Koydo Terms of Service

Effective Date: May 9, 2026 Last Updated: May 9, 2026 Version: 2026-05-09 (supersedes 2026-04-02) Plain-language summary: /legal/privacy-summary (companion summary for the Privacy Policy; the same hash anchors both)

These Terms of Service ("Terms") constitute a legally binding agreement between you ("you," "your," or "User") and KOYDO LLC ("Koydo," "we," "us," or "our"), governing your access to and use of the Koydo platform, including the Koydo website, mobile applications, and all related services (collectively, the "Service"). By creating an account, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree to these Terms, you must not access or use the Service. IMPORTANT NOTICE: PLEASE READ THESE TERMS CAREFULLY. THEY CONTAIN A BINDING ARBITRATION PROVISION (SECTION 11) AND A CLASS ACTION WAIVER THAT AFFECT YOUR LEGAL RIGHTS. BY USING THE SERVICE, YOU AGREE TO RESOLVE DISPUTES THROUGH BINDING INDIVIDUAL ARBITRATION AND WAIVE YOUR RIGHT TO PARTICIPATE IN CLASS ACTIONS OR JURY TRIALS, EXCEPT WHERE PROHIBITED BY APPLICABLE LAW. YOU MAY OPT OUT OF ARBITRATION WITHIN 30 DAYS OF FIRST ACCEPTING THESE TERMS (SEE SECTION 11.3).

Koydo is an adaptive educational platform designed for learners ages 3 through adult. The Service provides access to a portfolio of educational applications, including but not limited to interactive lessons, educational games, AI-powered tutoring, language learning, virtual laboratories, flashcard systems, and supplementary learning tools (collectively, "Applications"). Koydo currently offers approximately thirty-one (31) Applications across its ecosystem, which may be expanded, modified, or discontinued at Koydo's discretion. The Service employs proprietary adaptive learning technology, including the Cortex intelligence engine and KoydoSense diagnostic framework, to personalize the educational experience for each learner. The Service is available via web browsers, iOS applications, and Android applications. The Service is intended to supplement, and not to replace, formal education, professional instruction, or licensed educational services.

2.1 Parent Accounts

A Parent Account is the primary account type for households. A parent or legal guardian ("Parent") creates a Parent Account and may create one or more Child Profiles under that account. The Parent is responsible for all activity conducted through their Parent Account, including activity on associated Child Profiles.

2.2 Child Profiles

Child Profiles are created by a Parent under a Parent Account. Child Profiles are subject to parental supervision and are governed by the restrictions set forth in Section 3 (Age Requirements) and the Koydo Privacy Policy. A Parent may manage, restrict, or delete any Child Profile at any time through the Parent Dashboard.

2.3 Institutional Accounts

Institutional Accounts are available to accredited educational institutions, school districts, and homeschool cooperatives ("Institutions"). Institutional Accounts are governed by a separate institutional agreement, which supplements these Terms. The authorized representative of an Institution who creates an Institutional Account represents and warrants that they have the authority to bind the Institution to these Terms.

2.4 Student Standalone Accounts

Individuals who are eighteen (18) years of age or older may create a Student Standalone Account without parental oversight. Student Standalone Account holders are solely responsible for their own use of the Service.

3.1 Minimum Age for Account Creation

You must be at least thirteen (13) years of age to create a Koydo account. Individuals under the age of thirteen (13) may only access the Service through a Child Profile created and managed by a Parent or legal guardian.

3.2 COPPA Compliance

For users located in the United States, Koydo complies with the Children's Online Privacy Protection Act ("COPPA"), 15 U.S.C. §§ 6501–6506, and the Federal Trade Commission's implementing rule at 16 C.F.R. Part 312, including the Amended Rule effective April 22, 2026, which expands the definition of personal information to include biometric identifiers (including voiceprints) and requires separate, specific parental consent for any third-party disclosure of a child's personal information distinct from consent for Koydo's own collection and use. Before any personal information is collected from a child under the age of thirteen (13), Koydo obtains Verifiable Parental Consent ("VPC") from a parent or legal guardian. Koydo's primary VPC method is the FTC-blessed "approval and authorization" method described at 16 C.F.R. § 312.5(b)(2)(iv): a one-cent ($0.01 USD) authorization to a parent-owned credit or debit card that is immediately voided and never settled. The authorization confirms that an adult with access to a payment instrument has reviewed and approved the consent notice. Alternative VPC methods (signed consent form, government identification check, video-conference verification) are available on request to privacy@koydo.app. A Parent may review the personal information collected from their child, request deletion of such information, export the information in machine-readable form, disable Koydo Intelligence, and revoke consent at any time through the Parent Dashboard or by contacting us at privacy@koydo.app. Material changes to Koydo's data practices that affect children's data require Koydo to re-obtain VPC before the changes apply to existing under-13 accounts; until re-consent is obtained, those accounts remain on the previously-consented practices.

3.3 AgeGated Content

Certain Applications or content within the Service may be restricted by age. Koydo uses age-tier classifications to ensure that content is developmentally appropriate. Users may not circumvent, bypass, or attempt to override any age-gating mechanism.

3.4 International Users

For users located in the European Economic Area ("EEA"), the United Kingdom, or other jurisdictions that impose age restrictions on digital services for minors, the applicable minimum age requirements of the relevant jurisdiction shall apply. Where required, parental or guardian consent must be obtained for users below the applicable age of digital consent.

4.1 Subscription Plans

Koydo offers the following subscription tiers for its main application:

• Koydo Free Limited -- No charge. Limited access to lessons, one learner profile, one language, no AI Tutor.
• Koydo Plus -- $9/month or $90/year (USD). One learner profile, AI Everyday Tutor, four included languages, full lesson catalog.
• Koydo Family -- $17/month or $169/year (USD). Up to four learner profiles, AI Everyday Tutor, all languages, family management tools.
• Koydo Homeschool -- $20/month or $200/year (USD). One learner profile, all languages, AI Everyday Tutor, gradebook, lesson planner, state guidance, document vault.
• Koydo Homeschool Family -- $30/month or $300/year (USD). Up to four learner profiles with all Homeschool features.

Additional standalone microapp subscriptions (including but not limited to Translator, Flashcards, Sky Tracker, Mirror, Virtual Labs, Wardrobe Studio, and Music) are available at separate price points. Pricing for standalone microapps is displayed at the time of purchase within the applicable Application. Koydo reserves the right to modify pricing at any time. Any price changes to existing subscriptions will take effect at the start of the next billing cycle following thirty (30) days' notice.

4.2 InApp Purchases

Certain features, content collections, or standalone products may be available as one-time in-app purchases. All in-app purchases are final upon completion, subject to the refund provisions in Section 4.4.

4.3 AutoRenewal

All paid subscriptions renew automatically at the end of each billing period (monthly or annual, as applicable) at the then-current price unless canceled before the renewal date. You may cancel your subscription at any time through your account settings, the Apple App Store, or the Google Play Store, as applicable. Cancellation will take effect at the end of the current billing period; no partial refunds are issued for unused portions of a billing period. You authorize Koydo (or the applicable app store) to charge your designated payment method on a recurring basis until you cancel your subscription.

4.4 Refund Policy

Koydo's refund policy is tiered by plan type, designed to comply with state auto-renewal statutes (including California Business & Professions Code §§ 17600–17606, New York General Business Law § 527-a, and Vermont 9 V.S.A. § 2454a) and to provide a clear, predictable, and easy-to-use refund process. (a) Annual subscriptions purchased through Koydo (Stripe). You may cancel and request a full refund within fourteen (14) calendar days of the initial purchase or renewal — no questions asked. After the 14-day window, you may cancel and receive a pro-rata refund of the unused months (less a reasonable administrative fee not to exceed $5 USD or the equivalent in your local currency). Refund requests should be submitted to billing@koydo.app. (b) Monthly subscriptions purchased through Koydo (Stripe). You may cancel at any time through your account settings. Cancellation takes effect at the end of the current billing period; the current month's charge is not refunded. (c) Trial-to-paid conversions. If your free trial converts to a paid subscription and you change your mind, you may request a full refund of the conversion charge within seven (7) calendar days of the charge. (d) Apple App Store and Google Play Store purchases. Refund requests for purchases made through Apple or Google are handled by Apple or Google, respectively, in accordance with their applicable refund policies. Koydo does not directly process refunds for those purchases. Where permitted by Apple or Google, Koydo will support reasonable refund requests escalated through these channels. (e) Institutional / school accounts. Refunds for Institutional Accounts are governed by the applicable institutional agreement, not by this Section. (f) State-specific rights. Residents of California, New York, Vermont, and other jurisdictions with auto-renewal or consumer-protection statutes may have additional rights under their state law. Nothing in this Section limits any non-waivable consumer right under applicable law.

