Cookie and Tracking Policy

How we use cookies and tracking technologies.

Octo Cookie & Tracking Policy

Last updated: 28 September 2025

This Cookie & Tracking Policy explains how Octo ("we", "us") uses cookies, software development kits (SDKs), and similar technologies in the Octo mobile app, parental dashboard, websites, and related services (the "Services").

1. What are cookies and similar technologies?

  • Cookies are small text files stored on a browser or webview when you visit websites or embedded content.
  • SDKs and tracking pixels perform similar functions inside native apps, helping us understand usage and deliver functionality.
  • Device identifiers (such as IDFA, push notification tokens, or installation IDs) allow us to send alerts or perform diagnostics.

2. Why we use them

| Type | Purpose | Example Tools | Legal Basis | | --- | --- | --- | --- | | Strictly necessary | Authentication, load balancing, security logging, remembering parental settings | First-party session cookies, LiveKit connection tokens | Legitimate interests / Contract | | Analytics & performance | Measure usage, improve features, monitor crashes | Privacy-centric analytics, Apple Analytics, self-hosted telemetry | Consent where required (opt-in for optional analytics) | | Functionality | Store accessibility and voice preferences, keep child avatars consistent across sessions | Local storage entries, in-app preference flags | Legitimate interests | | Push notifications & device tokens | Deliver alerts about child activity or account events | Apple Push Notification service (APNs) tokens | Consent |

We do not use tracking technologies for behavioural advertising or targeted marketing to children.

3. Managing consent

  • On first launch, the app and parental web dashboard present a consent prompt describing optional analytics technologies.
  • Parents or guardians can update preferences at any time via in-app privacy settings or device controls.
  • Operating system settings (e.g., iOS App Tracking Transparency, Notifications) provide additional controls over identifiers and push permissions.

4. Third-party technologies we rely on

Depending on the features you enable, we may use:

  • Apple Push Notification service (APNs) for alerts;
  • LiveKit SDK for real-time audio/video sessions;
  • ElevenLabs SDK to process and return speech audio;
  • Stripe SDK to handle payments and subscription validation;
  • Analytics & crash tools that respect our data minimisation settings.

These providers may set cookies or generate device identifiers required to deliver their services. They are bound by contracts limiting use of data to supporting Octo.

5. Your choices

  • Adjust in-app privacy controls to disable optional analytics or telemetry.
  • Manage cookies in your browser (e.g., Safari → Preferences → Privacy) or delete them using in-app options.
  • Manage app permissions on iOS via Settings → Privacy & Security → Tracking and Settings → Notifications.
  • Opting out of optional cookies does not affect strictly necessary processing required to run the Services, but some features may not function if strictly necessary cookies are blocked.

6. Data retention

Identifiers related to cookies or SDKs are retained only for as long as needed to deliver the relevant feature. Analytics identifiers are rotated or pseudonymised regularly, and push notification tokens are deleted when you disable notifications or delete your account.

7. Updates

We may update this policy to reflect new technologies, partners, or legal requirements. When we do, we will update the "Last updated" date and notify account holders where required.

For questions, contact support@octo.toys.