fbpx

Kochava SDK Collects Personal Data on Children Class Action

Should companies be allowed to collect the data of children playing apps on mobile devices? The complaint alleges that Kochava, Inc. has proprietary code that does just that, “monitoring their online behavior[] and profiling them for commercial gain.” The class action is brought by a group of parents, under the law of Intrusion Upon Seclusion, seeking to protect children’s privacy.

Kochava makes a software development kit (SDK) that developers can embed within apps, which cannot be noticed by those looking at or playing the apps. Without their knowledge, Kochava is collecting information and sending it to itself.

The complaint alleges that “beneath the surface of [the] game, the Kochava SDK is secretly collecting and transmitting sensitive, personal data about the child, the device she is using to play the Child App, and numerous other personally-identifying data points. Through the use of ‘persistent identifiers’ … Kochava can monitor the child as she uses other Internet-enabled devices, apps, and websites.”

While children play the games, Kochava exfiltrates their information, collecting personal data and tracking online behavior. The complaint alleges that “the data is used to track and profile children for Kochava’s financial gain.”

Kochava uses the information for online advertising and marketing purposes. The complaint claims that “the Kochava SDK employs sophisticated algorithms that interpret that Personal Data to make possible the determination of” identifying, demographic, and behavioral information about individual users.

Once Kochava has the harvested information, it can combine the child’s personal data with other data that can track and identify the user. The complaint says, “This is often accomplished via an ad network or other data aggregation provide…” The ad networks then connect advertisers looking to buy advertising space to those selling it. They can then offer data-driven, targeted ads on mobile apps.

One of the companies that uses the Kochava SDK is the Walt Disney Company, which has embedded it into apps such as Princess Palace Pets and various versions of Where’s My Water? These apps, the complaint claims, “have been downloaded onto hundreds of millions of mobile devices, worldwide.” These games are aimed at children.

The SDK begins sending information to Kochava as soon as children open the app and it connects to the Internet. Kochava offers “mobile attribution services, which permit advertisers to track whether a user downloads an app after she is served an ad for that app while playing one of the Child Apps.”

The Intrusion Upon Seclusion Class is all parents and legal guardians of persons living in the states listed below who are under 18 or who were under 18 when they played a child app containing the Kochava SDK, from whom Kochava collected, used, or disclosed personal data. The states include Alabama, Alaska, Arizona, Arkansas, California, Colorado, Connecticut, Delaware, Georgia, Hawaii, Idaho, Illinois, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Minnesota, Missouri, Nevada, New Hampshire, New Jersey, North Carolina, Ohio, Oklahoma, Oregon, Pennsylvania, South Dakota, Texas, Utah, Vermont, Washington, and West Virginia.

Article Type: Lawsuit
Topic: Privacy

Most Recent Case Event

Kochava SDK Collects Personal Data on Children Complaint

August 9, 2021

Should companies be allowed to collect the data of children playing apps on mobile devices? The complaint alleges that Kochava, Inc. has proprietary code that does just that, “monitoring their online behavior[] and profiling them for commercial gain.” The class action is brought by a group of parents, under the law of Intrusion Upon Seclusion, seeking to protect children’s privacy.

Kochava SDK Collects Personal Data on Children Complaint

Case Event History

Kochava SDK Collects Personal Data on Children Complaint

August 9, 2021

Should companies be allowed to collect the data of children playing apps on mobile devices? The complaint alleges that Kochava, Inc. has proprietary code that does just that, “monitoring their online behavior[] and profiling them for commercial gain.” The class action is brought by a group of parents, under the law of Intrusion Upon Seclusion, seeking to protect children’s privacy.

Kochava SDK Collects Personal Data on Children Complaint
Tags: Collecting and Recording Personal Information in Connection with a Credit Card Purchase, Using Your Private Information Without Consent, Your Privacy