4.5 Free Trials

Koydo may offer free trial periods for certain paid features or subscriptions. Unless you cancel before the end of the trial period, your subscription will automatically convert to a paid subscription at the applicable rate. The duration of any free trial will be disclosed prior to activation.

4.6 Regional Pricing

Subscription pricing may vary by region and currency. The applicable price in your local currency will be displayed at the time of purchase. Regional pricing is determined by Koydo and is subject to change.

5.1 KI Is Independent of These Terms

Accepting these Terms of Service does NOT constitute consent to Koydo Intelligence ("KI") data collection or processing. KI is a separate, opt-in feature that uses aggregated and anonymized learning interaction data to improve Koydo's adaptive algorithms, curriculum quality, and educational outcomes. Consent to KI is governed exclusively by the Koydo Intelligence Consent Agreement, which is presented separately from these Terms. You are not required to consent to KI to use the Service.

5.2 Verifiable Parental Consent Required for Minors

For users under the age of thirteen (13), KI participation requires Verifiable Parental Consent independent of any consent provided for general Service use. A Parent may not be enrolled in KI on behalf of a child as part of the general account creation process.

5.3 Withdrawal of KI Consent

A Parent or User may disable KI participation at any time through account settings or the Parent Dashboard. Upon withdrawal of KI consent, Koydo will cease collection of KI-related data from the affected profile within a commercially reasonable timeframe, not to exceed seventy-two (72) hours. Previously collected and anonymized aggregate data that cannot be re-identified will be retained.

5.4 KI Does Not Affect Service Functionality

Opting out of KI will not degrade, limit, or otherwise adversely affect the User's access to or experience with the Service.

6.1 Voice Recording Processing

Koydo Distill allows users to capture voice recordings for transcription into written notes. Voice recordings are transmitted to Koydo's servers solely for the purpose of generating a text transcription.

6.2 Recording Retention

Voice recordings are automatically deleted from Koydo's servers upon completion of transcription processing unless the User explicitly saves the recording. Users may elect to save recordings, in which case the recordings will be stored in the User's account and retained until the User deletes them or closes their account.

6.3 Transcript Ownership

All transcripts generated by Koydo Distill are owned by the User. Koydo does not claim any ownership interest in User-generated transcripts. Koydo's license to User-generated transcripts is limited to what is necessary to provide and maintain the Service.

6.4 Processing Limitations

Koydo Distill uses third-party speech-to-text services for transcription. Koydo does not guarantee the accuracy of any transcription. Users are responsible for reviewing and editing transcripts for accuracy.

You agree not to engage in any of the following prohibited conduct:

1. Harassment and Abuse. Harassing, bullying, threatening, or intimidating any other User, including through direct messages, collaborative workspaces, or any other feature of the Service.
2. Cheating and Academic Dishonesty. Manipulating assessment scores, exploiting software vulnerabilities to alter learning progress, or using automated tools to complete lessons or assessments on behalf of a User.
3. Credential Sharing. Sharing account credentials with any third party, or permitting any unauthorized person to access your account. Each account and profile is for the exclusive use of the individual to whom it is assigned.
4. Age Gate Circumvention. Providing false age information, circumventing age verification mechanisms, or enabling a minor to access age-restricted content.
5. Unauthorized Access. Attempting to access any portion of the Service, other User accounts, or Koydo systems to which you are not authorized.
6. Reverse Engineering. Decompiling, disassembling, reverse engineering, or otherwise attempting to derive the source code of any Koydo software, except to the extent expressly permitted by applicable law.
7. Harmful Content. Uploading, transmitting, or distributing any content that is unlawful, defamatory, obscene, or otherwise objectionable, or that contains viruses, malware, or other harmful code.
8. Commercial Exploitation. Using the Service for any commercial purpose not expressly authorized by Koydo, including reselling access, scraping content, or using the Service to develop competing products.

Koydo reserves the right to investigate and take appropriate action against any User who violates this Section, including suspension or termination of the User's account.

8.1 Koydo Content

Koydo owns or licenses all curriculum, lesson content, educational materials, AI-generated content (including AI Tutor responses, adaptive learning outputs, and generated educational materials), game assets, platform features, user interface designs, and all other content provided through the Service ("Koydo Content"). Koydo Content is protected by copyright, trademark, and other intellectual property laws. You may not reproduce, distribute, modify, or create derivative works of Koydo Content except as expressly permitted by these Terms or with Koydo's prior written consent.

8.2 User Content

You retain ownership of all content that you create, upload, or submit through the Service, including but not limited to quiz answers, notes, voice recordings, transcripts, uploaded files, and any other User-generated content ("User Content"). By submitting User Content to the Service, you grant Koydo a non-exclusive, royalty-free, worldwide license to store, process, and display User Content solely as necessary to provide the Service to you. This license terminates when you delete the applicable User Content or close your account, subject to reasonable backup and archival periods.

8.3 Feedback

If you provide Koydo with suggestions, ideas, or feedback regarding the Service ("Feedback"), you grant Koydo an unrestricted, irrevocable, perpetual, royalty-free license to use, modify, and incorporate such Feedback into the Service without obligation to you.

8.4 AI CoCreated Content

Many Koydo experiences (including but not limited to Koydo StoryForge, Storybooks, Art Studio, Music Maker, Music Universe, Sketch, Scribe, Writes, and adaptive learning activities) involve a combination of User input and Koydo's AI to produce a finished work ("Co-Created Content"). United States copyright law and current U.S. Copyright Office guidance (consistent with Thaler v. Perlmutter) provide that purely machine-generated output is not copyrightable; only the human-authored portion is eligible for copyright. The following rules govern Co-Created Content regardless of copyrightability. (a) Ownership. As between you and Koydo, you (or, for a Child Profile, the Parent on behalf of the child) retain all rights you may have in the User-authored input and in the combined Co-Created Content. Koydo does not claim ownership of Co-Created Content. (b) Limited display license to Koydo. You grant Koydo a non-exclusive, royalty-free license to store the Co-Created Content and display it to (i) you, (ii) the Parent or guardian of the User who created it, and (iii) the User's authorized educational institution (if applicable), all solely within the Service. This license terminates when you delete the Co-Created Content or close your account, subject to reasonable backup and archival periods. (c) Marketing and showcase use — separate opt-in. Koydo will not use Co-Created Content created by or for a Child Profile in any external marketing, advertising, public showcase, social media, or commercial display unless the Parent has provided separate, written, affirmative opt-in consent through the Parent Dashboard. The default for every account is off. Opt-in is granular per child and per work. Opt-in may be withdrawn at any time, in which case Koydo will cease external display of the affected works and remove them from active marketing channels within 30 days. (d) Inspiration to other learners — separate opt-in. Koydo may, with separate Parent opt-in (default off), display anonymized examples of Co-Created Content (with names, identifiers, and any other personal information removed) to other learners as inspiration. Anonymization is enforced by automated and manual review. (e) No model training on child Co-Created Content. Koydo does not, and does not permit any subprocessor to, use Co-Created Content created by or for a Child Profile to train, fine-tune, evaluate, or otherwise improve any AI model. This commitment is reinforced by the zero data retention ("ZDR") configuration with our AI model providers described in the Privacy Policy. (f) Aggregate, anonymized patterns. Koydo may analyze anonymized, aggregate patterns across Co-Created Content (for example, "what activity types lead to higher engagement") for product improvement and pedagogical research. No individual content, identifier, or work product is traceable in such analyses. (g) Adult Co-Created Content. For Users 18 and older, the same display license in (b) applies. Marketing/showcase use of adult Co-Created Content requires affirmative opt-in via account settings; the default is off. Plain-language summary: Your child's creations belong to your child. We don't show them to anyone outside your family or your child's school without your written permission. We don't use your child's work to train AI models. Period.

