Kopā

Privacy Policy

Last updated: 13 October 2026

TL;DR — the app works without an account and, without one, never sends anything anywhere. Signing in is optional and adds one thing: carrying your journal to a second device. Photos are a separate switch on top of that, off until you turn it on, and turning it off deletes them from our servers. No analytics, no advertising, no third parties reading any of it.

1. Who we are

Kopa is made by BRANDO.PRO SIA, registered in Latvia. You can reach us at [email protected]. For the purposes of the GDPR we are the data controller for any information described on this page.

Kopa exists as a mobile app (iOS and Android) and as a website. They are different products and handle information differently, so this page covers each one on its own.

2. The Kopa app (iOS and Android)

Which version this describes. Version 1.1, the one in the stores today, has no account and no sync: everything below about signing in describes version 1.2, and is published here before that version ships, as section 7 promises. Until you install 1.2 and sign in yourself, nothing changes for you.

2.1 It works offline, and keeps working offline

All of the app's activities are built into the app itself. It never needs to contact a server to show you something to do. Without an account it makes no network requests at all; with one, it talks to our server only to carry your own journal between your own devices.

2.2 The account is optional, and the app is complete without it

You can use every screen, every activity, the journal, photos, goals and reminders without ever signing in. Nothing is locked behind an account and nothing ever will be. An account does exactly one thing: it lets the same journal appear on your other phone or tablet.

If you do sign in, you can use Sign in with Apple, a Google account, or a one-time link sent to your email. We never set or see a password. Apple may give us a relay address instead of your real one; that works fine and we never learn the address behind it.

2.2a What syncing sends, and what it does not

With an account, these travel to our server and back to your other devices: the activities you marked as done, the minutes and the notes you wrote about them, your favourites, your quiz answers, your weekly goal and your planned activities.

Photos are separate and are off by default. The app asks you to photograph the thing you made together, not your child. Even so, those photos stay on your phone until you turn photo syncing on yourself, in Settings. Turn it back off and we delete the copies from our servers — not "stop accepting new ones", delete what is there.

Before a photo leaves your phone the app strips its metadata, and our server strips it again on arrival rather than trusting the phone. Location, camera and timestamp do not survive that. Every request for a photo checks that it belongs to the account asking; there are no public or guessable links, and photos are never cached by anything between us and you.

2.2b Where it is kept

On our own servers in the European Union, rented from Hetzner: the database in Germany, photo files in a private bucket in Finland. Not on Vercel, not on a content network, not with an image-processing service. Nobody but us operates any part of that path, and we chose the harder deployment specifically so that stays true.

2.3 No analytics, no advertising, no third-party tracking

The app contains no analytics, no advertising and no third-party tracking SDKs. Besides Flutter — the toolkit it is built with — it includes only three small libraries: one to draw the icons, one to format dates and numbers, and one to save your settings on the device. None of them collect anything or connect to the internet.

2.4 What stays on your device

The only information the app keeps is:

• the activities you have favourited;
• the age bands and categories you picked in the quiz;
• your chosen recommendation style;
• your interface language;
• the activities you marked as done, your weekly goal and planned activities;
• the notes and photos you added to them.

All of it is stored on your own device, in the app's private storage. Without an account none of it is sent anywhere and we cannot see it. With an account, the list above syncs — except photos, which need their own switch as described in 2.2a.

2.5 Deleting your data

Deleting the app deletes everything it stored on the device. If you never signed in, there is no copy anywhere else for us to remove.

If you did sign in: deleting your account — in the app under Profile → Account → Delete account, or by email, see how to delete your account — removes the rows and the photo files together, not the rows alone. Our encrypted server backups drop the deleted data within 12 months as they roll over. You can ask us at [email protected], and you can also just turn photo syncing off, which deletes the photos while keeping the rest.

2.6 Platform data

Apple and Google may collect diagnostic or crash information according to the settings on your device and their own privacy policies. We do not receive any personally identifiable information from them.

2.7 Reminders

If you turn on reminders, the app schedules local notifications on your device. Nothing is sent to us or to anyone else.

3. The Kopa website

3.1 Browsing

You can browse the full catalog and take the quiz on the website without creating an account.

3.2 Signing in (optional)

If you choose to sign in, you can use a Google account or a one-time link sent to your email — we never set or see a password. Signing in with Google shares your email address, and your name and photo if your Google account has them. Signing in by email only ever shares the address you typed.

3.3 What we store for an account

Your email address (and name and photo, if you signed in with Google), the activities you have favourited, and your quiz answers — the age bands, categories and recommendation style you picked. Nothing more.

3.4 Weekly activity emails

The quiz has an optional step for leaving your email to get new activities weekly. If you use it, we store that address together with your quiz answers and site language, only to send you those emails. This does not create an account. Every email contains an unsubscribe link.

3.5 Cookies and browser storage

The site remembers your chosen language in a cookie, and keeps you signed in with a session cookie once you sign in. Before you sign in, your quiz progress and any favourites are kept in your browser only; if you then sign in, they move to your account and are cleared from the browser. There are no advertising or analytics cookies.

3.6 No ads, no analytics, no selling data

The website carries no advertising and no analytics scripts, and we never sell or share your information for marketing.

3.7 Where data is kept

Website account data is stored on servers in the European Union. We keep it for as long as your account exists; when you ask us to delete your account, everything tied to it is removed.

4. About children's information

Kopa is written for the parent, not the child. Children do not sign in or use any account feature. The age information you give is a broad band you choose — like "4–6" — never a birth date or a name. Without an account the app never sends it anywhere; with one, it travels inside your quiz answers to your own other devices and nowhere else. We do not knowingly collect personal information from anyone under 16.

5. Your rights

Under the GDPR you may ask us to access, correct, export or delete the personal data we hold about you, or object to how we use it. For the app there is typically nothing to act on, because we hold nothing. For a website account, email [email protected] and we will respond within 30 days. You also have the right to complain to your local data-protection authority; in Latvia that is the Datu valsts inspekcija.

6. Your choices

Delete the app at any time to remove everything it stored. On the website, remove favourites yourself whenever you like, or contact us to delete your account and everything tied to it.

7. Changes to this policy

If we make changes we will update the date at the top of this page. If the app ever starts making network requests or collecting anything, this page will be updated before that version ships, and the change will be described here.

8. Contact

Questions about this page, or a request to delete your website account: [email protected].