Privacy Policy

Who we are

KidCommit is made by ITexperts SIA, a company registered in Latvia under number 48503027270, with its registered office at Dubultu prospekts 62A-13, Jūrmala, LV-2015 (“we” or “us” below). We decide how and why the information described here is used. That makes us the controller under European and UK data protection law, and the operator under the US Children’s Online Privacy Protection Act (COPPA).

This policy covers:

• KidCommit Parent, the app for parents, on iPhone and Android;
• KidCommit, the app on the child’s phone, on iPhone and Android;
• our server, which keeps each family’s settings and progress so that both apps show the same thing;
• this website, kidcommit.com.

Questions about privacy go to [email protected]. A person reads every message.

The short version

• A parent creates the account. Children never create accounts and never give us their contact details.
• We collect what KidCommit needs to work: the parent’s contact details, the child’s nickname and age, the family’s screen time rules, and what the child earned, did and used.
• No ads. We don’t sell or rent information, and there is no third-party analytics or tracking in either app or on this website.
• Location is off unless a parent turns it on for a child. When it’s on, we keep only the latest rough position, and the child can see that it’s on.
• A parent can delete a child, or the whole account, at any time in the app. Deletion is immediate.

For kids

What we collect about parents

What we collect about children

A parent gives us some of this information; the rest is created as the child uses the app on their phone.

The child’s phone

To talk to our server, the child’s phone uses a secret device token, which we store only as a hash. We also keep the platform (iPhone or Android) and a notification address, so we can reach the phone straight away when a parent gives bonus time, asks where it is or disconnects it.

We don’t collect advertising identifiers, contacts, photos, messages, browsing history or what’s on the screen.

This website and early access

kidcommit.com is delivered through Cloudflare, which protects and speeds up websites. Like any web server, Cloudflare processes your IP address and technical details of the request (such as the browser and the page) to deliver the page and block attacks. We don’t set cookies and we don’t run analytics, advertising or tracking scripts, so there is no cookie banner. Fonts are served from this site, not from Google.

If you ask for early access with the form on this site, we store:

• your email address;
• which phone you and your child use, iPhone or Android, so we know how to invite you;
• your name and phone number, only if you choose to give them, so our team can reach you;
• which form on the site you used, and when.

We send you one email with a confirmation link through Postmark, our email service. Postmark records whether our emails were opened (through an invisible image in the email) and which links in them were clicked; we use this only to check that our emails reach people. The pictures in that email load from this website. Once you confirm, your request, with your name and number if you gave them, reaches our team’s mailbox, and we get in touch by hand. We never put your name or number into emails to anyone else. We use these details only for early access: no newsletter, no marketing, no text messages. Your IP address is used for a moment to stop abuse of the form and isn’t stored.

Phone features the kids app uses

• Screen Time (iPhone). Apple’s framework counts time in the apps a parent chose to limit and closes them when the minutes run out. Apple keeps the list of chosen apps on the phone; KidCommit only learns how many were chosen.
• Accessibility service (Android). Tells KidCommit which app is in front, so it can close limited apps when time runs out. It doesn’t read what’s on the screen, what the child types or their messages, and nothing it sees leaves the phone. A parent turns it on during setup, after an explanation.
• Usage access (Android). Counts the minutes spent in limited apps. Only the minutes are sent to us.
• Device administrator (Android). Stops KidCommit from being uninstalled without a parent. It gives no access to any data.
• Location. Only if a parent turns it on, as described above. The child’s phone explains it and asks for permission first.
• Camera. Only to scan the square code on the parent’s phone when linking the child’s phone. The picture is processed on the phone and never leaves it. On Android, the code is read by Google’s ML Kit, which runs on the phone.
• Notifications. For example, to tell the child that a parent gave bonus time.

How we use information

• to run KidCommit: sign you in, apply the screen time rules, count minutes, show progress and reports, and send notifications;
• to help you get back into your account if you lose your phone number, and to email you about your account and subscription;
• to keep KidCommit secure and fair: limit how often sign-in codes can be requested, stop abuse, and give the free trial only once per phone number;
• to handle subscriptions and invitations between families;
• to answer your messages;
• to meet our legal obligations.

We don’t use information for advertising, we don’t build marketing profiles, and we don’t use children’s information to train AI models. We use AI tools to help write, illustrate and narrate the learning episodes before they reach any child; no information about you or your child is sent to those tools.

Who can see information

• The adults in your family. Every parent in a family sees the same children and their progress, can change the same settings, and sees the other adults’ names and phone numbers.
• The child, on their own phone, sees their own day and progress.
• Our service providers, only what each one needs to do its job for us, under contract:
  • Hetzner Online (Germany): our server, database and backups;
  • Cloudflare: delivers this website;
  • Clickatell: sends sign-in codes by text message;
  • Apple: notifications to iPhones, App Store payments, and the map in the parent app on iPhone;
  • Google: notifications to Android phones, Google Play payments, the map in the parent app on Android, and our support mailbox (Google Workspace);
  • Postmark: sends our emails. Emails about your account (codes, reminders and alerts about a child’s phone) aren’t tracked; for early access emails, Postmark records whether they were opened and which links were clicked.
• If the law requires it, for example a valid court order, or to protect someone’s safety.