9.1 Trademarks

"Koydo," "KoydoSense," "Cortex," "Cantavis," and all related logos, product names, and service names are trademarks or registered trademarks of KOYDO LLC (collectively, "Koydo Marks"). You may not use the Koydo Marks without Koydo's prior written permission, except as necessary to refer to Koydo or its products in a manner consistent with fair use.

9.2 Proprietary Curriculum

The curriculum, lesson structures, assessment frameworks, adaptive algorithms, and pedagogical methodologies used in the Service are proprietary to Koydo and constitute trade secrets and confidential information. Unauthorized reproduction, distribution, or disclosure of proprietary curriculum materials is strictly prohibited.

9.3 OpenSource Components

The Service incorporates certain open-source software components, which are used in accordance with their respective licenses. A list of open-source components and their applicable licenses is available at koydo.app/legal/attributions. Nothing in these Terms restricts your rights under the applicable open-source licenses for those components.

9.4 DMCA and Copyright Complaints

If you believe that any content on the Service infringes your copyright, you may submit a notice of claimed infringement pursuant to the Digital Millennium Copyright Act ("DMCA") to our designated agent at legal@koydo.app. Your notice must include: (a) identification of the copyrighted work; (b) identification of the allegedly infringing material and its location on the Service; (c) your contact information; (d) a statement of good faith belief that the use is not authorized; and (e) a statement under penalty of perjury that the information in the notice is accurate and that you are the copyright owner or authorized to act on behalf of the owner.

9.5 CounterNotification

If you believe that content you posted was removed or disabled as a result of mistake or misidentification, you may submit a counter-notification to legal@koydo.app containing: (a) your physical or electronic signature; (b) identification of the removed content and its prior location; (c) a statement under penalty of perjury that the removal was a mistake or misidentification; and (d) your name, address, telephone number, and a statement consenting to the jurisdiction of the federal courts in Collin County, Texas. Upon receipt of a valid counter-notification, Koydo will forward it to the original complainant and may restore the content within 10–14 business days unless the complainant files a court action.

9.6 Repeat Infringer Policy

Koydo will, in appropriate circumstances, terminate the accounts of Users who are repeat infringers of intellectual property rights. Koydo reserves the right to remove any content and terminate any account at any time, with or without notice, for actual or suspected copyright infringement.

10.1 Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. KOYDO DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT ANY DEFECTS WILL BE CORRECTED.

10.2 Educational Content Disclaimer

The Service provides educational content for supplementary learning purposes only. Koydo is not a licensed educational institution, and the Service is not a substitute for professional instruction, tutoring, special education services, or any form of licensed educational intervention. Koydo does not guarantee any particular educational outcome, grade improvement, or academic result.

10.3 Limitation of Damages

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL KOYDO, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF OR INABILITY TO USE THE SERVICE, REGARDLESS OF THE THEORY OF LIABILITY (CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY, OR OTHERWISE) AND EVEN IF KOYDO HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

10.4 Cap on Liability

KOYDO'S TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE GREATER OF: (A) THE AMOUNTS YOU HAVE PAID TO KOYDO IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM; OR (B) ONE HUNDRED DOLLARS ($100 USD).

10.5 Jurisdictional Limitations

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN WARRANTIES OR LIABILITY. IN SUCH JURISDICTIONS, KOYDO'S LIABILITY SHALL BE LIMITED TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW.

11.1 Informal Resolution

Before initiating any formal dispute resolution proceeding, you agree to first contact Koydo at legal@koydo.app and attempt to resolve the dispute informally. You must send a written Notice of Dispute containing your name, account email, a description of the dispute, and the specific relief sought. Within thirty (30) days of receipt of the Notice, the parties shall engage in at least one good-faith settlement conference by telephone or video conference. A party must be personally present (or, for an entity, represented by an employee with settlement authority), though both parties may bring counsel. Arbitration may not be initiated unless this informal process has been completed without resolution.

11.2 Binding Arbitration

If the dispute is not resolved informally, you and Koydo agree that any dispute, claim, or controversy arising out of or relating to these Terms or the Service ("Dispute") shall be resolved exclusively through binding individual arbitration administered by the American Arbitration Association ("AAA") under its Consumer Arbitration Rules then in effect, as modified by this Section. The Federal Arbitration Act, 9 U.S.C. §§ 1–16, governs the interpretation and enforcement of this arbitration provision. The arbitration shall be conducted by a single arbitrator in the English language. The arbitrator shall have the authority to decide all issues of validity, enforceability, and arbitrability. The arbitrator's decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction. Arbitration hearings may be conducted by videoconference unless the arbitrator determines that an in-person hearing is necessary. In-person hearings shall be held in Collin County, Texas, or, for claims of $10,000 or less, in the county of your residence (at your election). For claims of $10,000 or less, you may elect telephone, document-only, or in-person proceedings.

11.3 Arbitration OptOut

You may opt out of the binding arbitration provision by sending written notice to Koydo at legal@koydo.app within thirty (30) days of your first acceptance of these Terms. The notice must include your full name, account email address, and a clear statement that you wish to opt out of binding arbitration. If you opt out, disputes will be resolved in the courts specified in Section 11.8.

11.4 Class Action and Jury Trial Waiver

YOU AND KOYDO AGREE THAT ANY DISPUTE RESOLUTION PROCEEDINGS, WHETHER IN ARBITRATION OR IN COURT, WILL BE CONDUCTED ONLY ON AN INDIVIDUAL BASIS AND NOT IN A CLASS, CONSOLIDATED, OR REPRESENTATIVE ACTION. IF FOR ANY REASON A CLAIM PROCEEDS IN COURT RATHER THAN IN ARBITRATION, YOU AND KOYDO EACH WAIVE THE RIGHT TO A JURY TRIAL AND THE RIGHT TO PARTICIPATE IN A CLASS ACTION. If the class action waiver is found unenforceable, the entire arbitration provision (but only the arbitration provision) shall be null and void.

11.5 Small Claims Exception

Notwithstanding the foregoing, either party may bring an individual action in small claims court for disputes within the jurisdictional limits of such court. Either party may also seek injunctive or equitable relief in court to protect intellectual property rights without first engaging in the informal dispute resolution process.

11.6 Mass Arbitration

If twenty-five (25) or more similar Demands for Arbitration are filed against or on behalf of the same party, and if counsel for the claimants is the same or coordinated, the disputes constitute a "Mass Arbitration." Mass Arbitrations shall be administered by National Arbitration and Mediation ("NAM") under NAM's Mass Filing Supplemental Dispute Resolution Rules and Procedures, rather than by AAA. If NAM is unable to administer the Mass Arbitration, the parties shall mutually select an alternative provider. All Mass Arbitrations (and any obligation to pay arbitration fees) shall be stayed pending resolution of any dispute over compliance with this paragraph.

11.7 Arbitration Fees, Costs, and Confidentiality

Each party shall pay its own filing fees, administrative fees, and arbitrator fees as set forth in the applicable AAA or NAM Rules. If you demonstrate that the costs of arbitration are prohibitive compared to litigation costs, Koydo will pay as much of the filing and hearing fees as the arbitrator deems necessary to prevent the arbitration from being cost-prohibitive. All aspects of the arbitration proceeding, including the award, are strictly confidential, except as may be required by law or for purposes of enforcement.

11.8 Governing Law and Venue

These Terms shall be governed by and construed in accordance with the laws of the State of Texas, without regard to its conflict of laws principles. If the arbitration agreement is found unenforceable, or if you have opted out of arbitration, any litigation shall be brought exclusively in the state or federal courts located in Collin County, Texas, and you consent to the personal jurisdiction of such courts.

11.9 Time Limitation on Claims

Any Dispute must be filed within one (1) year after the date the party asserting the claim first knew or reasonably should have known of the facts giving rise to the Dispute, or the claim is permanently barred. This limitation does not apply to claims for nonpayment or intellectual property infringement.

