Privacy

Last updated 5 October 2026

This policy is written for parents and guardians. Xocana (sho-KAH-nah) is an app where a child draws, and the family hears a story about the drawing. It is made by Miatzil LLC. The phone apps use the package name com.xocana.app.

Who has an account

Only an adult has an account: the parent or legal guardian who signs in with an email address, Apple or Google. Children use Xocana through that account. A child never has an email address, a password, a public profile or a way to contact anyone.

What we keep, and why

• The grown-up's account: email address, language, time zone and when the terms were accepted. We use them to sign you in and to write to you about the account.
• What the family makes: pictures you add, such as a photo of a drawing, a toy or a pet. We keep them to show them back to you and, as Xocana grows, to make stories from them.
• The plan: whether the family is on Free or Family, and the store receipt that proves it. Payment cards are handled by Apple, Google or Stripe; we never see the card.
• The device: a push token, if you turn on notifications, so we can say a story is ready.

Everything your family makes is stored encrypted, with a key held for your account alone.

What we never do

Xocana has no ads and no third-party tracking. There are no analytics SDKs in the apps. We never sell your family’s data, or any part of it, to anyone. We do not use your family’s drawings or stories to train models — ours or anybody else’s.

When an AI model sees something

Answering a question in the grown-ups area, and later making a story, means sending the relevant text to Amazon Bedrock, an AI service run by Amazon Web Services. It processes the request and hands the result straight back. Amazon Bedrock does not keep it or use it to train models. Every request passes safety filters written for children before and after the model sees it. We do not send a child's photo to a model unless a future feature needs it and you agree first.

Pictures are checked

Every picture is checked by an automated moderation service (Amazon Rekognition) before it is shown. A picture that fails the check is deleted and never shown.

Permissions

Xocana asks for the photo library or the camera only when a grown-up adds a picture, and for notifications only if you turn them on. It never asks for location, contacts, the microphone in the background, or health data. Each prompt sits behind a grown-ups-only question.

Children's privacy (COPPA)

Xocana is designed for families with children under 13. We collect a child's content only through the parent's account and only to provide the app. Before Xocana collects anything a child makes beyond a picture the parent adds, we will ask the parent for verifiable consent and record it. A parent can review what we hold (Download our data in the grown-ups area on the web), ask us to stop, and delete everything at any time.

How long we keep it

We keep your data while the account exists. Deleting the account destroys its encryption key and deletes everything the family made, the device records and the sign-in. Pictures that were started but never finished uploading are deleted after two days. Backups roll off within 35 days.

Your choices

You can change the language, turn notifications off, download your data or delete the account from the grown-ups area in the app or on xocana.com. See Delete an account.

Aviso de privacidad (México)

Miatzil LLC es responsable del tratamiento de los datos personales que se recaban en Xocana. Usamos el correo electrónico del adulto titular de la cuenta, su idioma y las imágenes que la familia agrega únicamente para prestar el servicio: iniciar sesión, mostrar las imágenes y, en el futuro, crear cuentos. No vendemos ni compartimos los datos con fines publicitarios, ni los usamos para entrenar modelos. Las imágenes y peticiones pueden procesarse en servidores de Amazon Web Services en Estados Unidos. Puedes ejercer tus derechos de acceso, rectificación, cancelación y oposición (ARCO), o revocar tu consentimiento, escribiendo a support@xocana.com, o eliminar la cuenta desde la zona de adultos.

Contact

Miatzil LLC · support@xocana.com