Effective August 3, 2026
Oji is a creative playground for children ages 3–7, run by their parent or guardian. We built Oji to be safe by design, and we collect as little information as possible. This policy explains what we collect, why, and the choices you have. It is written for the grown-up who sets up and supervises the account.
Oji accounts are created and controlled by a parent or guardian. A child does not create an account, enter a name, email, birthday, or any other personal detail, and does not sign in on their own. All settings live behind a parental gate.
Guardian account. When you create an account we store the email address and password you provide (the password is handled by our authentication provider and stored only in hashed form). We use this to sign you in and secure the account.
What your child makes. A child builds picture prompts from a fixed set of emojis and sight words. We save each picture they make, along with the emojis and words they chose, the art style, and — if they ask for a story about it — the story text and its narration audio, so they can look back at their pictures in the app. If they ask for a song about a picture, we also save that song’s audio and its lyrics with the picture. The lyrics are generated from the same on-screen emojis and words your child chose — no new information is collected — and are checked for safety before the song is made. We do not ask children to type free text; inputs are limited to the on-screen choices and are filtered before anything is generated. See Saved pictures and sharing below for how long we keep these and who can see them.
Usage and reliability data. We collect product-analytics events (for example: a picture was made, a style was chosen, a daily limit was reached) and basic device/browser information to understand how the app is used and to fix problems. Analytics identify the account only by a random, opaque account identifier — never by your email or any directly identifying detail.
Session replay (strictly masked). To diagnose usability and reliability issues, we record anonymized playback of how the app is used. This is strictly masked: all text and all input fields are hidden before the recording leaves the device, so the replay shows layout and interactions but not readable content. We never record the parental gate or the parent settings screens.
Every picture is saved. When your child makes a picture, we save it to your account automatically so they can find it again in the app. There is nothing for them to tap to save it, and nothing they can accidentally lose.
Sharing is anonymous, and it is on by default. Pictures from your account may be shown to other Oji users inside the app. When that happens, nothing about who made the picture or when goes with it — no name, no account identifier, no date or time, and no likes, counts, or comments. Other users see only the picture, the emojis and words that made it, and its story if one was created. Pictures are shown in a random order rather than newest first, specifically so that timing cannot be inferred.
You can turn this off. Open the parent settings behind the gate (the gear icon) and switch off Share my child’s pictures. Your account’s pictures leave the shared pool immediately. A separate switch, Show other kids’ pictures, controls whether your child sees anyone else’s pictures at all. Both are on by default.
Shared pictures can become a printable coloring book. Anyone using Oji can choose up to ten saved pictures — their own child’s, and pictures other families have shared — and turn them into a coloring book. We redraw each one as black-and-white line art, put them into a PDF, and email that PDF to the account holder so a grown-up can print it. This means a picture your child shared can leave Oji as a file on someone else’s device, which they can print, keep, or pass on. It stays anonymous — nothing about who made it or when goes with it — but once a file has been emailed we cannot take it back.
The same switch covers this. With Share my child’s pictures turned off, your account’s pictures are not in the shared pool at all, so they cannot be chosen for anyone else’s coloring book.
If you see something wrong. Any shared picture can be reported from the app. Reporting is behind the parental gate, and a reported picture is hidden from everyone immediately, before anyone reviews it.
We do not knowingly collect personal information from children. We do not ask children for their name, age, photo, voice, location, or contacts, and there is no free-text entry.
Oji is not a social network. There is no chat, no comments, no profiles, no friends or followers, and no way for a child to send anything to another person or to find out who made a picture they see. Sharing is one-way and anonymous in both directions.
We do not sell personal information, and we do not use children’s activity to serve targeted advertising.
We share data only with service providers who process it on our behalf, under contract, to run Oji:
We may also disclose information if required by law or to protect the safety and rights of our users.
As the parent or guardian you can review the information associated with your account, ask us to delete it, and stop further collection by discontinuing use. Because analytics are tied only to an opaque account identifier, deleting the account removes the link between that identifier and you.
Deleting your child’s pictures yourself. You do not need to contact us to do this. In the parent settings behind the gate, Delete all pictures permanently removes every saved picture on the account, including any that were being shared, along with the stored image and story files. Your child can also delete an individual picture from their own gallery.
To make any other request, contact us at privacy@oji.kids. We will verify that you are the account holder before acting on a request.
We keep account data for as long as the account is active. Analytics and masked session-replay data are retained for a limited period for product and reliability analysis, then deleted or aggregated. You can ask us to delete your account data at any time.
Saved pictures are never deleted automatically. We keep every picture your child makes for as long as the account is active. Nothing ages out, and making a new picture never removes an older one.
Pictures are only ever deleted because someone chose to delete them: your child removing one from their own gallery, or you using Delete all pictures in the parent settings. That deletion is permanent — the picture, its story and song audio, and any coloring page made from it are removed from our storage and cannot be recovered.
There is one limit, and it deletes nothing: a child can keep up to 50 favourites. Marking a 51st simply un-hearts the oldest one. The picture itself stays exactly where it was.
We use industry-standard measures to protect data in transit and at rest, and we limit access to the people and services that need it. No method of transmission or storage is perfectly secure, but we work to protect your information and to promptly address any issues.
If we make material changes to how we handle information, we will update this page and revise the effective date above. We encourage you to review it periodically.
Questions about this policy or your data? Email privacy@oji.kids.