11.10 Minors — CarveOut from Arbitration and ClassAction Waiver

The binding individual arbitration provisions of Sections 11.1–11.7 and the class-action and jury-trial waiver of Section 11.4 do not apply to Disputes brought by, on behalf of, or against a User under the age of eighteen (18). Disputes involving minors shall be resolved in accordance with applicable law and in the courts of competent jurisdiction designated in Section 11.8 or the appropriate court for the minor's domicile, at the election of the Parent or legal guardian. Nothing in this Section 11 limits any non-waivable right of a minor or the minor's Parent under applicable consumer-protection, child-protection, or state student-privacy laws.

12.1 What Counts as a "Material Change"

Koydo treats the following as material changes requiring advance notice and the consent process described in Section 12.2:

1. Categories of personal data Koydo collects;
2. Identity of Koydo's processors or sub-processors;
3. Data retention periods;
4. User rights (or how a User exercises them);
5. Any provision of these Terms or the Privacy Policy that specifically governs Children, Teens, or Parents;
6. Governing law, arbitration provisions, or dispute-resolution mechanics;
7. Security commitments or breach-notification timelines; and
8. International transfer mechanisms.

Non-material changes — including typographical fixes, formatting, restructuring without substantive content change, and clarifying language that does not alter rights or obligations — may be published without advance notice; the publication itself bumps the document version recorded in Koydo's legal version history.

12.2 Notice and Consent Process

For material changes affecting adult Users (18+) and Teens (13–17), Koydo will provide at least thirty (30) days' advance notice through:

1. Email notification to the address associated with your account; and
2. In-app notification displayed prominently within the Service; and
3. A one-click "review changes" page summarizing what changed and why.

Your continued use of the Service after the effective date of the revised Terms constitutes your acceptance of the revised Terms. You may decline the revised Terms by closing your account before the effective date.

12.3 Children Under 13 — ReVerifiableParentalConsent Required

For material changes affecting any provision that governs Children under thirteen (13) — including changes to data categories, processors, retention, or children-specific rights — Koydo will, consistent with 16 C.F.R. § 312.5, re-obtain Verifiable Parental Consent before the change applies to existing Child Profiles. Until VPC is re-obtained, the previously-consented practices remain in effect for those Child Profiles. If a Parent does not respond to the re-consent request within a reasonable period, the affected Child Profile remains on the previously-consented practices; Koydo will not silently default to the new practices.

12.4 LegallyRequired Changes

For changes required by law, regulation, court order, or regulator directive, Koydo may implement changes with shorter notice or with immediate effect, as required, and will document the legal basis in the changelog at Koydo's legal version history.

13.1 Termination by Koydo

Koydo may suspend or terminate your account, or any Child Profile associated with your account, at any time and for any reason, including but not limited to: (a) violation of these Terms; (b) fraudulent, abusive, or illegal activity; (c) extended periods of inactivity; or (d) upon request by law enforcement or a governmental authority. Koydo will endeavor to provide notice of termination where practicable, except where doing so would compromise an investigation or violate applicable law.

13.2 Termination by User

You may close your account at any time through the account settings or by contacting support@koydo.app. Closing your account will cancel any active subscriptions at the end of the current billing period. No refunds are issued for unused portions of a billing period upon voluntary account closure.

13.3 Effect of Termination

Upon termination, your right to access and use the Service immediately ceases. Koydo will handle your data in accordance with the Koydo Privacy Policy, including applicable data retention and deletion schedules. You may request export of your User Content prior to account closure.

13.4 Survival

The following Sections shall survive termination of these Terms: Section 8 (Content Ownership), Section 9 (Intellectual Property), Section 10 (Limitation of Liability), Section 11 (Dispute Resolution), Section 18 (Export Controls), Section 22 (Delinquent Accounts), and any other provisions that by their nature should survive, including indemnification obligations and payment obligations.

This Section restates and reinforces a fundamental principle of these Terms. Acceptance of these Terms of Service is a prerequisite to using the Service. However, acceptance of these Terms does not, in any manner, constitute consent to participate in Koydo Intelligence ("KI"). KI consent is a separate, affirmative act that must be undertaken independently by the User or, in the case of users under the age of thirteen (13), by a parent or legal guardian through the Verifiable Parental Consent process. Koydo will never bundle, imply, or infer KI consent from acceptance of these Terms, from account creation, or from any other general-purpose agreement. KI consent may be granted or withdrawn at any time without affecting the User's rights under these Terms or access to the Service.

The Service may contain links to third-party websites, services, or content that are not owned or controlled by Koydo ("Third-Party Services"). Koydo does not endorse and is not responsible for any Third-Party Services, including their content, privacy practices, or availability. Your interactions with Third-Party Services are governed by their own terms of service and privacy policies. Koydo shall not be liable for any damage or loss arising from your use of or reliance on any Third-Party Services.

16.1 Apple App Store

If you download or use the Koydo application through the Apple App Store, you acknowledge and agree that: (a) these Terms are between you and Koydo only, and not with Apple Inc. ("Apple"); (b) Apple has no obligation to furnish any maintenance or support services with respect to the application; (c) in the event of any failure of the application to conform to any applicable warranty, Apple's sole obligation shall be to refund the purchase price (if any) to you; (d) Apple is not responsible for addressing any claims by you or any third party relating to the application, including product liability, regulatory compliance, or intellectual property infringement; and (e) Apple and its subsidiaries are third-party beneficiaries of these Terms as they relate to your license of the application, and upon your acceptance, Apple will have the right to enforce these Terms against you.

16.2 Google Play Store

If you download or use the Koydo application through the Google Play Store, your use is also subject to the Google Play Terms of Service. In the event of a conflict between these Terms and the Google Play Terms of Service regarding your use of the application, the Google Play Terms shall control solely with respect to your relationship with Google.

16.3 ThirdParty Payment Processors

Payment processing through Apple, Google, Stripe, or other third-party processors is governed by their respective terms of service and privacy policies in addition to these Terms. Koydo is not responsible for the actions or inactions of any third-party payment processor.

By creating an account or using the Service, you consent to receive electronic communications from Koydo, including account notifications, billing confirmations, Terms updates, security alerts, and promotional messages. You may opt out of promotional messages at any time through your account settings or by following the unsubscribe instructions in the message, but you may not opt out of transactional or legal communications while your account is active.

The Service is operated from the United States. You represent and warrant that you are not: (a) located in, organized under the laws of, or a resident of any country or territory that is the target of comprehensive U.S. economic or trade sanctions (currently Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions); (b) identified on the U.S. Treasury Department's List of Specially Designated Nationals and Blocked Persons, or any other U.S. government restricted parties list; or (c) otherwise the target of U.S. sanctions. You may not use, export, or re-export the Service or any content in violation of applicable U.S. export control laws and regulations.

The Service is designed primarily for users in the United States. If you access the Service from outside the United States, you do so at your own initiative and are solely responsible for compliance with applicable local laws, including but not limited to data privacy, consumer protection, and content regulations in your jurisdiction. Koydo makes no representation that the Service is appropriate or available for use in all locations.

Institutional Accounts provided to schools, school districts, and educational institutions are governed by a separate institutional agreement that supplements these Terms. For Institutional Accounts, Koydo acts as a "School Official" under the Family Educational Rights and Privacy Act ("FERPA") and processes student education records solely to provide the Service in accordance with the institutional agreement. Koydo does not sell student data, does not use student data for targeted advertising, and complies with COPPA, the Protection of Pupil Rights Amendment ("PPRA"), and applicable state student data privacy laws (including but not limited to laws in Texas, California, New York, and Connecticut). Schools may request deletion of student data by contacting privacy@koydo.app; requests are fulfilled within thirty (30) days.

Koydo reserves the right to modify, update, suspend, or discontinue any aspect of the Service (including any Application, feature, or content) at any time, with or without notice, for any reason, including but not limited to maintenance, security, regulatory compliance, or business reasons. Koydo shall not be liable to you or any third party for any modification, suspension, or discontinuation of the Service. If a material feature included in your paid subscription is permanently discontinued, you may request a pro rata refund for the unused portion of your current billing period.

