Bot Privacy Policy

Effective as of October 4, 2023.

This Bot Privacy Policy describes how Koko AI, Inc. (“Koko,” “we”, “us” or “our”), a not-for-profit organization, processes personal information that we collect through our Koko bot service (the “Bot Service”). Koko may provide additional or supplemental privacy policies to individuals for specific products or services that we offer at the time we collect personal information.

One of Koko’s goals is to make mental health and well-being support more accessible. In doing so, Koko understands that the topics discussed via our Bot Service may be personal. We take steps designed to minimize the personal information we collect.

If you are a donor, potential platform partner, or general website visitor, please see our website Privacy Policy HERE. This Bot Privacy Policy does not apply to you in the context of your interactions with Koko outside of the Bot Service.

Index

• Personal information we collect
• How we use your personal information
• How we share your personal information
• Your choices
• Other sites and services
• Security
• International data transfers
• Children
• Changes to this Bot Privacy Policy
• How to contact us

Personal information we collect

Information you provide to us.

Personal information you may provide to us through the Bot Service or otherwise includes:

• Contact data, such as if you choose to provide your first and last name, salutation, email address, and phone number.
• Demographic data, such as if you choose to provide your city, state, country of residence, and postal code.
• Communications data based on our exchanges with you, including when you contact us through the Bot Service (including communicate with us via chat features), social media, or otherwise.
• Marketing data, such as your preferences for receiving our marketing communications (e.g., our newsletter) and details about your engagement with them.
• Questionnaire responses, such as when you complete a safety plan, mini-course, or other well-being related questionnaire that may include your self-reported health-related information.
• Survey responses, such as when you complete one of our surveys regarding your user experience with the Bot Service.
• User-generated content data, such as comments, questions, messages, works of authorship, and other content or information that you generate, transmit, or otherwise make available on the Bot Service, as well as associated metadata. Metadata includes information on how, when, where and by whom a piece of content was collected and how that content has been formatted or edited. Metadata also includes information that users can add or can have added to their content, such as keywords, geographical or location information, and other similar data. 
• Other data not specifically listed here, which we will use as described in this Bot Privacy Policy or as otherwise disclosed at the time of collection.

Third-party sources.

We may combine personal information we receive from you with personal information we obtain from other sources, such as:

• Public sources, such as social media platforms and other publicly available sources.
• Partner organizations, such as the platform or other service that directed you to Koko (including any relevant search terms that you may have entered on the partner organization site).

Data about others. We may offer features that help users invite their friends or contacts to use the Bot Service, and we may collect contact details about these invitees so we can deliver their invitations. Please do not refer someone to us or share their contact details with us unless you have their permission to do so.

How we use your personal information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Bot Service delivery and operations.

We may use your personal information to:

• provide, operate and improve the Bot Service and our business;
• facilitate Bot Service features such as by providing chat or messaging functionality with other Bot Service users;
• facilitate your invitations to friends who you want to invite to join the Bot Service;
• communicate with you about the Bot Service, including by sending Bot Service-related announcements, updates, security alerts, and support and administrative messages;
• understand your needs and interests, and personalize your experience with the Bot Service and our communications; and
• provide support for the Bot Service, and respond to your requests, questions and feedback.

Marketing

We and our service providers may collect and use your personal information for marketing purposes:

• Direct marketing. We may send you direct marketing communications (such as our newsletter). You may opt-out of our marketing communications as described in the Opt-out of marketing section below.
• Feedback and shoutouts. We may use your feedback and social media posts about your experience with the Bot Service on the website, for promotions, or otherwise.

Compliance and protection.

We may use your personal information to:

• comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;
• protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
• audit our internal processes for compliance with legal and contractual requirements or our internal policies;
• enforce the terms and conditions that govern the Bot Service; and
• prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

With your consent.

In some cases, we may specifically ask for your consent to collect, use or share your personal information, such as when required by law.

How we share your personal information

We may share your personal information (including directly identifying information, should you choose to provide it) with the following parties and as otherwise described in this Bot Privacy Policy, in other applicable notices, or at the time of collection.

Service providers. Entities or individuals that provide services on our behalf or help us operate the Bot Service or our business (such as hosting, information technology, customer support, email delivery, marketing, and consumer research).

Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the Compliance and protection purposes described above.

Business transferees. We may disclose personal information in the context of actual or prospective business transactions (e.g., fundraising, the sale, transfer or merger of all or part of our business, assets or shares). For example, we may need to share certain personal information with prospective counterparties and their advisers. We may also disclose your personal information to an acquirer, successor, or assignee of Koko as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.

Other users and the public. Certain of your personal information, such as questions submitted to other users for support, or the advice you volunteer, are shared with other Service users when you use the peer-support feature. Unless you self-disclose directly identifying information in the context of the peer-support feature, your directly identifying information will not be shared with other users. This information can be seen, collected and used by others, including being cached, copied, screen captured or stored elsewhere by others (e.g., search engines), and we are not responsible for any such use of this information.

Your choices 

Opt-out of communications.

You may opt-out of marketing-related emails (such as our newsletter) by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us. Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails. 

Do Not Track.

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Declining to provide information.

We need to collect certain personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.

Other sites and services

The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

Security

We employ a number of technical, organizational and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

International data transfer

We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country. We do not, however, intentionally offer our Bot Service to individuals outside the United States.

Children

The Bot Service is not intended for use by anyone under 13 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Bot Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

Changes to this Bot Privacy Policy

We reserve the right to modify this Bot Privacy Policy at any time. If we make material changes to this Bot Privacy Policy, we will notify you by updating the date of this Bot Privacy Policy and posting it on the Bot Service or other appropriate means. Any modifications to this Bot Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Bot Service after the effective date of any modified Bot Privacy Policy indicates your acknowledging that the modified Bot Privacy Policy applies to your interactions with the Bot Service and our business.

How to contact us

Email: [email protected]