Privacy policy

This notice covers the KUBO marketing website, its quote, support and partner forms, and the MyKUBO app. KUBO Play and the educator portal are separate services; consult the notices provided in those services for account and student data.

Who is responsible

KUBO is the controller responsible for personal information we process through this website and MyKUBO. For privacy questions or to exercise your rights, contact:

What we collect and why

• Enquiries: the name, email, school or company, phone number, country, purchase interests and message you provide. We use these to answer you, prepare quotes, provide support and discuss partnerships. Our GDPR basis is our legitimate interest in handling business enquiries (Article 6(1)(f)), or taking steps you request towards a contract with you and performing that contract (Article 6(1)(b)).
• Website delivery and security: connection information such as IP address, request time, requested page and browser information may be processed by our hosting infrastructure. Form security uses a spam-check response and temporary submission records. Our basis is our legitimate interest in operating and protecting the website (Article 6(1)(f)).
• Legal obligations: where records must be kept or disclosed by law, we process the necessary information on that basis (Article 6(1)(c)).

Information comes from you and your browser. Name and email are required on all forms, a company name on partner applications, and a message on support enquiries. We need these to handle your request; other fields are optional. Sending an enquiry does not subscribe you to marketing.

Your browser’s time zone and language can suggest a relevant market or partner locally on your device. We do not request precise location or create a visitor profile from these settings. We do not make automated decisions that have legal or similarly significant effects on you.

MyKUBO for iOS and Android

MyKUBO is a maintenance utility for teachers and parents who manage KUBO robots, not a student learning service. It connects to your robot to install firmware updates, display robot information and change supported settings. It does not require an account and has no advertising, purchases or subscriptions.

Device permissions. When you choose “Connect to KUBO”, MyKUBO requests permission to discover and connect wirelessly to your KUBO robot through your device’s permission system. On Android, this may be called Nearby devices; older Android versions may require location permission to discover nearby robots. You choose whether to grant the requested permission and can decline or revoke it in your device settings. Without this access, features that communicate with the robot will not work. We use scanning to find robots, not to determine or track your location.

Information handled locally. The app reads the robot’s wireless device identifier, name, hardware and firmware versions, and supported usage counters such as starts, runtime, battery information and TagTile counts. This information is handled on your device and is not uploaded to KUBO. A chosen nameplate name and supported settings are saved on the robot and can remain there after you close or uninstall the app. Robot names can be visible to nearby devices scanning for wireless connections; use the supplied nameplates rather than personal names.

Diagnostics and retention. Connection and update logs are held in the running app and may also appear in your device’s developer console. The app does not automatically send them to KUBO. Ending the app’s running session clears its in-memory records; uninstalling it does not erase information stored on the robot. If you send us logs for support, we handle them as enquiry correspondence under this notice.

Internet connections. The app downloads the firmware list and update files from KUBO’s firmware hosting service at kuboplay.app, hosted by Hetzner. The hosting service receives connection information, such as your IP address, request time and requested file, to deliver downloads and protect the service. The downloaded file can indicate the robot model or firmware being requested. We rely on our legitimate interest in delivering and securing updates (GDPR Article 6(1)(f)); related logs are retained only as needed for delivery, fault investigation and security. The provider and international-transfer provisions below also apply to this hosting.

Firmware requests use HTTPS and do not include account cookies or a referring-page address. Robot identifiers, names and usage counters are not included in firmware requests.

Deletion and controls. There is no MyKUBO account to delete. Close the app to end its session and revoke wireless permissions in your device settings to stop future robot access. To change a stored robot name, connect and select another supplied nameplate. Uninstalling MyKUBO does not reset the robot’s usage counters or settings. For deletion of any support correspondence or server records that can be associated with you, contact us using the details above; the privacy rights and lawful retention exceptions below apply.

MyKUBO includes its fonts locally and has no advertising or analytics trackers. It does not ask for a child’s name or create student profiles. Permission to connect wirelessly controls access to the robot; it does not authorise unrelated uses of information. The contact details and privacy rights in this notice also apply to MyKUBO.

Who receives information

Enquiries are delivered to our team by email. Hosting, email delivery and mailbox providers process information needed to run those services. We require providers handling personal information on our behalf to protect it under applicable data-protection obligations and our instructions. We use encrypted connections for app downloads and website submissions, and restrict access to personal information to those who need it for the stated purposes. Our website forms use self-hosted spam protection, so no external CAPTCHA provider receives your form details.

If your request needs a local sales or support partner, we may share the contact and enquiry details needed to help you. That partner handles its own customer relationship under its privacy notice. Information may also be disclosed to professional advisers or authorities when necessary for a legal obligation or legal claim.

If personal information is transferred outside the EEA, applicable GDPR transfer requirements must be met, such as an adequacy decision or the European Commission’s standard contractual clauses with any necessary additional safeguards. Contact us for information about the safeguards relevant to your data or a copy of them.

How long information is kept

Enquiry correspondence is kept for as long as needed to resolve the request and manage the resulting customer or partner relationship. Any longer retention must be needed for a legal recordkeeping duty or to establish, exercise or defend a legal claim. Security logs are kept only as needed to investigate faults or abuse.

Temporary form records expire after one hour for email rate limits and 24 hours for duplicate-submission protection; expired records are cleared on subsequent requests or when the server restarts. Our email delivery system is configured to retain raw message content for up to seven days and delivery records for 30 days. These limits do not delete the correspondence from the receiving mailbox.

Cookies and online tracking

This website has no advertising or analytics trackers. Fonts and videos are served by us. A local browser setting remembers when you dismiss our cookie notice for 180 days. See Cookies for details.

We do not sell personal information or share it for cross-context behavioural advertising, and do not use it for targeted advertising. We do not permit third-party trackers to collect your activity across websites here. This applies whether or not your browser sends Global Privacy Control or Do Not Track signals; these signals do not change the necessary processing described above.

Your privacy rights

Under the GDPR, subject to its conditions, you can request access, correction, deletion, restriction or a portable copy of your data, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.

Email yourfriends@kubo-robot.com with your request. We may need information to verify your identity. We respond within one month under the GDPR; if a permitted extension is needed, we explain why within that month. You may complain to Denmark’s Data Protection Agency (Datatilsynet) or your local supervisory authority.

US residents may also have rights to know about, access, correct or delete personal information, obtain a copy, and opt out of sale, sharing or targeted advertising where applicable state law covers the processing. Use the same email to make a request or, where allowed, appeal a refusal. An authorised agent may act for you subject to verification. We will respond within the applicable statutory period and will not discriminate against you for exercising a protected right.

Children’s information

Our enquiry forms are for educators, parents and business contacts. Please do not send student records or sensitive personal information. We do not knowingly collect personal information from children under 13 through these forms. If you believe a child has submitted information, contact us so we can address it and delete it as required. The on-page robot simulator runs locally and does not send us children’s code or activity.

Other websites and changes

Links to partners and other KUBO services take you to websites with their own privacy and cookie notices. We update this notice when our practices change and show the revision date above. Where the law requires further notice or consent, we provide it before the relevant change takes effect.