Privacy Policy

Kiddemy is operated by [LEGAL ENTITY NAME] ("Kiddemy," "we," "us"). We make math-learning apps for children in grades 1–4 and a companion app for their parents. Because our product is for children, we keep data collection to the minimum we need to teach math and show parents progress. We do not show ads, we do not sell data, and we do not use third-party advertising or analytics tools in the children's app. You can reach us at privacy@kiddemy.org.

1. A note about this beta

Kiddemy is currently an early "friends and family" beta. It is not yet available on the Google Play Store or the Apple App Store. Some privacy features described here are commitments we are building and finishing before public launch; where that is the case, we say so plainly.

2. Information we collect from children

When a child uses the learning app, we collect only what's needed to run it:

• Math activity — which problems were shown, whether answers were right or wrong, how long a problem took, and the skill levels the app has worked out.
• Learning state — progress through lessons and skills, and in-app practice rewards earned.
• Basic technical data — app version, platform (Android or web), and whether the device was online, to keep the app working and fix problems.

We do not collect a child's real name, email address, photo, location, contacts, or voice. Diagnostic information is built to exclude a child's name, email, and the actual content of their answers.

3. Information we collect from parents

• Email address and password — to create and secure the account.
• Pairing code — a short code used once to link a parent's account to a child's app.
• Time zone — so daily activity is grouped by the child's local day.

4. How we use information

We use this information to run the lessons and adapt difficulty to each child's level (this is done by fixed rules in the software — Kiddemy is not "AI-powered" and does not profile children for advertising), to show parents their children's progress, to keep progress in sync across the family's devices, to diagnose crashes and fix bugs, and to communicate with a parent about their account. We do not use this information to advertise to children, and we do not allow third parties to do so.

5. Service providers

We use a small number of providers and no advertising or analytics SDKs in the children's app:

• Supabase — stores accounts, pairing connections, and synced learning data on our behalf. For EU testers, we are provisioning EU-region storage and will confirm it before offering Kiddemy to EU families.
• Capacitor — the open-source framework we use to build our mobile apps. It runs on the device and is not a data-collection service.
• Crash diagnostics (Sentry) — we use, or plan to use, Sentry to capture crash reports, configured to exclude a child's name, email, and answer content. This is not yet enabled in the beta.

6. Parental consent (COPPA)

Because Kiddemy is for children, we obtain a parent's verifiable consent before collecting personal information from a child, as required by the U.S. Children's Online Privacy Protection Act (COPPA). A parent sets up and links the child's app, and consent is requested as part of that setup. During the friends-and-family beta, access is by direct invitation to participating parents. A parent can withdraw consent at any time by contacting us, after which we will stop collecting new information from that child and delete existing information as described in Section 8.

7. EU/EEA & UK children (GDPR-K)

For children in the EU, EEA, or UK, our legal basis for processing a child's data is the consent of the holder of parental responsibility, in line with Article 8 of the GDPR. The basis for a parent's own account data is performing our agreement with them and our legitimate interest in keeping it secure. Parents may exercise the rights of access, rectification, erasure, restriction, objection, and portability on behalf of their child by contacting us.

8. Keeping data, and deleting it

We keep a child's learning data while the account is active so progress isn't lost. A parent can ask us to delete their child's account and associated data at any time by emailing privacy@kiddemy.org. During the beta, deletion requests are processed manually; we are completing an automated process that removes a child's records across our database, the family's paired devices, on-device sync files, and diagnostics before public launch.

9. Security

We take reasonable steps to protect data, including encryption of data in transit and access controls on our systems. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10. No sale of data; no targeted advertising

We do not sell, rent, or trade personal information. We do not show targeted advertising to anyone, and we do not allow third-party advertising in our apps.

11. Changes to this policy

We may update this policy as the product grows or the law changes. For material changes affecting children's data, we will notify parents and, where required, obtain renewed consent. The "Last updated" date above always reflects the current version.

12. Contact

Questions, or want to access or delete your child's data? Email privacy@kiddemy.org. Postal contact: [MAILING ADDRESS — required for the COPPA operator disclosure].