Privacy
How we look after your data and your child's.
Last updated: November 1, 2026
Who is responsible
NIVORA OÜ, registration number 17301734, Narva mnt 5, 10117 Tallinn, Estonia, is the data controller. If you have questions, write to info@puko.dk.
When you visit the site
We use no tracking, no advertising cookies and no analytics tools on the site. The site is hosted by Vercel, and fonts and an animation library load from Google Fonts and cdnjs. They can therefore see your IP address when the page loads. Puko stores small settings in your own browser.
When you buy
| Data | Why | Basis |
|---|---|---|
| Name, address, email | Sending your order and helping you | Contract, GDPR art. 6(1)(b) |
| Order and payment | Bookkeeping | Legal duty, art. 6(1)(c) |
| Email for news | Telling you when something new happens | Consent, art. 6(1)(a) |
When you use the app and Puko
| Data | Why | Basis |
|---|---|---|
| Parent's account and membership | Providing Puko+ | Contract, art. 6(1)(b) |
| Child's first name and age | Adapting content to age | Parent's consent, art. 6(1)(a) |
| Conversations and what Puko remembers | Answering and remembering from day to day | Parent's consent, art. 6(1)(a) |
Children
Puko is for children, but an adult always creates the account and gives consent. A child under 13 cannot give consent. Consent can always be withdrawn, and we then delete the child's data. We never use children's data for advertising.
Who we share with
- Vercel: hosting.
- Payment: Stripe.
- Shipping: our carrier.
- AI platform: Tuya.
- AI: European-hosted services for speech to text, language model and voice.
- Accounting: our accounting system.
They only process data on our instructions and under a data processing agreement. We never sell data. Everything is stored in the EU on servers in Frankfurt, Germany. No data is stored outside the EU.
How long
- Bookkeeping: 5 years after the end of the financial year, because the law requires it.
- Conversations: 90 days by default. You can choose 0-365 days in the app and delete them at any time.
- What Puko remembers: until you delete it.
- Account: 30 days after cancelling, together with conversations and memory. You get a confirmation by email.
- Audio: your child's voice becomes text right away and the audio is deleted. We store no audio.
Your rights
You can see your data and your child's, have it corrected or deleted, limit its use, take it with you and object. You can do much of this yourself in the app. We handle the rest if you write to us.
Complaints
You can complain to the Estonian data protection authority, Andmekaitse Inspektsioon, or to the authority where you live.