Privacy Policy
Effective October 19, 2026
Homebot One ("we") makes the KOKO home robot and the services around it, including Homebot One accounts (accounts.homebotone.com) and the game KOKO City (kokocity.app). This policy explains what we collect, why we collect it, who can see it, and the choices you have.
What we collect
- Your account. Your email address, an account ID we create, your language, and when you signed in. We do not use passwords.
- Sign-in security. The six-digit code we email you, stored only in scrambled (hashed) form and deleted once used or after 10 minutes; a record of each signed-in device with its browser name; and your IP address for limiting repeated attempts, kept for about a day.
- KOKO City. The name you choose, your land, house and its look, your character, your KOKOs, coins and other progress, your job in the game, and where you last stood in the city.
- KOKO robots. The robot's serial number, when you paired it, and the name you give it.
- In your browser. A sign-in cookie on accounts.homebotone.com, and a sign-in token and display preferences in your browser's storage for KOKO City. We do not use advertising cookies or third-party trackers.
- Technical data. Our hosting provider processes standard request data, such as IP addresses, to deliver and protect the services.
How we use it
- To sign you in and keep your account secure.
- To run KOKO City and keep your progress on any device you sign in from.
- To pair your KOKO robots with your account and show them to you.
- To send service email: sign-in codes and important notices about your account. We send marketing email only if you separately agree to it.
- To prevent abuse, such as repeated sign-in attempts or one person collecting free land with many accounts.
What other players see in KOKO City
Your chosen name, your house and its look, your character, your KOKOs, your car and your job. While you are online, other players see where you are in the city; while you are offline, your character is shown asleep where you last were. Your email address is never shown to other players.
Sharing
We do not sell your personal information, and we do not share it for advertising. We use service providers that process data on our behalf, currently Cloudflare (hosting, database and email delivery). We may disclose information if the law requires it, or to protect our users and services.
How long we keep it
- Sign-in codes: until used, or 10 minutes.
- Records used to limit repeated attempts: about 24 hours.
- Signed-in devices: until you sign out, or after 90 days without use.
- Your account and game data: for as long as your account exists.
- Backups: for a limited time, normally up to 30 days.
Your choices and rights
You can see your account and paired robots at accounts.homebotone.com, sign out, and release a robot from your account. You can ask us to give you a copy of your data, correct it, or delete your account and its data by writing to one@homebotone.com from your account's email address. We answer within 30 days. If you live in California, the California Consumer Privacy Act gives you these rights to know, correct and delete, and we will not treat you differently for using them.
Children
Our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.
Security
Everything travels over encrypted connections (HTTPS). Sign-in codes, device tokens and transfer codes are stored only in hashed form. No system is perfectly secure, but we work to protect your data and limit who can access it.
Changes
When we change this policy we will post the new version here and update the date above. If a change is significant, we will also tell signed-in users.
Contact
Homebot One, Fremont, California · one@homebotone.com