This Privacy Policy explains what information Kiddoz collects, how we use it, and the choices you have. Kiddoz is a mobile app that sends parents one small, screen-free activity to do with their child, personalized to the child's age and interests.
Kiddoz (“Kiddoz”, “we”, “us”, or “our”) is operated by HOW G.P., a company established in Greece. We are the data controller for the personal data described here. If you have any questions, contact us at dimitris@howstudio.dev.
1. Who Kiddoz is for
Kiddoz is designed to be used by parents and guardians, who must be at least 18 years old. It is not directed to or intended for use by children. Any information about a child in the app is entered by the adult who owns the account, to tailor activity suggestions. See “Children's privacy” below.
2. Information we collect
Information you provide
- Account details
- Your email address and a password (stored only in encrypted/hashed form).
- Family profile
- Your family name (optional), preferred language, chosen interests, and your reminder schedule (days, time, and time zone).
- Children's details
- For each child you add: a first name (or nickname) and a date of birth, which we use only to calculate an age range for age-appropriate activities. We do not require a full name and ask you not to provide more than is needed.
- Activity feedback
- Which activities were delivered to your family, whether you opened or completed them, and any thumbs-up / thumbs-down rating you give.
Information collected automatically
- Device & notification data
- A push-notification token and platform (iOS/Android) for the devices on your account, so we can send your weekly reminder.
- Technical & log data
- Standard server logs including IP address, request times, and error/diagnostic data, used to operate, secure, and troubleshoot the service (including rate limiting).
Subscription & purchase data
If you subscribe to Kiddoz Pro, the purchase is processed by Apple through your Apple ID. We do not receive or store your payment card details. We receive a subscription status and related identifiers (for example, whether the subscription is active, the plan, transaction identifiers, and whether it is a production or sandbox purchase) from Apple via our subscription provider, RevenueCat, so we can unlock paid features for your family.
3. How we use your information
- To provide the core service: selecting and generating age-appropriate, interest-matched activities and delivering them to your family.
- To send the weekly reminder notifications you schedule.
- To create and manage your account and family, and to enable multiple adults in a household to share one family.
- To process and manage subscriptions and unlock paid features.
- To maintain, secure, debug, and improve the service.
- To communicate with you about your account or important service changes.
4. How activities are generated (AI)
Activity text is generated using a third-party AI service (OpenAI) and cover images using a third-party AI service (Google). To generate content we send only a de-identified “segment” — a language, an age range, and interest tags. We do not send your child's name or date of birth to these AI providers, and stored activities never contain your child's name; a child's name is only inserted on your own device when an activity is shown to you.
5. Who we share information with
We do not sell your personal data. We share it only with service providers (“processors”) that help us run Kiddoz, under agreements that require them to protect it and use it only on our instructions:
- Apple — App Store distribution, in-app purchases/payments, and push notification delivery (APNs).
- RevenueCat — subscription management and purchase validation.
- Expo — delivery of push notifications.
- OpenAI — generation of activity text (de-identified inputs only).
- Google — generation of activity cover images.
- Cloudflare — storage of generated images.
- Fly.io — application hosting and infrastructure.
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the public.
6. International transfers
Some of our providers are located outside the European Economic Area (for example, in the United States). Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
7. Legal bases (EEA/UK users)
- Performance of a contract — to provide the app and its features.
- Legitimate interests — to secure, maintain, and improve the service, in a way that does not override your rights.
- Consent — for push notifications and any optional communications; you can withdraw consent at any time.
8. Data retention
We keep your information for as long as your account is active. When you delete your account in the app, we delete your account and associated family data. Limited technical logs may be retained for a short period for security and integrity, and backups are cycled out over time. Your recent activity history is capped and rolls over automatically.
9. Children's privacy
Kiddoz is intended for parents and guardians, not for children. We do not knowingly collect personal information directly from children. The only child-related information in the app — a first name/nickname and a date of birth — is provided by the account-holding adult to personalize activities, is not shared with our AI providers, and is not stored in any shared content pool.
If you believe a child has provided us personal information without a parent's involvement, contact us at dimitris@howstudio.dev and we will delete it. As a parent, you can review, edit, or delete your child's information at any time in the app.
10. Security
We protect your information with measures including encryption in transit (HTTPS/TLS), hashed passwords, token-based authentication, and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to respond to incidents appropriately.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can exercise many of these directly in the app (edit your family details, or delete your account under Settings). To make any other request, email dimitris@howstudio.dev.
EEA/UK users also have the right to lodge a complaint with a supervisory authority. In Greece, this is the Hellenic Data Protection Authority (HDPA / Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα).
12. Changes to this policy
We may update this Privacy Policy from time to time. We will change the “Last updated” date above and, for material changes, provide additional notice where appropriate.
13. Contact us
HOW G.P. (Kiddoz)
Email: dimitris@howstudio.dev