Koydo may suspend or terminate access to the Service for any account that has unpaid fees. Delinquent accounts may be charged reasonable costs of collection, including attorney's fees where permitted by applicable law. You remain liable for all charges incurred prior to termination.

Under California Civil Code § 1789.3, California residents are entitled to the following consumer rights notice: The Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted in writing at 1625 N. Market Blvd., Suite N-112, Sacramento, California 95834, or by telephone at (800) 952-5210.

24.1 Entire Agreement

These Terms, together with the Koydo Privacy Policy, the Koydo Intelligence Consent Agreement (if applicable), and any institutional agreements, constitute the entire agreement between you and Koydo with respect to the Service and supersede all prior or contemporaneous communications, proposals, and agreements, whether oral or written.

24.2 Severability

If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving its original intent.

24.3 Waiver

The failure of Koydo to enforce any right or provision of these Terms shall not constitute a waiver of such right or provision. Any waiver must be in writing and signed by Koydo.

24.4 Assignment

You may not assign or transfer these Terms, or any rights or obligations hereunder, without Koydo's prior written consent. Koydo may assign these Terms without restriction.

24.5 Force Majeure

Koydo shall not be liable for any failure or delay in performing its obligations under these Terms due to causes beyond its reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, pandemics, government actions, power failures, internet disruptions, or third-party service outages.

24.6 Notices

Notices to Koydo should be sent to legal@koydo.app or by mail to: KOYDO LLC Attn: Legal Department 940 W. FM 544 #332 Wylie, Texas 75098-5157 United States Telephone: +1 (214) 218-6693 Notices to you will be sent to the email address associated with your account.

24.7 Privacy Team

Koydo's Privacy Team is reachable at privacy@koydo.app for all data-protection inquiries, including requests for access, correction, deletion, portability, restriction, and objection, and questions about this Section. Postal correspondence may be sent to the address in Section 24.6 marked "Attn: Privacy Team." Koydo has not yet appointed a formal Data Protection Officer under GDPR Article 37 or representatives under GDPR Article 27 / UK GDPR Article 27. Pending appointment, EEA and UK data subjects may contact the Privacy Team directly at privacy@koydo.app. The status of these appointments is recorded at the international transfer notice and Koydo's legal version history and will be updated when the appointments are made.

24.7 ThirdParty Beneficiaries

These Terms do not create any third-party beneficiary rights, except as expressly stated herein.

If you have questions about these Terms, please contact us at:

• General inquiries: support@koydo.app
• Legal and compliance: legal@koydo.app
• Privacy and data requests: privacy@koydo.app
• Billing inquiries: billing@koydo.app

These Terms are supplemented by jurisdiction-specific addenda that apply to Users in the listed jurisdictions. The applicable addendum is determined automatically by Koydo based on your declared or detected jurisdiction; you may also view all addenda at the applicable legal addenda or download them via Koydo's legal version history. Where an addendum is silent, the body of these Terms controls; where the addendum and body conflict, the addendum controls solely with respect to the Users to whom it applies. The current addenda set covers: Texas (general TDPSA + SCOPE Act + Texas Student Privacy Act), California (CCPA/CPRA + AB 2273 + SOPIPA + auto-renewal), New York (Education Law §2-d + auto-renewal GBL §527-a + SAFE for Kids Act), Florida (educational-platform carve-out per HB 3 §501.1735), Washington, Virginia, Colorado, Connecticut, Vermont, EEA (GDPR + EU SCCs), United Kingdom (UK GDPR + UK Addendum to EU SCCs + Children's Code), and Switzerland (FADP).

Reviewed and approved by Robert Waltos, Founder & Chief Executive Officer of KOYDO LLC, on May 9, 2026. Mr. Waltos attests, to the best of his knowledge as of the effective date, that the substantive content of this document reflects Koydo LLC's actual practices, processor relationships, security commitments, and legal posture. This attestation does not substitute for outside legal counsel review, which is scheduled per the company's annual review cadence. External regulators, users, and counterparties may rely on the substantive content of this document; any inaccuracy will be corrected promptly upon discovery and any material change will follow Section 12 above.

By creating an account or using the Koydo Service, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.

These addenda supplement the Koydo Terms of Service and Privacy Policy. The addendum for a user's location, billing region, school relationship, or child-safety law applies in addition to the main documents. If an addendum conflicts with the main document for a covered user, the addendum controls for that user.

Applies to: Users physically located in or with primary residence in the State of Texas. Version: 2026-05-09 Effective Date: 2026-05-09 Companion: TX-SCOPE Addendum — applies in parallel for Users known to be under 18 and for Institutional school accounts.

For Texas Users, these Terms are governed by the laws of the State of Texas. Any litigation arising from these Terms (where arbitration does not apply per TOS §11) shall be brought exclusively in the state or federal courts located in Collin County, Texas, except as provided by TOS §11.10 (Minors carve-out).

For Texas consumers, non-waivable rights under the Texas Deceptive Trade Practices–Consumer Protection Act (DTPA), Tex. Bus. & Com. Code Chapter 17, remain available and are not limited by these Terms.

Texas consumer rights under the TDPSA (Tex. Bus. & Com. Code Chapter 541) — access, correct, delete, portability, opt-out of targeted advertising / sale / profiling — are described in the TX-SCOPE Addendum §3.

Automatic-renewal disclosures, affirmative consent, and cancellation access are provided in compliance with applicable Texas law (Tex. Bus. & Com. Code § 17.46(b)(38) and related provisions).

For Institutional Accounts in Texas (school districts, charter schools, accredited private schools, homeschool cooperatives), see TX-SCOPE Addendum §2.

Nothing in these Terms waives any non-waivable Texas consumer right.

Texas General Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in the State of Texas, United States. Version: 2026-05-09 Effective Date: 2026-05-09 Authoritative documents: /legal/terms-of-service and /legal/privacy-policy This Addendum supplements the Terms of Service and Privacy Policy as they apply to Koydo Users in Texas. It implements Koydo's compliance with the Texas Securing Children Online through Parental Empowerment Act (SCOPE Act), codified at Tex. Bus. & Com. Code Chapter 509 (effective September 1, 2024), the Texas Data Privacy and Security Act ("TDPSA"), codified at Tex. Bus. & Com. Code Chapter 541, and the Texas Student Privacy Act. Where this Addendum and the body of the Terms or Privacy Policy conflict, this Addendum controls solely with respect to Users in Texas.

For each Texas User Koydo knows or reasonably believes to be under 18 ("Minor"), Koydo:

1. Verifies parental identity and consent before the Minor's account is activated, using the Verifiable Parental Consent process described in TOS §3.2 and Privacy Policy §2.
2. Restricts known-Minor accounts from the following data practices:

• Targeted advertising — not applicable, because Koydo does not run advertising of any kind.
• Sale of personal data — not applicable, because Koydo does not sell personal data.
• Sharing of personal data with third parties for purposes other than providing the Service.
• Use of the Minor's personal data to train, fine-tune, evaluate, or improve any AI model.

1. Provides parental access to:

• The Minor's account, including a parent dashboard with visibility into the Minor's activity, time-on-platform, and content interactions.
• Tools to manage privacy settings on behalf of the Minor.
• The ability to delete the Minor's account or any associated data.

1. Defaults privacy settings for known-Minor accounts to the most protective configuration available (PRISM off, social features at "friends only" for under-13 and as set by the Minor for 13–17, no public profile).
2. Implements safety filters for harmful content categories enumerated in the SCOPE Act (suicide/self-harm promotion, eating disorders, substance abuse, harassment, sexual exploitation), with a parental escalation path.

For Institutional Accounts in Texas (school districts, charter schools, accredited private schools, and homeschool cooperatives), Koydo:

• Acts as a "School Official" under FERPA (20 U.S.C. § 1232g) with a legitimate educational interest in providing the Service.
• Processes student education records solely as directed by the Institution under the institutional agreement.
• Does not sell student data, target advertising to students, or use student data for any purpose other than providing the Service.
• Provides a 30-day institutional deletion workflow for any school requesting deletion of student data.