The text of a notification, for example a child’s name and the chore they finished, passes through Apple’s or Google’s notification service on its way to your phone. Like any map, the map service receives the area shown on screen and your phone’s IP address; it doesn’t receive the child’s name or any account details.

We don’t sell or rent personal information, we don’t share it for targeted advertising, and our providers may not use it for their own purposes.

Legal bases (EU and UK)

• Contract: to provide KidCommit to the parent who signed up: the account, the family, each child’s rules and progress, and the subscription. Information about a child is processed to provide the service their parent set up.
• Consent: for location, for the Android accessibility service, and for early access requests. You can withdraw consent at any time: turn location off for a child, switch the accessibility service off (the parent is told, because limits stop working), or ask us to delete your early access request.
• Legitimate interests: to keep KidCommit and this website secure and working, prevent abuse, give the free trial only once per phone number, and check that our early access emails are delivered.
• Legal obligation: where the law requires us to keep or disclose information.

Children’s privacy

The app on the child’s phone is used by children aged 7 to 11, so we designed it around their privacy and follow the US Children’s Online Privacy Protection Act (COPPA), the UK Age Appropriate Design Code, and the GDPR rules for children.

• The account belongs to a parent or legal guardian. Only the parent can add a child and link the child’s phone, and the parent decides whether to turn on features such as location and chore approval.
• What we collect from children and why is listed in full in What we collect about children. We never ask a child for more than an activity needs.
• No contact details, no public profile. Children can’t create accounts, enter contact details, chat, post anything public or buy anything in the app on their phone. There are no ads and no links out of the kids app.
• Disclosure. We don’t disclose children’s information to anyone except the service providers listed above, who act only on our behalf.
• Parents’ rights. A parent can review everything we hold about their child in the app, ask us to correct it, stop further collection by disconnecting the child’s phone, and delete it by deleting the child in the app or by writing to us.

Operator: ITexperts SIA, Dubultu prospekts 62A-13, Jūrmala, LV-2015, Latvia; email [email protected].

How long we keep information

Deleting information

• A child: open the child in KidCommit Parent, tap the settings button, then “Delete” with the child’s name. Everything about the child is deleted, and the child’s phone is disconnected with its limits lifted.
• Your account: Settings, then “Delete account” at the bottom of the screen. If you’re the only adult in the family, the whole family is deleted with your account. If another adult is in the family, the children stay with them and only your own details are deleted.
• Without the app: write to [email protected] from the email address on your account, or tell us the phone number you sign in with. We’ll confirm it’s you and delete the account within one month, usually much sooner.

Deleting the account doesn’t cancel a subscription: Apple and Google handle billing, so cancel it in the App Store or Google Play. The app shows how before you delete.

Your rights

Depending on where you live, you have the right to access the information we hold about you and your child, to correct it, to delete it, to receive a copy in a portable format, to object to or restrict some uses, and to withdraw consent. Most of this is available in the app. For anything else, including a copy of your data, write to [email protected]. We answer within one month.

If you think we got something wrong, please tell us first so we can fix it. You can also complain to a data protection authority: our lead authority is Latvia’s Data State Inspectorate (dvi.gov.lv); you can also contact the authority where you live, and in the UK, the Information Commissioner’s Office (ico.org.uk).

Security

Connections between the apps and our server are encrypted. Sign-in and email codes, sessions, device tokens, phone linking codes, family invitation codes and the parent PIN are stored only as one-way hashes. The code for inviting other families is stored as it is, so the app can show it to you. Moving an account to a new phone number takes a code from the confirmed email, a code to the new number and the Parent PIN, and signs out every other phone. Each family’s information is available only to that family’s adults and linked phones. Location is rounded on the phone before it’s sent, and again on our server. Deleting a child or the account asks for Face ID or the phone’s passcode first, and parents can lock KidCommit Parent itself with Face ID or a fingerprint.

Where information is stored

Our server, database and backups are in Germany, in the European Union. Some of our providers (Apple, Google, Cloudflare, Clickatell and Postmark) may process information in other countries, including the United States. Where that happens, the transfer is covered by an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework, for certified providers) or by the Commission’s Standard Contractual Clauses.

Changes to this policy

If we change this policy, we’ll update the date at the top. For significant changes, we’ll tell parents in the app before the change takes effect.

Contact

ITexperts SIA, Dubultu prospekts 62A-13, Jūrmala, LV-2015, Latvia. Registration number 48503027270, VAT number LV48503027270. Email [email protected].