TEMPLATE — NOT LEGAL ADVICE. Have a licensed privacy attorney review and customize this before publishing. Children's data (COPPA), state privacy laws (e.g., CCPA/CPRA), and international rules (e.g., GDPR) impose specific requirements. Replace every [bracketed] placeholder.
Controller: [Company legal name] ("Kiddos," "we," "us"). Contact: privacy@[kiddos.app] · [Address] · [DPO, if applicable]
We built Kiddos as a trust product. This policy explains what we collect, why, who we share it with, and the choices you have.
1. Information we collect
You provide:
- Account & profile: name, email, password, mobile phone number, role (e.g., "Mom"/"Dad"), and family/household details.
- Children's information you add: first name, age/birthdate, grade, school, and info-vault entries (e.g., allergies, doctor, sizes).
- Communications & coordination: messages, schedule and custody entries, expense records and receipts, uploaded agreements, reminders, trusted-circle contacts, and photos/videos you upload.
- Payment info: processed by our payment processor ([Stripe]); we receive limited billing details, not full card numbers.
Collected automatically: device and usage data, log data, and approximate location/IP for security and fraud prevention. We do not share precise location by default.
From AI processing: when you use AI features, relevant content is sent to our AI provider to generate suggestions (see Section 4).
2. How we use information
To provide and operate the Service; to deliver messages, schedules, reminders, and notifications (in-app, email, and SMS where you opt in); to power AI features; to process payments; to keep the Service safe and prevent abuse; to comply with law; and to communicate with you. We process this information to perform our contract with you, for our legitimate interests in operating a safe service, with your consent (e.g., SMS, children's data), and as required by law.
3. The on-the-record record & retention
Kiddos is designed to keep a neutral, tamper-evident record. Messages and certain records may be retained and may not be deletable so both parents (and, if applicable, a court) can rely on them. We retain information for as long as your account is active and as needed for the purposes above, to comply with legal obligations, resolve disputes, and enforce agreements. We may retain records subject to a legal hold or court process even after account closure.
4. AI processing
AI features (e.g., tone suggestions, summaries) send relevant content to our AI provider(s) (e.g., [Anthropic]) to generate output. We instruct providers to process this content to deliver the feature and not to use your content to train their general models [confirm with your provider's terms]. AI output is a suggestion, not advice.
5. How we share information
- With your co-parent and family: shared records (messages, schedule, expenses, kids' info) are visible to members of your family as the Service describes. Your private items (e.g., your own tone-check drafts, your safety prefs) are not shared with the other parent.
- Trusted circle: grandparents, teachers, tutors, or caregivers you add see a child's information only after both parents approve, and only within the scope granted.
- Service providers (processors): hosting/database ([Supabase]), SMS ([Twilio]), payments ([Stripe]), AI ([Anthropic]), email/analytics ([__]), under contracts that limit their use of your data.
- Safety & legal: we may disclose information to protect someone's safety, respond to lawful requests, enforce our Terms, or as required by law.
- Business transfers: as part of a merger, acquisition, or asset sale, with notice as required. We do not sell your or your children's personal information and do not use it for third-party advertising.
6. Children's privacy (COPPA and similar)
Kiddos is intended for parents to use on behalf of their family. A parent/guardian provides verifiable consent for a child's account and for our collection and use of the child's information to operate the Service. We collect the minimum needed, do not direct advertising to children, do not sell children's data, and give parents the ability to review and request deletion of a child's information (subject to the record-retention limits in Section 3). To request access or deletion of a child's data, contact privacy@[kiddos.app].
7. SMS / text data
If you opt in, we use your mobile number to send transactional texts (alerts, reminders, verification codes). We store your number, consent timestamp, and delivery status. Reply STOP to opt out. We do not share your number for third-party marketing.
8. Security
We use industry-standard safeguards: encryption in transit, access controls, row-level data isolation per family, and least-privilege service access. No system is perfectly secure; we will notify you of a breach as required by law.
9. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, port, or restrict your information, and to opt out of certain processing. You can edit much of your information in the app, manage SMS in settings, and contact privacy@[kiddos.app] to exercise rights. We will verify your request and respond as required by law. California, EU/UK, and other residents: see [state/region-specific disclosures to be added by counsel]. Some records (e.g., immutable messages, items under legal hold) may be retained despite a deletion request.
10. Data location and transfers
We process data in [region/country]; if we transfer data internationally, we use appropriate safeguards [e.g., SCCs].
11. Changes
We will post updates and change the effective date; material changes will be notified as required by law.
12. Contact
privacy@[kiddos.app] · [Company legal name], [Address].
Kiddos — two homes, one bunch of kiddos.