Privacy Policy

1. Information we collect

About the account holder (parent):

• name, email address, password (stored hashed, never in plain text);
• preferred communication language;
• proof of acceptance of the Terms of Use (date, version, IP address).

About child profiles created by the account holder:

• first name and birth year;
• routines created and missions completed (for progress purposes only).

No child profile is ever created directly by a child: it's always the parent or guardian who enters this information. A child does not have a personal account — their profile is a secondary space inside the parent's family account, which keeps exclusive control over it at all times.

2. Why we collect it

Strictly to provide the service: creating and displaying daily missions, running the family account, sending necessary emails (confirmation, password reset), and keeping the account secure.

3. Where data is stored

Data is hosted on secure cloud infrastructure, and transactional email delivery is handled by a reputable specialized provider. These are the only subprocessors with access to personal information, and only to the extent needed to operate the service. For security reasons, we don't publicly disclose the details of our technical infrastructure.

4. What we never do

• We never sell personal information.
• We never use children's data for advertising.
• We don't use third-party advertising or analytics tracking cookies.

Only one technical cookie is used: the session cookie needed to stay signed in, which expires automatically.

5. Use of artificial intelligence

KidPapa uses AI only to suggest icons representing a mission (e.g. "brush my teeth" → 🦷), so a child who can't read yet can recognize their missions. Only the generic mission text is sent — never your child's name, exact age, or any other identifying information. The AI never chats directly with children.

6. Security

Hashed passwords (never stored in plain text), two-factor authentication available for admin accounts, login attempt rate limiting, encrypted transport (HTTPS) for all communications.

7. Your rights

From your family privacy center, you can at any time: view and export all data associated with your family (downloadable JSON), correct a child's profile, revoke a shared access, delete a child profile, or fully delete your family account. For any request you can't handle yourself, contact us.

8. Data retention

Information is kept as long as the account is active. Deleting your family account permanently erases your family, child profiles, routines, and history. A minimal access log may be retained where required by law.

9. Changes

This policy may be updated. Significant changes will be communicated by email or an in-app notice.