Privacy Policy — KidsCraft

Welcome to KidsCraft! We are committed to protecting your family's privacy and ensuring a safe, secure experience for you and your children. This Privacy Policy explains how we collect, use, store, and protect your information.

Important: KidsCraft is designed for parents and caregivers to create educational activities for their children. We take children's privacy very seriously and comply with the Children's Online Privacy Protection Act (COPPA) and other applicable privacy laws.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Email address: For account creation, login, and communication
Name: To personalize your experience
Password: Encrypted and securely stored (we never see your actual password)
Authentication data: If you sign in with Apple or Google, we receive your name and email from those services

1.2 Child Profile Information

You can create profiles for children, which include:

Child's name or nickname: To personalize activities
Age: To generate age-appropriate activities
Interests: To customize activity recommendations
Avatar selection: A fun character chosen by you

Note: Child profiles are created and managed entirely by parents. We do not collect any information directly from children, nor do children have independent access to KidsCraft.

1.3 Activity Data

We collect information about activities you generate and complete:

Activity type (Craft Coach, Kitchen Science, Out and About)
Materials, ingredients, or place types you input
Generated activity details
Completion status and ratings
Favorites and feedback
Activity history timestamps

1.4 Technical Information

We automatically collect certain technical data:

Device information: Device type, operating system, app version
Usage data: How you interact with the app, features used, time spent
Error logs: Technical errors to help us fix bugs and improve the app
IP address: For security and fraud prevention (not linked to your identity)

1.5 Information We Do NOT Collect

Child's photos or videos for child profiles or account records. If you choose to use camera-based material recognition, photos may be processed only to identify craft supplies or materials for activity suggestions. Please do not include children, faces, or sensitive personal information in material-recognition photos.
Child’s precise location, GPS coordinates, or device location data
Child's contact information (phone, email, address)
Child's social security number or other identifiers
Payment information from children
Biometric data

2. How We Use Your Information

2.1 To Provide Our Services

Generate personalized activity recommendations using AI
Save and sync your kid profiles across devices
Track activity history and favorites
Provide account authentication and security
Enable you to share activities with others

2.2 To Improve KidsCraft

Analyze usage patterns to improve features
Fix bugs and technical issues
Develop new activity types and features
Test and optimize app performance

2.3 To Communicate With You

Send account-related notifications (security, updates)
Respond to your questions and support requests
Send optional activity suggestions (you can opt out)
Notify you of important changes to our services

2.4 Legal and Safety Purposes

Comply with legal obligations
Protect against fraud and abuse
Enforce our Terms of Service
Protect the safety of our users

3. How We Share Your Information

3.1 Third-Party Services

We use the following trusted service providers:

Supabase (Data Storage):

Stores your account and activity data
SOC 2 Type II certified
Data encrypted in transit and at rest
Supabase Privacy Policy

OpenAI (AI Activity Generation):

Powers our AI-generated activity recommendations
Receives: Child's age, interests, and your input (materials, ingredients, place-type inputs)
Does NOT receive: Child's name, your name, email, or any identifying information
OpenAI does not use your data to train their models
OpenAI Privacy Policy

Apple Sign-In / Google Sign-In (Authentication):

If you choose to sign in with Apple or Google
We receive only your name and email
Apple allows you to hide your email address

3.2 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information or your child's information to third parties for marketing purposes. Ever.

3.3 Legal Requirements

We may disclose information if required by law, such as:

In response to a valid court order or subpoena
To protect the safety of our users or the public
To prevent fraud or illegal activity
To enforce our Terms of Service

3.4 Business Transfers

If KidsCraft is acquired or merged with another company, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4. Data Security

We take security seriously and use industry-standard measures to protect your data:

Encryption: All data is encrypted in transit (HTTPS) and at rest
Secure Authentication: Passwords are hashed using bcrypt
Access Controls: Limited employee access to user data
Regular Updates: We keep our security systems up to date
Monitoring: We monitor for suspicious activity and potential breaches

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Privacy Rights

5.1 Access Your Data

You can view and manage your data within the app:

View and edit kid profiles in the "Kid Profiles" section
View activity history in the "Activity History" section
Update account settings in "Settings"

5.2 Delete Your Data

You have the right to delete your data at any time:

Go to Settings → Account → Delete My Account
Confirm deletion in the warning dialog
All data is immediately and permanently deleted
This includes: account, kid profiles, activities, and all associated data
This action cannot be undone

See our step-by-step deletion guide for more details.

5.3 Export Your Data

5.4 Opt Out of Communications

Click "Unsubscribe" in any marketing email
Adjust notification settings in the app
Contact us at privacy@kidscraft.app

5.5 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

Right to know what personal information is collected
Right to know if information is sold or disclosed
Right to say no to the sale of information (we don't sell data)
Right to delete personal information
Right to non-discrimination for exercising these rights

5.6 European Privacy Rights (GDPR)

If you are in the European Economic Area, you have these rights:

Right to access your personal data
Right to correct inaccurate data
Right to delete your data ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

6. Children's Privacy (COPPA Compliance)

KidsCraft is designed for parents and caregivers, not children.

We comply with the Children's Online Privacy Protection Act (COPPA):

No Direct Collection: We do not knowingly collect personal information directly from children under 13
Parental Control: Only parents/caregivers can create accounts and child profiles
No Child Accounts: Children cannot create their own accounts
No Advertising: We do not serve behavioral advertising to children
No Sharing: We do not share children's information with third parties except as described in this policy
Parental Rights: Parents can review, delete, and refuse further collection of their child's information

If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information immediately.

7. Data Retention

Account data: Until you delete your account
Activity history: Until you delete your account or individual activities
Guest account data: 90 days of inactivity
Deleted account data: Immediately purged from our systems
Technical logs: 90 days for debugging and security

8. International Data Transfers

KidsCraft is based in the United States. If you access our services from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries.

We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

9. Cookies and Tracking

Essential cookies: Required for authentication and app functionality
Analytics: To understand how the app is used (anonymized data only)
No advertising cookies: We do not use cookies for ad targeting

You can manage cookies in your browser settings, but some features may not work properly if you disable essential cookies.

10. Changes to This Privacy Policy

We will update the "Last Updated" date at the top
We will notify you via email for significant changes
We will display an in-app notification
Continued use of KidsCraft after changes constitutes acceptance

11. Third-Party Links

KidsCraft may contain links to third-party websites or services (e.g., Pinterest for craft ideas). We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any information.

12. Do Not Track

Some browsers have a "Do Not Track" feature. Currently, there is no industry standard for how to respond to these signals. We do not track you across third-party websites, so Do Not Track settings do not affect KidsCraft.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Email: privacy@kidscraft.app
Subject Line: "Privacy Inquiry"

We will respond to all requests within 30 days.

For Account Deletion: Use the in-app deletion feature in Settings → Account → Delete My Account, or email us at privacy@kidscraft.app.

Your family's privacy, protected.