Legal

Privacy Policy

What KidCommit collects, why, who can see it, how long we keep it, and what you can do about it.

Last updated 7 October 2026

Diese Seite gibt es nur auf Englisch. Wir übersetzen rechtliche Formulierungen erst nach anwaltlicher Prüfung; verbindlich ist die englische Fassung.

Who we are

KidCommit is made by ITexperts SIA, a company registered in Latvia under number 48503027270, with its registered office at Dubultu prospekts 62A-13, Jūrmala, LV-2015 (“we” or “us” below). We decide how and why the information described here is used. That makes us the controller under European and UK data protection law, and the operator under the US Children’s Online Privacy Protection Act (COPPA).

This policy covers:

KidCommit Parent, the app for parents, on iPhone and Android;
KidCommit, the app on the child’s phone, on iPhone and Android;
our server, which keeps each family’s settings and progress so that both apps show the same thing;
this website, kidcommit.com.

Questions about privacy go to [email protected]. A person reads every message.

The short version

A parent creates the account. Children never create accounts and never give us their contact details.
We collect what KidCommit needs to work: the parent’s contact details, the child’s nickname and age, the family’s screen time rules, and what the child earned, did and used.
No ads. We don’t sell or rent information, and there is no third-party analytics or tracking in either app or on this website.
Location is off unless a parent turns it on for a child. When it’s on, we keep only the latest rough position, and the child can see that it’s on.
A parent can delete a child, or the whole account, at any time in the app. Deletion is immediate.

For kids

KidCommit is the app where you earn extra screen time by thinking, reading and helping at home. Here is what it knows about you:

the name your parent typed in for you (it can be a nickname) and the month and year you were born, so we can pick puzzles and stories for your age;
which puzzles, stories and chores you did, how you did, and how many minutes you earned and used;
if your parent turns on location, roughly where your phone is, even when KidCommit is closed. Your phone tells you about it before it asks, and while it’s on, your Today screen says so.

Your parents can see all of this. We keep it safe. We never show it to other people and we never sell it. There are no ads. If you have a question, ask your parent to write to us.

What we collect about parents

Information	Why we need it
Phone number	You sign in with a code we send by text message. The same number always opens the same family. The other adults in your family can see it.
First name, last name, email address	Shown to the other adults in your family. You confirm your email with a code we send to it. It’s how you get back in if you lose your phone number: a code to this email, a code to your new number and your Parent PIN move your account to the new number. We also email you when a payment is overdue or a free trial ends, before your children’s information is deleted, when your account moves to a new number, and when something needs your attention on a child’s phone: it has gone quiet, protection was switched off, KidCommit was removed, someone is guessing the PIN, or the phone was disconnected. These alerts include the child’s name.
Family time zone	A child’s day, schedule and bedtime are counted in it.
Parent PIN	Protects the grown-ups’ section on the child’s phone. We store only a one-way scrambled form (a hash), never the PIN itself.
Family membership and invitations	So that two adults can look after the same children with equal rights. Codes that invite an adult into your family are stored only as hashes and expire. The code you share to invite other families to KidCommit is stored as it is, so the app can show it to you.
Subscription details	Whether your subscription is active and until when. Payment goes through Apple or Google: we receive a transaction identifier and dates, never card or bank details.
Invitations to other families	Your invite code and how many invited families counted, so we can add free days to your subscription.
Notification address	A token from Apple or Google that lets us send you notifications about your children, for example when a chore is finished.
Sign-in session	Keeps you signed in on your phone. Stored only as a hash; it stops working after 90 days.

What we collect about children

A parent gives us some of this information; the rest is created as the child uses the app on their phone.

Information	Why we need it
Nickname and picture	So the apps can show whose day it is. The name doesn’t have to be the child’s real name, and the picture is one of our drawings, never a photo.
Month and year of birth	To choose puzzles, stories and quiz questions for the child’s age. We never ask for the day.
Screen time rules	The daily minutes a parent gives, school days, bedtimes, holidays, closed hours, bonus time, and which apps are limited.
Chores	The chores a parent adds (name, optional note, expected time, whether a parent approves it) and each chore the child does: when it started and finished, how long it took, and whether a parent approved it.
Puzzles and episodes	Which puzzle the child got, each attempt with its number of moves and whether it was solved; which episodes the child opened and their quiz answers.
Minutes	Minutes earned, saved and used each day. Parents see them in the reports.
Screen time used	Minutes spent in the apps a parent chose to limit, so the limit can be applied. We receive minutes, not what the child did inside those apps.
Apps on the phone (Android)	The names and icons of the apps on the child’s phone, so a parent can choose which ones to limit.
Chosen apps (iPhone)	Only how many apps were chosen and an unreadable fingerprint of the choice. Apple’s Screen Time keeps the actual choice on the phone; neither the app nor we can see it.
Phone status	Whether the child’s phone is linked, when it last checked in, and whether the protections KidCommit relies on are switched on, so a parent knows if limits stopped working.
Rough location (optional)	Only if a parent turns it on for that child. Rounded on the phone to about 100 metres, or a few kilometres if the phone shares only approximate location, and rounded again on our server to a grid of about 110 metres. It is shared also while KidCommit is closed, if the child allows that. We keep only the latest position and delete it when location is turned off. We also receive whether location is on and allowed, so a parent knows when it stops working.

