Kidder Platform Privacy Policy

1. Scope and status

This policy covers the Kidder website, Parent App, connected child-device services, and related support or administrative operations. More specific notices explain the Parent App and enrolled child-device experience separately.

Kidder is the product name used throughout this policy. Service availability, rights, and obligations can differ by jurisdiction.

• Parent App Privacy Notice: information handled through the adult account-holder application.
• Child App Privacy & Protection Notice: access and processing on an enrolled Child device.
• Children’s Privacy & Data Policy: additional transparency for child-related information.

2. How the Kidder service works

A Parent or guardian creates and controls the Kidder family account. The Parent may create Child profiles, pair supported Child devices, configure family rules, and review information sent by those enrolled devices.

The Parent App does not collect the Parent phone’s precise or coarse location. Child location shown in the Parent App comes from the connected child device through Kidder’s services.

• The Parent App manages the family account and displays family information.
• Software on the connected child device supports the protections and features selected by the Parent.
• Kidder’s services secure accounts, coordinate pairing and settings, store operational data, and provide information to the Parent App.
• The website provides product, setup, privacy, security, and request information.

3. Parent account and device information

Depending on the sign-in method and features used, Kidder may process the following Parent information.

• Name, email address, phone number, country setting, and account status.
• Firebase, Google, Kidder account, installation, session, and authentication identifiers.
• Password or Parent PIN credentials in protected authentication workflows.
• Optional Parent profile photo.
• Parent notification token and notification-delivery information.
• Parent device model, platform, app version, session IP address, user agent, and security events.
• Support, privacy, or security communications when an operational channel is used.

4. Child device and family information

The categories processed depend on which family features are set up and enabled.

• Child profile name, date of birth or age information, profile photo, and profile identifiers.
• Paired-device identifiers, model, manufacturer, operating-system version, app version, battery, network, permission, protection, and connectivity status.
• Installed-app names, packages, versions, app usage, foreground activity, Screen Time totals, and related summaries.
• Rules, routines, schedules, allowed or blocked apps, domain rules, Safe Places, and other Parent-selected settings.
• Precise Child-device location, timestamps, accuracy, movement context, geofences, visits, journeys, stops, and location summaries.
• Blocked web-domain events, safety categories, action, relevant app package, network context, and event time.
• Derived Content Safety risk category, score, band, context, source, fingerprint, and Parent-configured watch-term references.
• Notifications, device commands, pairing records, acknowledgements, and operational events.

5. Sources and purposes

Information comes from the Parent, Parent App, connected child device, sign-in providers, device operating system, and Kidder services. Kidder uses it for the product, security, support, and administration purposes described here.

• Create and secure Parent accounts and sessions.
• Pair the intended Child device with the correct family profile.
• Provide Screen Time, app rules, routines, location, Safe Places, Internet Safety, Content Safety, notifications, and device-health features.
• Deliver Parent-selected settings and commands to an enrolled device.
• Detect misuse, investigate failures, protect account access, and maintain auditability.
• Respond to support, privacy, deletion, or security requests when verified channels are available.
• Administer subscriptions and entitlements if a purchase channel is enabled later.

6. Content Safety and local text processing

The enrolled child-device software can read limited visible on-screen text through Android Accessibility for local safety classification. Raw visible screen text is processed locally and is not sent to Kidder as part of this feature.

Derived classifications and selected event context may be sent to Kidder so the Parent can receive a meaningful safety alert. These derived records can include a category, score, risk band, app package, source, fingerprint, and reference to a Parent-configured watch term.

7. Service providers and external processing

Kidder uses services that can include Firebase Authentication, Firebase Cloud Messaging, Google Identity, Google Maps, geocoding, hosting, data storage, file storage, and communications. Provider roles, locations, and retention terms remain subject to confirmation.

Safe Internet sends supported domain requests to an external DNS resolver. That provider may receive domain-query and network metadata while providing its service. Provider details will be confirmed before this feature is made generally available.

8. Security practices

Kidder uses authentication, encrypted service connections, access controls, private file access, account and session controls, limited administrative visibility, and security logging. No security control eliminates all risk.

• Kidder app traffic is configured to use HTTPS.
• Authentication tokens are protected in the Parent App, and child-device app backup is disabled.
• Administrative permissions separate ordinary and sensitive access.
• Selected Parent and Child details are masked in administrative views.
• Security and access events may be recorded for investigation and account protection.

9. Retention and deletion

Kidder intends to keep information only for service, security, support, and lawful purposes. Raw precise child-device location currently has a seven-day pruning process, and local child-device security and protection logs use a 30-day window. Raw visible screen text is not sent to or retained by Kidder as part of Content Safety.

Some retention periods still require legal, accounting, or service-provider confirmation. Subscription, payment, consent, tax, administrative-audit, and backup periods are not presented here as fixed guarantees.

Complete Parent account deletion is not currently presented as a verified live capability. The Data Deletion page explains the current request status and limitations.

• Authentication and security events associated with a completed deletion request are retained for up to 90 days from each event.
• The protected device-removal record associated with a completed deletion request is retained for up to 90 days.
• A one-way device-revocation marker may remain so a removed installation stays denied and can clear local data after reconnecting; its final retention period is pending.
• Protected backups and administrative security records follow separate access and retention controls that are still being confirmed.
• Consent and genuine subscription, payment, tax, or accounting records are retained only where required; final periods remain subject to legal or accounting confirmation.
• These retention descriptions do not mean that complete account deletion is currently available as a live service.

10. Requests, rights, and international processing

Privacy rights may differ by location and may include access, correction, deletion, restriction, objection, or complaint rights. The applicable rights, identity-verification process, lawful exceptions, and response requirements must be confirmed for each launch jurisdiction.

Service providers may process information in countries other than the family’s country. Production data locations and any required transfer safeguards have not yet been confirmed.

11. Changes and contact

Kidder may update this policy as product behavior, providers, law, or service availability changes. Material changes will be communicated through an appropriate notice. Questions may be sent to the privacy contact below.