Texas residents whose accounts are subject to the TDPSA may exercise the following rights:

• Right of access — request a copy of personal data held by Koydo.
• Right to correct inaccuracies.
• Right to delete personal data.
• Right to data portability in machine-readable format.
• Right to opt out of targeted advertising — not applicable; Koydo does not run advertising.
• Right to opt out of the sale of personal data — not applicable; Koydo does not sell personal data.
• Right to opt out of profiling in furtherance of decisions producing legal or similarly significant effects — Koydo's PRISM system does not produce such decisions; see /legal/automated-decisions.
• Right to appeal any denial of a TDPSA request — appeals may be sent to privacy@koydo.app with subject "TDPSA Appeal."

To exercise these rights, contact privacy@koydo.app or use the controls in your account settings. Koydo responds within 45 days.

In the event of a breach affecting Texas residents, Koydo notifies affected Users without unreasonable delay and in compliance with Tex. Bus. & Com. Code § 521.053. Where the breach affects 250 or more Texas residents, Koydo also notifies the Office of the Texas Attorney General within 30 days.

Disputes brought by Texas Users are governed by Texas law, in the courts of competent jurisdiction in Collin County, Texas, consistent with TOS §11.8 and §11.10 (minors carve-out from arbitration).

Koydo cooperates in good faith with inquiries from the Office of the Texas Attorney General regarding compliance with the SCOPE Act, TDPSA, and Texas Student Privacy Act. Inquiries should be directed to legal@koydo.app.

Texas SCOPE / TDPSA / Student Privacy Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in the State of California, United States. Version: 2026-05-09 Effective Date: 2026-05-09 Authoritative documents: /legal/terms-of-service and /legal/privacy-policy This Addendum supplements the Terms of Service and Privacy Policy as they apply to Koydo Users in California.

California Users' privacy rights — including the right to know, correct, delete, opt out of sale or share (Koydo does neither), opt out of profiling and automated decision-making with significant effects, limit use of Sensitive Personal Information, and non-discrimination — are enumerated at Privacy Policy §10.3. Koydo does not sell or share personal information for cross-context behavioral advertising and does not run advertising of any kind. The "Do Not Sell or Share My Personal Information" request is available at /legal/do-not-sell. The "Limit Use of Sensitive Personal Information" control is at /legal/limit-sensitive-pi. Automated-decision-making logic disclosure is at /legal/automated-decisions. Koydo honors the Global Privacy Control (GPC) browser signal as a valid opt-out of sale, share, and analytics tracking.

To the extent the California Age-Appropriate Design Code is enforceable (subject to ongoing litigation), Koydo voluntarily aligns with its design standards for known-Minor accounts (under 18), including:

• Default privacy settings to most protective (PRISM off, no public profile, social features at "friends only" for under-13).
• Plain-language disclosure at the /legal/privacy-summary.
• No dark patterns — refusing or revoking consent is no harder than granting it.
• Data minimisation — collect no more than reasonably necessary for the educational purpose.
• No profiling for non-educational purposes — PRISM is pedagogical only.

For Institutional Accounts serving California schools, Koydo complies with SOPIPA (Cal. Bus. & Prof. Code §§ 22584–22585):

• No targeted advertising to students based on data acquired through the Service.
• No use of student data to amass a profile other than for K-12 school purposes.
• No selling, renting, trading, or otherwise making available a student's personal information.
• No disclosure of student personal information except as enumerated by SOPIPA.

For California consumers purchasing auto-renewing subscriptions through Koydo:

• Clear and conspicuous disclosure of auto-renewal terms at the time of purchase, including renewal cycle, renewal price, and cancellation method.
• Affirmative consent to the auto-renewal at checkout.
• Acknowledgment confirmation post-purchase including the foregoing.
• Annual renewal reminder for annual subscriptions, sent 15–45 days before renewal.
• Easy cancellation through Account Settings → Subscription, online and without unreasonable friction.
• Refund alignment with TOS §4.4 (14-day no-questions for annual; pro-rata thereafter; cancel-anytime for monthly).

Under California Civil Code § 1789.3, California residents may contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs at 1625 N. Market Blvd., Suite N-112, Sacramento, California 95834, or by telephone at (800) 952-5210.

Nothing in these Terms waives any non-waivable consumer protection right available to California residents under California law, including but not limited to those under the California Consumer Privacy Act (as amended by the CPRA), the California Online Privacy Protection Act, the California Invasion of Privacy Act, the SHIELD Act analogues, and applicable consumer-protection statutes. Where a non-waivable California right conflicts with the body of these Terms, the California right controls.

California Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in the State of New York, United States. Version: 2026-05-09 Effective Date: 2026-05-09 Companion: NY-SAFE Addendum — applies in parallel for Users known to be under 18. Authoritative documents: /legal/terms-of-service and /legal/privacy-policy

For New York consumers purchasing auto-renewing subscriptions through Koydo (Stripe-processed):

• Clear and conspicuous disclosure of auto-renewal terms at purchase.
• Affirmative consent at checkout.
• Renewal reminder for annual subscriptions between 15 and 45 days before renewal, with a one-click cancellation link.
• Easy cancellation via Account Settings → Subscription, with no friction designed to deter cancellation.

For New York schools, school districts, BOCES, and charter schools, see the NY-SAFE Addendum §2 for the Parents' Bill of Rights, Data Security and Privacy Plan, subcontractor disclosure, and annual reporting commitments.

Koydo implements administrative, technical, and physical safeguards consistent with General Business Law § 899-bb (NY SHIELD Act): encryption (TLS 1.2+ in transit, AES-256 at rest), access controls, periodic security assessments, employee training, vendor due diligence, and an incident-response plan.

Nothing in these Terms waives any non-waivable consumer-protection right available to New York residents.

New York General Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in the State of New York, United States. Version: 2026-05-09 Effective Date: 2026-05-09 Authoritative documents: /legal/terms-of-service and /legal/privacy-policy This Addendum supplements the Terms of Service and Privacy Policy as they apply to Koydo Users in New York. It addresses the New York Stop Addictive Feeds Exploitation (SAFE) for Kids Act (S.7694, 2024), New York Education Law § 2-d (Parents' Bill of Rights for Data Privacy and Security), the NY SHIELD Act (Stop Hacks and Improve Electronic Data Security Act), and GBL § 527-a (auto-renewal disclosure).

Koydo is, in substance, an adaptive educational service — not a social-media platform. Koydo's adaptive learning engine PRISM is a pedagogical system, not an "addictive feed" within the meaning of the SAFE for Kids Act. Nonetheless, to align defensively with the policy intent of the SAFE for Kids Act, Koydo applies the following protections to all New York Users known to be under 18:

1. No algorithmic feed of unbounded user-generated content. Koydo does not host or recommend an open social feed.
2. Default chronological ordering of any list of activities, content, or messages. Adaptive recommendations from PRISM are pedagogical (next lesson, suggested skill review) and require opt-in parental consent for under-13 (PRISM off by default per Privacy Policy §6.4).
3. Notification quiet hours. Push notifications and in-app reminders are suppressed between midnight and 6 AM local time for known-Minor accounts (under 18) by default. Parents may adjust this window in the Parent Dashboard.
4. Time-on-platform visibility for parents, including session-length and weekly-total reports.
5. Right of parental disable. A Parent may, at any time, disable any adaptive recommendation feature for their child via the Parent Dashboard; the Service continues to function on a fixed pedagogical curriculum path.

For Institutional Accounts serving New York schools, school districts, BOCES, and charter schools, Koydo provides the protections required under § 2-d, including:

• Parents' Bill of Rights for Data Privacy and Security — incorporated by reference into every institutional agreement.
• Data Security and Privacy Plan describing the categories of personally identifiable information (PII) Koydo accesses, the purposes of processing, the data security measures (encryption in transit and at rest, MFA, access logging, breach response), and the entities receiving PII.
• Subcontractor disclosure at /legal/subprocessors.
• Annual report to participating school districts on Koydo's data-handling practices upon request.
• No sale of student PII and no use of student PII for any purpose other than providing the Service.