The child’s phone

To talk to our server, the child’s phone uses a secret device token, which we store only as a hash. We also keep the platform (iPhone or Android) and a notification address, so we can reach the phone straight away when a parent gives bonus time, asks where it is or disconnects it.

We don’t collect advertising identifiers, contacts, photos, messages, browsing history or what’s on the screen.

This website and early access

kidcommit.com is delivered through Cloudflare, which protects and speeds up websites. Like any web server, Cloudflare processes your IP address and technical details of the request (such as the browser and the page) to deliver the page and block attacks. We don’t set cookies and we don’t run analytics, advertising or tracking scripts, so there is no cookie banner. Fonts are served from this site, not from Google.

If you ask for early access with the form on this site, we store:

your email address;
which phone you and your child use, iPhone or Android, so we know how to invite you;
your name and phone number, only if you choose to give them, so our team can reach you;
which form on the site you used, and when.

We send you one email with a confirmation link through Postmark, our email service. Postmark records whether our emails were opened (through an invisible image in the email) and which links in them were clicked; we use this only to check that our emails reach people. The pictures in that email load from this website. Once you confirm, your request, with your name and number if you gave them, reaches our team’s mailbox, and we get in touch by hand. We never put your name or number into emails to anyone else. We use these details only for early access: no newsletter, no marketing, no text messages. Your IP address is used for a moment to stop abuse of the form and isn’t stored.

Phone features the kids app uses

Screen Time (iPhone). Apple’s framework counts time in the apps a parent chose to limit and closes them when the minutes run out. Apple keeps the list of chosen apps on the phone; KidCommit only learns how many were chosen.
Accessibility service (Android). Tells KidCommit which app is in front, so it can close limited apps when time runs out. It doesn’t read what’s on the screen, what the child types or their messages, and nothing it sees leaves the phone. A parent turns it on during setup, after an explanation.
Usage access (Android). Counts the minutes spent in limited apps. Only the minutes are sent to us.
Device administrator (Android). Stops KidCommit from being uninstalled without a parent. It gives no access to any data.
Location. Only if a parent turns it on, as described above. The child’s phone explains it and asks for permission first.
Camera. Only to scan the square code on the parent’s phone when linking the child’s phone. The picture is processed on the phone and never leaves it. On Android, the code is read by Google’s ML Kit, which runs on the phone.
Notifications. For example, to tell the child that a parent gave bonus time.

How we use information

to run KidCommit: sign you in, apply the screen time rules, count minutes, show progress and reports, and send notifications;
to help you get back into your account if you lose your phone number, and to email you about your account and subscription;
to keep KidCommit secure and fair: limit how often sign-in codes can be requested, stop abuse, and give the free trial only once per phone number;
to handle subscriptions and invitations between families;
to answer your messages;
to meet our legal obligations.

We don’t use information for advertising, we don’t build marketing profiles, and we don’t use children’s information to train AI models. We use AI tools to help write, illustrate and narrate the learning episodes before they reach any child; no information about you or your child is sent to those tools.

The adults in your family. Every parent in a family sees the same children and their progress, can change the same settings, and sees the other adults’ names and phone numbers.
The child, on their own phone, sees their own day and progress.
Our service providers, only what each one needs to do its job for us, under contract:
- Hetzner Online (Germany): our server, database and backups;
- Cloudflare: delivers this website;
- Clickatell: sends sign-in codes by text message;
- Apple: notifications to iPhones, App Store payments, and the map in the parent app on iPhone;
- Google: notifications to Android phones, Google Play payments, the map in the parent app on Android, and our support mailbox (Google Workspace);
- Postmark: sends our emails. Emails about your account (codes, reminders and alerts about a child’s phone) aren’t tracked; for early access emails, Postmark records whether they were opened and which links were clicked.
If the law requires it, for example a valid court order, or to protect someone’s safety.

The text of a notification, for example a child’s name and the chore they finished, passes through Apple’s or Google’s notification service on its way to your phone. Like any map, the map service receives the area shown on screen and your phone’s IP address; it doesn’t receive the child’s name or any account details.

We don’t sell or rent personal information, we don’t share it for targeted advertising, and our providers may not use it for their own purposes.

Legal bases (EU and UK)

Contract: to provide KidCommit to the parent who signed up: the account, the family, each child’s rules and progress, and the subscription. Information about a child is processed to provide the service their parent set up.
Consent: for location, for the Android accessibility service, and for early access requests. You can withdraw consent at any time: turn location off for a child, switch the accessibility service off (the parent is told, because limits stop working), or ask us to delete your early access request.
Legitimate interests: to keep KidCommit and this website secure and working, prevent abuse, give the free trial only once per phone number, and check that our early access emails are delivered.
Legal obligation: where the law requires us to keep or disclose information.

Children’s privacy

The app on the child’s phone is used by children aged 7 to 11, so we designed it around their privacy and follow the US Children’s Online Privacy Protection Act (COPPA), the UK Age Appropriate Design Code, and the GDPR rules for children.

