Privacy Policy

This Privacy Policy explains what information KidWize ("we", "us") collects, why we collect it, and how parents and caregivers can control it. KidWize is built to be used by adults on behalf of their children — children do not create accounts or interact with the app directly.

1. Information We Collect

From the parent or caregiver who creates the account:

• Account information: name and email address
• Authentication data: handled by our identity provider (Supabase Auth); we never see or store your password

Provided by the parent about their child:

• Child profile: first name and age only

Collected automatically:

• Usage data: activities viewed and completed, streaks, in-app preferences
• Subscription status: managed via RevenueCat (tier, renewal date — not your card number)
• Device push token: only if you enable notifications
• Diagnostic data: crash and error reports (via Sentry) to help us fix bugs

We do not collect precise location, contacts, photos, camera, or microphone data, and we never ask your child to enter any personal information.

2. How We Use Your Information

• Provide age-appropriate activity recommendations
• Track play progress and streaks across your child profiles
• Process and manage your subscription
• Send activity reminders and milestone notifications, if enabled
• Diagnose crashes and improve app stability
• Respond to support requests

3. Children's Privacy

KidWize is designed for use by parents and adult caregivers only; it is not directed at children, and children do not create accounts, log in, or provide information directly. The only information relating to a child — first name and age — is entered by the parent, is used solely to personalize activity suggestions within that parent's account, and is never used for advertising, profiling, or shared with third parties. Because we do not knowingly collect personal information directly from children, KidWize does not fall within the scope of laws such as COPPA that govern services directed at children; nonetheless, we apply the same minimal-collection and no-third-party-sharing principle to child data as a matter of policy. If you believe a child has provided us with information directly, contact us using the details below and we will delete it.

Before you can add a child's profile, we ask you to confirm you are their parent or legal guardian and to give your consent to the processing described in this policy. You can review that consent or withdraw it at any time by deleting the child's profile. We ask for a child's birth month and year, not their full date of birth — that's enough to show age-appropriate activities without storing a more identifying exact date, and their age group updates automatically over time as they get older.

4. Data Sharing & Service Providers

We do not sell or rent your personal information, and we never share your child's name or age with advertisers or data brokers. We share limited data only with the service providers who help us run KidWize, each acting under their own privacy and security obligations:

• Supabase — account authentication and database hosting
• RevenueCat — subscription and purchase management
• Sentry — crash and error diagnostics
• Apple Push Notification Service / Firebase Cloud Messaging (via Expo) — delivering notifications you've enabled

We may also disclose information if required by law or to protect the rights, safety, or property of KidWize or our users.

5. Data Retention

We retain account and child-profile data for as long as your account is active. Deleting a child's profile removes that data immediately. Deleting your entire account starts a 7-day grace period during which it's hidden but not yet removed — logging back in during that window cancels the deletion. After 7 days, your account and all associated data are permanently deleted from our production systems, other than what we're required to retain for legal, tax, or fraud-prevention purposes (kept only as long as necessary and then deleted).

6. Data Security

All data is encrypted in transit (TLS) and at rest. Access to production data is restricted to what's necessary to operate the service. No method of transmission or storage is 100% secure, so while we work hard to protect your information, we can't guarantee absolute security.

7. Your Rights

Wherever you're located, you can:

• View and edit your profile and your children's profiles at any time, in the app
• Delete a child's profile and its associated data
• Delete your entire account and all associated data, from Profile → Delete Account (processed after a 7-day grace period — log back in during that window to cancel)
• Disable notifications at any time
• Request a copy of the data we hold about you, or ask us to correct it

If you're in the EEA, UK, or a jurisdiction with similar data protection law, these are your rights of access, rectification, erasure, and portability under GDPR-equivalent law; if you're a California resident, these correspond to your CCPA/CPRA rights. To exercise any of these, use the in-app controls or contact us at privacy@kidwize.app.

8. International Data Transfers

Our service providers may process data outside your home country. Where that happens, we rely on providers who maintain appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above; continued use of KidWize after a change means you accept the revised policy.

10. Contact Us

If you have questions about this privacy policy, contact us at privacy@kidwize.app. See also our Terms of Service.