To request the institutional Data Security and Privacy Plan, schools may contact legal@koydo.app.

Koydo implements administrative, technical, and physical safeguards consistent with the NY SHIELD Act (General Business Law § 899-bb), including encryption (TLS 1.2+ in transit, AES-256 at rest), access controls, periodic security assessments, employee training, vendor due diligence (see /legal/subprocessors), and an incident response plan.

For New York consumers purchasing auto-renewing subscriptions through Koydo (Stripe-processed; not via app stores):

• Pre-renewal notice. Koydo provides a clear and conspicuous notice of the auto-renewal terms — including the renewal cycle, the renewal price, and the cancellation method — at the time of purchase.
• Renewal reminder. For annual subscriptions, Koydo provides an email reminder between 15 and 45 days before the renewal date, stating the renewal date and price and a one-click cancellation link.
• Easy cancellation. Cancellation is available via Account Settings → Subscription, with no friction designed to deter cancellation. Exit-intent retention offers, if any, are clearly skippable.
• Refund alignment. Koydo's tiered refund policy (TOS §4.4) — 14-day no-questions for annual; pro-rata thereafter; cancel-anytime for monthly — applies to New York consumers without diminution.

To the extent a comprehensive NY consumer-privacy statute is enacted and effective, this Addendum will be updated to reflect the resulting rights. Pending such enactment, NY consumers may exercise the universal rights described in Privacy Policy §10.1 (access, correction, deletion, export, opt out of analytics).

Disputes brought by New York consumers are subject to the choice-of-law and venue provisions of TOS §11.8 and the minors carve-out at §11.10. Nothing in this Addendum waives any non-waivable consumer right under New York law.

New York SAFE for Kids / §2-d / SHIELD / Auto-Renewal Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in the State of Florida, United States. Version: 2026-05-09 (stub) Effective Date: 2026-05-09 Status: Stub pending litigation resolution. Florida HB 3 ("Online Protections for Minors") is partially enjoined as of the effective date of this Addendum (NetChoice v. Moody, Northern District of Florida, ongoing). Several provisions of HB 3 are not currently enforced. Koydo will revise this Addendum once the litigation is resolved and the law's enforceable scope is clarified.

Koydo is in substance an online educational service. Florida HB 3 contains explicit carve-outs for educational platforms, including the exclusions at Florida Statutes § 501.1735 for online services whose primary purpose is the provision of educational content and services to minors and students under the supervision of a parent, school, or other authorized adult. Koydo's primary purpose — adaptive learning, AI tutoring, exam preparation, language learning, and adaptive curriculum delivery — falls within the educational-services scope. The Service is not a social-media platform, does not host an unbounded user-generated-content feed, and does not derive revenue from advertising. Accordingly, Koydo asserts the educational-platform carve-out and operates outside the scope of the substantive HB 3 minor-account provisions.

Notwithstanding the carve-out, Koydo voluntarily aligns with the policy intent of HB 3 by applying the protections described in the New York SAFE for Kids Addendum to Florida Users known to be under 18 — including default-protective privacy settings, no targeted advertising (Koydo runs no advertising of any kind), parental dashboard, and notification quiet hours.

To the extent applicable, Florida consumers may exercise the rights described in Privacy Policy §10 and may file complaints with the Florida Department of Legal Affairs, Office of the Attorney General.

This Addendum is intentionally short pending resolution of NetChoice v. Moody and any subsequent Florida Department of Legal Affairs guidance. When the enforceable scope of HB 3 is clarified, this Addendum will be updated and the change recorded in Koydo's legal version history.

Florida HB 3 Stub Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in Washington State. Version: 2026-05-09 Effective Date: 2026-05-09

For Washington subscribers, recurring-charge disclosures are shown before purchase, and account cancellation methods are maintained in account settings or support channels in compliance with RCW 19.224.

Koydo does not collect "consumer health data" within the meaning of Washington's My Health My Data Act (RCW 19.373). Where any Koydo data could be construed to fall within that definition, Koydo applies the consent and rights regime described in Privacy Policy §10 to such data and treats it as Sensitive Personal Information per California CPRA standards.

Breach notification follows RCW 19.255 for Washington residents — without unreasonable delay and in any event no later than 30 days after discovery, with content specified by the statute.

Nothing in these Terms waives any non-waivable consumer-protection right available to Washington residents.

Washington Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in the Commonwealth of Virginia. Version: 2026-05-09 Effective Date: 2026-05-09

Virginia residents whose accounts are subject to the VCDPA (Va. Code § 59.1-575 et seq.) may exercise:

• Right of access — request a copy of personal data.
• Right to correct inaccuracies.
• Right to delete personal data.
• Right to data portability in machine-readable format.
• Right to opt out of targeted advertising — n/a; Koydo runs no advertising.
• Right to opt out of the sale of personal data — n/a; Koydo does not sell.
• Right to opt out of profiling in furtherance of decisions producing legal or similarly significant effects — Koydo's PRISM does not produce such effects (see /legal/automated-decisions).
• Right to appeal a denied request — appeals to privacy@koydo.app, subject "VCDPA Appeal." Response within 60 days; if denied, the Virginia Attorney General contact is included in the response.

Recurring-plan disclosures and cancellation controls are provided in purchase and account workflows.

Nothing in these Terms limits non-waivable protections available under Virginia law.

Virginia Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in the State of Colorado. Version: 2026-05-09 Effective Date: 2026-05-09

Colorado residents whose accounts are subject to the CPA (Colo. Rev. Stat. § 6-1-1301 et seq.) may exercise:

• Right of access, correction, deletion, and data portability.
• Right to opt out of targeted advertising — n/a; Koydo runs no advertising.
• Right to opt out of the sale of personal data — n/a; Koydo does not sell.
• Right to opt out of profiling in furtherance of decisions producing legal or similarly significant effects — opt-out via Account Settings → Privacy → "Disable Adaptive Learning"; see /legal/automated-decisions for logic disclosure.
• Right to appeal a denied request — appeals to privacy@koydo.app, subject "CPA Appeal."

Koydo honors universal opt-out mechanisms including the Global Privacy Control (GPC) browser signal as a valid CPA opt-out, consistent with the Colorado AG's regulations.

Voice clips for pronunciation exercises are processed-and-discarded; no biometric template is stored. To the extent any data could be characterized as biometric within the meaning of the CPA's biometric provisions, the consent regime in Privacy Policy §2.8 applies.

Recurring billing authorization and cancellation pathways are provided as part of checkout and account workflows. Nothing in these Terms limits non-waivable rights under Colorado law.

Colorado Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in the State of Connecticut. Version: 2026-05-09 Effective Date: 2026-05-09

Connecticut residents whose accounts are subject to the CTDPA (Conn. Gen. Stat. § 42-515 et seq.) may exercise: access, correction, deletion, portability, opt-out of targeted advertising / sale / profiling for decisions with significant effects, and appeal of denied requests (privacy@koydo.app, subject "CTDPA Appeal"). Koydo honors the GPC as a valid opt-out signal.

For Users under 16 in Connecticut, Koydo applies the heightened protections described in Privacy Policy §2 and §3, including no targeted advertising (n/a) and no sale of personal data (n/a). Where Connecticut law imposes additional protections beyond COPPA, those protections apply.

Recurring-subscription disclosures are presented before purchase, and cancellation access is provided through account controls or support. Nothing in these Terms waives non-waivable Connecticut consumer protections.

Connecticut Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in the State of Vermont. Version: 2026-05-09 Effective Date: 2026-05-09

For Vermont consumers purchasing auto-renewing subscriptions through Koydo:

• For subscriptions with a term of one year or more, a written reminder notice between 30 and 60 days before the next renewal date stating the renewal date, the cancellation method, and the renewal price.
• Clear disclosure at purchase of all material terms.
• Easy cancellation in Account Settings → Subscription, with no friction designed to deter cancellation.

Recurring charge disclosures and cancellation methods are provided with the objective of plain-language consumer notice. Nothing in these Terms limits non-waivable rights under Vermont law.

