KeLoKe

This is a courtesy translation. If there is any discrepancy, the Spanish version prevails. Read it in Spanish

Privacy policy

Last updated: 6 October 2026 · Version 3

In one sentence: KeLoKe is a closed family network. We don't show ads, we don't sell or share your data with third parties for commercial purposes, and your messages and your children's are stored encrypted on servers inside the European Union (Madrid). Children's data is managed by their parents.

1. Who is responsible

The controller of your data is Óscar Moreno (developer of KeLoKe), based in Ibiza (Balearic Islands, Spain). For any privacy question or to exercise your rights, write to hello@keloke.app.

2. What data we process

  • Account: your name and email from your Google account when you sign in, your display name, your username (@username) and your avatar.
  • Family: the home you belong to, your role (mum/dad or kid), your links with other homes and how you are related to them.
  • Communications: the messages, photos, voice notes, videos, reactions and mentions you send, so they can be delivered to the recipients in your family.
  • Location: only when it is shared voluntarily (a location message or the “I've arrived” notice), through the SOS button, or when a parent checks the location of their child. We don't track you continuously and we don't keep a history of routes: for each child we keep, at most, the location of their last SOS and of their last “I've arrived”, which their parents can see if a later SOS arrives without a location and that last one is less than an hour old. The answers to a parent's location checks are deleted automatically after 48 hours.
  • Age and birthdays: when you sign up we ask your age to know whether you are under 14 and we only store that yes/no, not your age. A minor's date of birth is only stored if their mum or dad enters it from their own account: it tells a kid from a teenager and lets the family celebrate their birthday, and the minor can't change it. If you are an adult, your birthday is optional: you add it yourself, choose whether your age is shown and remove it whenever you like.
  • Technical data: an identifier for each device (phone, tablet or watch) to send you notifications (notification token) and minimal operational data (platform and app version). On a child's devices, also the battery level and whether the device is charging, so that their family can see it and their parents get a notice when it is about to switch off.

KeLoKe doesn't ask for your phone number and doesn't access your contacts.

3. What we use your data for, and on what legal basis

  • Providing the service (messaging, calls, family tree, notifications): performance of the contract for the use of the app.
  • Location and SOS for minors: the vital interest and safety of the child, always under their parents' control. On the same basis we process the battery level of a child's devices: knowing that their watch or phone is about to switch off is part of being able to locate and help them.
  • Network and child safety (preventing outsiders from contacting children, and letting the responsible adults of a child's home see the child's single-use messages): legitimate interest in protecting minors.
  • Data of children under 14: processed with the consent of their parents or guardians (art. 8 GDPR and art. 7 of the Spanish data protection law, LOPDGDD). In KeLoKe a child cannot sign up on their own: it is their mum or dad who registers them and consents to the processing of their data.

4. What we do NOT do

  • We don't show advertising.
  • We don't sell or share your data for commercial purposes.
  • We don't build behavioural profiles.
  • We don't use third-party advertising trackers.

5. Who we share data with (processors)

Only with the technology providers that are essential for the app to work, who process the data on our behalf and under contract:

  • Google (Firebase): authentication, database, file storage, notifications and cloud functions. The data is hosted in the European Union region (Madrid, Spain).
  • Agora: real-time transport of audio and video during calls. Only anonymous technical identifiers travel to this provider, never your name or the content of your messages; calls are not recorded.

Some of these providers may carry out international data transfers covered by the safeguards provided for in the GDPR (standard contractual clauses). The bulk of your data stays in the European Union.

6. Special protection for minors

  • Children don't sign up on their own and cannot link homes: their parents do, acting as administrators.
  • The network is closed: a child can only communicate with the members of their home and of the homes their parents have linked. There is no public discovery and no contact with strangers.
  • A child's location is only visible to the administrators (parents) of their own home. The battery level of their devices is only visible to the members of their own home.
  • Single-use messages sent or received by a child are kept for 14 days so that the responsible adults of their home can see them; after that they are deleted automatically.
  • We apply data minimisation: we keep just what is needed (for example, when you sign up, only the "under 14" flag, not the exact age).

7. How long we keep your data

We keep your data while your account is active and you use the service. You can delete your account at any time from the app itself (menu ⋮ → Settings → Account → Delete my account) or by following the instructions at keloke.app/borrar-cuenta; we delete your personal data except for any we must keep by legal obligation. Messages are stored so that we can show you your history, and you can delete them from the app. Single-use messages are deleted when opened and, at the latest, after 14 days; if there is a child in the chat, the responsible adults of their home can see them during those 14 days, even if the message has been deleted.

8. Security

Your data travels encrypted (TLS/HTTPS) and is stored encrypted at rest (AES-256) on Google's infrastructure. Access is limited by security rules that ensure only the members of your network can see the information meant for them.

9. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by writing to hello@keloke.app. For minors, these rights are exercised by their parents or guardians.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

10. Changes to this policy

If we update this policy, we will change the date above and, if the change is significant, we will let you know within the app.

← Back to home