The account belongs to a parent or legal guardian. Only the parent can add a child and link the child’s phone, and the parent decides whether to turn on features such as location and chore approval.
What we collect from children and why is listed in full in What we collect about children. We never ask a child for more than an activity needs.
No contact details, no public profile. Children can’t create accounts, enter contact details, chat, post anything public or buy anything in the app on their phone. There are no ads and no links out of the kids app.
Disclosure. We don’t disclose children’s information to anyone except the service providers listed above, who act only on our behalf.
Parents’ rights. A parent can review everything we hold about their child in the app, ask us to correct it, stop further collection by disconnecting the child’s phone, and delete it by deleting the child in the app or by writing to us.

Operator: ITexperts SIA, Dubultu prospekts 62A-13, Jūrmala, LV-2015, Latvia; email [email protected].

How long we keep information

Information	How long
Account, family, children and their progress	While the account exists. Deleted immediately when a parent deletes the child or the account.
If the subscription ends	The limits switch off on the day it ends, or, if a renewal payment fails, when the App Store or Google Play stops retrying it (up to 16 days). 90 days after that we delete the children’s information, never earlier than a week after we remind you. After a refund, the 90 days count from the date of the refund. The parents’ own accounts stay until they delete them.
Sign-in and email codes	24 hours. A started move to a new phone number is forgotten after 24 hours too.
Sign-in sessions	Up to 90 days. Deleted a day after they expire or you sign out. Changing your Parent PIN ends every other session at once.
Family invitation and phone linking codes	Deleted a day after they expire.
Location	Only the latest position, deleted when location is turned off.
Fingerprint of a deleted account’s phone number	As long as we offer a free trial: it lets us give the trial only once per number. It’s made with a secret key that isn’t stored with our data, so the number can’t be recovered from it.
Early access requests	Unconfirmed: deleted 30 days after our last email. Confirmed: until the apps are publicly launched, plus 90 days. Reply to any of our emails to have yours deleted sooner.
Messages to support	As long as we need them to help you and keep a record of what was agreed, and no longer. Ask us to delete them at any time, unless the law requires us to keep them.
Reminder and alert emails	Our copy of a reminder about payment or deletion, or of an alert about a child’s phone, stays in our email queue for up to 30 days after we send it.
Emails in Postmark	Postmark keeps each email we send, and for early access emails whether they were opened and which links were clicked, for 45 days.
Server logs	Technical records of requests (IP address, time, address requested), kept for a limited time for security and troubleshooting and overwritten automatically.
Backups	Made daily and kept for 14 days, so deleted information disappears from backups within 14 days.

Deleting information

A child: open the child in KidCommit Parent, tap the settings button, then “Delete” with the child’s name. Everything about the child is deleted, and the child’s phone is disconnected with its limits lifted.
Your account: Settings, then “Delete account” at the bottom of the screen. If you’re the only adult in the family, the whole family is deleted with your account. If another adult is in the family, the children stay with them and only your own details are deleted.
Without the app: write to [email protected] from the email address on your account, or tell us the phone number you sign in with. We’ll confirm it’s you and delete the account within one month, usually much sooner.

Deleting the account doesn’t cancel a subscription: Apple and Google handle billing, so cancel it in the App Store or Google Play. The app shows how before you delete.

Your rights

Depending on where you live, you have the right to access the information we hold about you and your child, to correct it, to delete it, to receive a copy in a portable format, to object to or restrict some uses, and to withdraw consent. Most of this is available in the app. For anything else, including a copy of your data, write to [email protected]. We answer within one month.

If you think we got something wrong, please tell us first so we can fix it. You can also complain to a data protection authority: our lead authority is Latvia’s Data State Inspectorate (dvi.gov.lv); you can also contact the authority where you live, and in the UK, the Information Commissioner’s Office (ico.org.uk).

Security

Connections between the apps and our server are encrypted. Sign-in and email codes, sessions, device tokens, phone linking codes, family invitation codes and the parent PIN are stored only as one-way hashes. The code for inviting other families is stored as it is, so the app can show it to you. Moving an account to a new phone number takes a code from the confirmed email, a code to the new number and the Parent PIN, and signs out every other phone. Each family’s information is available only to that family’s adults and linked phones. Location is rounded on the phone before it’s sent, and again on our server. Deleting a child or the account asks for Face ID or the phone’s passcode first, and parents can lock KidCommit Parent itself with Face ID or a fingerprint.

Where information is stored

Our server, database and backups are in Germany, in the European Union. Some of our providers (Apple, Google, Cloudflare, Clickatell and Postmark) may process information in other countries, including the United States. Where that happens, the transfer is covered by an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework, for certified providers) or by the Commission’s Standard Contractual Clauses.

Changes to this policy

If we change this policy, we’ll update the date at the top. For significant changes, we’ll tell parents in the app before the change takes effect.

Contact

ITexperts SIA, Dubultu prospekts 62A-13, Jūrmala, LV-2015, Latvia. Registration number 48503027270, VAT number LV48503027270. Email [email protected].