Vermont Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in any Member State of the European Union or the wider European Economic Area. Version: 2026-05-09 Effective Date: 2026-05-09 Authoritative documents: /legal/terms-of-service and /legal/privacy-policy This Addendum supplements the Terms of Service and Privacy Policy as they apply to Koydo Users in the EU/EEA. Where this Addendum and the body conflict, this Addendum controls solely with respect to EU/EEA Users.

For consumers residing in the European Union or European Economic Area (EEA), nothing in these Terms deprives you of the protection afforded by mandatory provisions of your country of residence. The binding arbitration and class-action waiver provisions of TOS Section 11 do not apply to EU/EEA consumers. You have the right to bring legal proceedings in the competent courts of your country of residence. If you reside in the EU/EEA, you have a statutory right to withdraw from a paid subscription within 14 days of purchase without giving any reason (Consumer Rights Directive 2011/83/EU), unless you expressly consented to immediate digital performance and acknowledged the loss of the withdrawal right. To exercise this right, contact support@koydo.app within 14 days. To the extent required by EU law, the governing law of Texas (TOS §11.8) is superseded by the mandatory consumer-protection laws of your EU member state of residence. The European Commission provides an Online Dispute Resolution (ODR) platform at ec.europa.eu/consumers/odr. Koydo's contact point for ODR is legal@koydo.app.

Data Controller. KOYDO LLC, 940 W. FM 544 #332, Wylie, Texas 75098-5157, United States, is the data controller for personal data collected through the Service. Contact: privacy@koydo.app. Data Protection Officer. Koydo has not appointed a formal DPO under GDPR Article 37. Where Koydo becomes required to maintain a formal DPO, the appointment will be reflected at the international transfer notice and Koydo's legal version history. Pending such appointment, data-protection enquiries are handled by Koydo's Privacy Team at privacy@koydo.app. EU Article 27 Representative — pending appointment. See the international transfer notice for current status. EEA data subjects retain the right to lodge a complaint with the supervisory authority of their habitual residence; a list of national authorities is at edpb.europa.eu. Lawful bases (Art. 6 GDPR).

• (a) Contract performance (Art. 6(1)(b)) — account creation, authentication, learning progress tracking, subscription management, and customer support.
• (b) Consent (Art. 6(1)(a)) — analytics (Mixpanel), opt-in adaptive learning (Koydo Intelligence), opt-in marketing/showcase use of co-created content (TOS §8.4(c)). Withdrawable at any time.
• (c) Legitimate interest (Art. 6(1)(f)) — security monitoring, fraud prevention, abuse detection, service-integrity protection. Balancing test performed and documented.
• (d) Legal obligation (Art. 6(1)(c)) — billing/tax retention, response to lawful requests, child-safety obligations.

Special-category data. Koydo does not intentionally collect data within Art. 9 GDPR. Voice clips for pronunciation exercises are biometric only in the COPPA sense (under-13 voiceprints, processed-and-discarded with no storage). Learning progress is not health data. Children's data. For Users under the GDPR Article 8 age threshold (13 in some member states, 14, 15, or 16 in others — Koydo applies the stricter member-state threshold where higher than 13), Koydo requires verifiable parental consent before processing personal data beyond the minimum for account security. AI features are restricted for users under 13. Parents may request access, correction, or deletion of a child's data via privacy@koydo.app. International transfers. See the international transfer notice. Transfers from the EEA to the U.S. and other third countries rely on EU SCCs Modules 2 and 3 with documented Transfer Impact Assessments under EDPB Recommendations 01/2020. Retention. See Privacy Policy §8 for the per-category retention table, including the tiered AI-conversation retention (30 days under 13 / 90 days teens / 12 months adults). Your rights under GDPR (Art. 15–22). Access, rectification, erasure, restriction of processing, portability, objection (including profiling), withdrawal of consent at any time, and the right not to be subject to a decision based solely on automated processing producing legal or similarly significant effects. To exercise any of these, contact privacy@koydo.app. Response within 30 days (extendable by 60 per Art. 12(3)). Right to lodge a complaint. Direct complaints to the supervisory authority of your member state of residence (links at edpb.europa.eu). Automated decision-making. Koydo's PRISM adaptive-learning system does not produce decisions with legal or similarly significant effects within the meaning of Art. 22. Detailed disclosure at /legal/automated-decisions.

EU/EEA Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in England, Wales, Scotland, or Northern Ireland. Version: 2026-05-09 Effective Date: 2026-05-09 Authoritative documents: /legal/terms-of-service and /legal/privacy-policy This Addendum supplements the Terms of Service and Privacy Policy as they apply to Koydo Users in the United Kingdom.

For consumers residing in the United Kingdom, nothing in these Terms limits your statutory rights under the Consumer Rights Act 2015 or any other non-waivable UK consumer-protection legislation. The binding arbitration provision of TOS Section 11 is not mandatory for UK consumers. You may bring proceedings in the courts of England, Wales, Scotland, or Northern Ireland depending on your place of residence. You have a statutory right to cancel a paid digital subscription within 14 days of purchase, subject to your consent to begin digital service delivery immediately (Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013). To cancel, contact support@koydo.app. Any unfair terms under the Consumer Rights Act 2015 are unenforceable against you to the extent they are unfair.

UK Data Controller. KOYDO LLC, 940 W. FM 544 #332, Wylie, Texas 75098-5157, United States, is the data controller for personal data processed in relation to UK Users. The UK GDPR (as retained in UK law by the European Union (Withdrawal) Act 2018) and the Data Protection Act 2018 govern our processing. Contact: privacy@koydo.app. UK Article 27 Representative — pending appointment. See the international transfer notice for current status. UK data subjects retain the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by telephone at 0303 123 1113. Lawful bases. Same as EU Addendum §2: contract, consent, legitimate interest, legal obligation. Mapped to UK GDPR Articles 6(1)(a)–(f). Children's data — UK Age Appropriate Design Code (Children's Code). Koydo is designed to be used by children and implements the Children's Code standards, including:

• Privacy settings defaulted to high for child users.
• No nudge techniques that encourage children to weaken their privacy protections.
• No behavioral advertising targeting users under 18 — and indeed Koydo runs no advertising of any kind.
• Data minimisation for child accounts.
• Age-appropriate, plain-language privacy information — see the /legal/privacy-summary and the summary block at the top of the Privacy Policy.
• Detrimental use prohibited — Koydo does not use child users' personal data in ways that have been shown to be detrimental to their well-being.
• Profiling off by default for child users; PRISM is opt-in via Verifiable Parental Consent only.
• Parental controls at /parent/dashboard.

International transfers. Transfers from the UK rely on the UK Addendum to the EU SCCs (B1.0, 21 March 2022) issued by the ICO, executed alongside the EU SCCs. Where executed separately, Koydo relies on the UK International Data Transfer Agreement (IDTA). See the international transfer notice. Retention. See Privacy Policy §8 for the per-category retention table, including tiered AI-conversation retention. Your rights under UK GDPR. Access, rectification, erasure, restriction, portability, objection, automated-decision-making safeguards. To exercise, contact privacy@koydo.app. Response within one calendar month (extendable by two months for complex requests, Art. 12(3) UK GDPR). Governing law for UK consumer matters. English law (or Scots law where applicable) applies to non-waivable UK consumer-protection issues, notwithstanding the Texas choice-of-law clause in TOS §11.8.

UK Addendum v2026-05-09 — Effective May 9, 2026

Applies to: Users physically located in or with primary residence in Switzerland or the Principality of Liechtenstein. Version: 2026-05-09 Effective Date: 2026-05-09

For Swiss Users, Koydo's processing is governed by the revised Swiss Federal Act on Data Protection (FADP), in force from 1 September 2023. Swiss data subjects have rights of access, rectification, deletion, restriction, objection, and data portability substantially equivalent to GDPR. To exercise, contact privacy@koydo.app. The right to lodge a complaint may be exercised with the Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.

Transfers from Switzerland to the United States rely on the EU SCCs supplemented by the FADP-specific addendum recognized by the FDPIC. See the international transfer notice.

Nothing in these Terms limits non-waivable consumer rights under Swiss law.

Switzerland Addendum v2026-05-09 — Effective May 9, 2026