koko Servives privacy policy

Koko takes steps designed to minimize the personal information we collect.

If you are looking for the general Koko Privacy Policy, you can find it here.  

Services Privacy Policy

Our privacy policy is effective as of September 17, 2025.

One of Koko’s goals is to make mental health and well-being support more accessible. In doing so, Koko understands that the topics discussed via our Koko Service may be personal. We take steps designed to minimize the information we collect. Please keep in mind that you do not have to provide your directly identifying personal information (such as your name, email, or physical address) to use the Koko Service. If you choose to access the Koko Service through WhatsApp, however, your phone number will be used to connect with the WhatsApp API.

This Koko Service Privacy Policy describes how Koko AI, Inc. (“Koko,” “we”, “us” or “our”), a not-for-profit organization, processes the information that we collect through our Koko Service (the “Koko Service”). Koko may provide additional or supplemental privacy policies to individuals for specific products or services that we offer at the time we collect such information.

information we collect

Information you provide to us.  Information (including voluntarily provided personal information) you may provide to us through the Koko Service may include:

  • Contact data, such as your first and last name, salutation, email address, and phone number.
  • Demographic data, such as your city, state, country of residence, and postal code.
  • Communications data based on our exchanges with you, including when you contact us through the Service, social media, or otherwise.
  • Questionnaire responses, such as when you complete a safety plan, mini-course (such as our slide educational experiences), or other well-being related questionnaire that may include your self-reported health-related information.
  • Survey responses, such as when you complete one of our surveys regarding your user experience with the Koko Service.
  • User-generated content data, such as comments, questions, messages, works of authorship, and other content or information that you choose to generate, transmit, or otherwise voluntarily make available on the Koko Service, as well as associated metadata. Metadata includes information on how, when, where and by whom a piece of content was collected and how that content has been formatted or edited. Metadata also includes information that users can add or can have added to their content, such as keywords, geographical or location information, and other similar data.
  • Other data not specifically listed here, which we will use as described in this Koko Privacy Policy or as otherwise disclosed at the time of collection.

Third-party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:

  • Public sources, such as social media platforms and other publicly available sources.
  • Partner organizations, such as the platform or other service that directed you to Koko (including any relevant search terms that you may have entered on the partner organization site).
how we use your information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Koko Service delivery and operations. We may use your information to: 

  • provide, operate and improve the Koko Service and our operations;
  • facilitate Koko Service features such as by providing chat or messaging functionality with other Koko Service users;
  • communicate with you about the Koko Service, including by sending Koko Service-related announcements, updates, security alerts, and support and administrative messages;
  • understand your needs and interests, and personalize your experience with the Koko  Service and our communications; and
  • provide support for the Koko Service, and respond to your requests, questions and feedback.

Marketing. We and our service providers may collect and use your information for marketing purposes:

  • Feedback and shoutouts. We may use your feedback and social media posts about your experience with the Koko Service on the website, for promotions, or otherwise.

Compliance and protection. We may use your  information to:

  • comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;
  • protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
  • audit our internal processes for compliance with legal and contractual requirements or our internal policies;
  • enforce the terms and conditions that govern the Koko Service; and
  • prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

With your consent. In some cases, we may specifically ask for your consent to collect, use or share your personal information, such as when required by law.

how we share your information

We may share your information (including directly identifying personal information, should you choose to provide it) with the following parties and as otherwise described in this Koko Privacy Policy, in other applicable notices, or at the time of collection.

Service providers. 
Entities or individuals that provide services on our behalf or help us operate the Koko Service or our business (such as hosting, information technology, customer support, email delivery, marketing, and consumer research).

Professional advisors. 
Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

Authorities and others.
Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the Compliance and protection purposes described above.

Business transferees. 
We may disclose information in the context of actual or prospective business transactions (e.g., fundraising, the sale, transfer or merger of all or part of our business, assets or shares). For example, we may need to share certain personal information (including voluntarily provided directly identifying personal information) with prospective counterparties and their advisers. We may also disclose such information to an acquirer, successor, or assignee of Koko as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information (including voluntarily provided directly identifying personal information) is transferred to one or more third parties as one of our business assets.

Other users and the public.
Certain of your personal information, such as questions submitted to other users for support, or the advice you volunteer, are shared with other Service users when you use the peer-support feature. Unless you choose to self-disclose directly identifying personal information, your directly identifying personal information will not be shared with other users. This information can be seen, collected and used by others, including being cached, copied, screen captured or stored elsewhere by others (e.g., search engines), and we are not responsible for any such use of this information.

your choices

Opt-out of communications.
You may opt-out of marketing-related emails (such as our newsletter) by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us.

Do Not Track.
Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Declining to provide information.
We need to collect certain personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.

other sites and services

The Service may contain links to websites, mobile applications, and other online services operated by third parties.

In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

Security.
We employ a number of technical, organizational and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

International data transfer.
We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country. We do not, however, intentionally offer our Bot Service to individuals outside the United States.

Children
.
The Koko Service is not intended for use by anyone under 13 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Koko Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

changes to this privacy policy

We reserve the right to modify this Privacy Policy at any time.
If we make material changes to this Koko Privacy Policy, we will notify you by updating the date of this Koko Privacy Policy and posting it on the Koko Service or other appropriate means. Any modifications to this Koko Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Koko Service after the effective date of any modified Koko Privacy Policy indicates your acknowledging that the modified Koko Privacy Policy applies to your interactions with the Koko Service and our business.