawing, the dances and the worlds are stored on the device, in the app's private storage.
- iCloud backup: if iCloud is signed in (iOS 17 or later), Koalala keeps a copy in its private iCloud storage in your family's own Apple Account, so friends and worlds are backed up and appear on your other devices. We cannot read it.
- Google Drive backup: only if a grown-up connects Google Drive in the grown-ups area (behind the parental gate), Koalala keeps the same copy in its hidden app folder in that Google Drive. Koalala asks Google only for access to its own app folder (it cannot see your other files); the Google account's e-mail address is shown on the device so you know which account is connected, and is never sent to us. Disconnecting keeps everything on the device.
- Drawings and photos are never uploaded to our servers or to any of the service providers below. The camera and photo library are used only when your child chooses to add a drawing. When a grown-up saves a video or picture, Koalala asks for permission to add it to Photos.
For kids
Koalala is for drawing and dancing, not for telling us about you. We never ask for your name, where you live or how old you are, and your drawings stay on your iPad or iPhone. Anything that leaves the app, like buying something or sharing a video, needs a grown-up first.
Information we receive
| What | Examples | Service provider | Kept for |
|---|---|---|---|
| App usage events | a screen was opened, a dance or place was chosen, a drawing became a friend and how long it took, whether the Premium screen was shown; with each of them how many days since the app was installed, whether Premium is active, and how many worlds and friends the family has made (numbers only) | PostHog | under PostHog's standard retention; see "Keeping and deleting information" |
| Crash and error reports | where the code failed, app version, the screens visited just before, how long screens took to load | Sentry | up to 90 days |
| Technical context sent with the two above | device model (for example "iPhone 15"), iOS version and app version; usage events also carry the language, screen size, time zone and whether the device is on Wi-Fi | PostHog, Sentry | as above |
| Purchase status | the App Store receipt, whether Premium is active, a random purchase number RevenueCat creates, and the identifier for vendor described above | RevenueCat | while Premium is used, and as required for accounting |
Usage events and crash reports are attached only to a random number the app creates when it is first installed (not a device identifier and not linked to your Apple Account), and they never contain drawings, photos, world names or anything typed in the app. RevenueCat, which checks whether Premium is active, also receives the identifier Apple gives Koalala on this device (the "identifier for vendor", which no other company's apps can see) with each status check; it is not shared with PostHog or Sentry.
Like any internet request, these services see your network's IP address while receiving the information. We have configured PostHog and Sentry to discard IP addresses, not to look up location, and not to build personal profiles.
Why we use it
The random app number and the information above are used only for the internal operations of Koalala: finding and fixing crashes and errors, measuring which features work and where children get stuck, keeping the app secure, and knowing whether Premium is active so the right features are unlocked. They are never used to contact anyone, to show advertising, to build a profile of a child or family, or for any other purpose. We make sure of this by sending no names or contact details at all, by giving usage events and crash reports only a random number that is not linked to an Apple Account or device identifier (the identifier for vendor goes to RevenueCat alone, for purchase status), by turning off person profiles, location lookup and IP storage at our providers, and by using no advertising or attribution services. Under EU and UK law we process this information because it is necessary for our legitimate interest in providing a working, secure app, and Premium status to deliver what you bought.
Who receives it
We do not sell personal information and we do not share it for advertising. The service providers below process it only on our behalf, under their data processing terms:
- PostHog, product analytics (EU hosting): posthog.com/privacy
- Sentry, crash reporting: sentry.io/privacy
- RevenueCat, subscription status: revenuecat.com/privacy
- Apple, App Store payments and iCloud backup in your own Apple Account: apple.com/legal/privacy
- Google, only if a grown-up connects Google Drive: Google Sign-In and the backup in your own Google Drive: policies.google.com/privacy
We may also disclose information if the law requires it.
Purchases
Koalala Premium is bought through Apple's App Store. Apple handles the payment and never shares your payment details or Apple Account with us. Every purchase in the app is behind a parental gate (a grown-up holds a button for three seconds), and then the App Store asks for confirmation as well.
Keeping and deleting information
- Drawings, friends and worlds: kept on your device and in your own backups (iCloud, and Google Drive if connected) until you delete them. A friend or world deleted in the app goes from every device, but the backups may keep its pictures until you remove Koalala's backup data: for iCloud, open Settings, tap your name, then iCloud, Manage Storage (or Storage), Koalala; for Google Drive, open Google Drive on the web, Settings, Manage apps, Koalala, Delete hidden app data.
- Crash reports: deleted after at most 90 days.
- Usage events: kept only as long as they help us maintain and improve Koalala, under PostHog's standard retention. They carry only the random app number and cannot identify your child. On request we delete them (see "Your rights").
- Purchase status: kept by RevenueCat while Premium is used, and as long as accounting rules require.
- Support e-mails: kept while we help you and deleted within 12 months, sooner on request.
How we protect information
We keep a written security program for the information we receive: we collect the minimum, all transfers are encrypted (HTTPS), access to our service accounts is limited to the people who build Koalala, we review our providers' security and settings, and we review this program at least once a year. Data on the device and in iCloud is protected by Apple's built-in security, and data in Google Drive by Google's.
Your rights (EU, UK and elsewhere)
You can ask to access, correct or delete information about your use of Koalala, object to its processing, or ask us to restrict it, by writing to support@kozmonos.com. To find your records we may ask for your app version and approximate dates of use. You can also complain to your local data protection authority. Our providers may process data outside your country (for example in the United States); they use the legal safeguards required for such transfers.
Children
Koalala is directed to children (Kids category, ages 6 to 8). We do not collect personal information from children such as names, contact details, photos or location. The only identifiers involved are the random app number and, for purchase status at RevenueCat, a random purchase number and Apple's identifier for vendor described above, used solely for the internal operations listed, which is why the app does not ask for parental consent. Behind the parental gate, grown-ups can reach the support e-mail, this policy, purchases and the Google Drive backup; connecting Google Drive is a grown-up's own choice and sends nothing to us. If you believe a child has sent us personal information, for example in a support e-mail, contact us and we will delete it.
Parents can ask us at any time what we hold about their child's use of the app, ask us to delete it, and ask us to stop collecting it (deleting the app stops all collection). We answer within 30 days. Because we hold no names or contact details, we may ask you for the app version and the approximate date of use to find the right records. In the UK, you can also complain to the ICO.
California
We do not sell or share personal information for cross-context behavioral advertising.
Changes
If we change how Koalala handles information, we will update this page and the date above before the change takes effect, and describe significant changes in the app's update notes.
Contact
Kozmonos · support@kozmonos.com · kozmonos.com