Privacy policy

Who we are

Kidslen (“we”, “us”) provides a companion app for children’s phones and a web dashboard for parents or guardians. This policy explains what personal data we process, why, for how long, and what rights you have. It applies to kidslen.app, the Kidslen apps and the hosted Kidslen service.

Data we collect

We collect the minimum needed to run the service:

• Parent account: email address, display name, password hash, and family settings (policies, limits, alerts).
• Child profile: a first name or nickname and an age band chosen by the parent. No email, phone number or government ID is required for a child.
• Activity data from connected platforms: content titles, platform name, timestamps, durations and search terms where the platform makes them available.
• Consent records: when the parent and child acknowledged the transparency screen, and the app version shown.
• Technical data: device model, OS version, app version and crash diagnostics needed to keep the app working.

What we do not collect

Kidslen does not record the screen, capture keystrokes, read private messages, access the camera or microphone, or track location in real time — with a location consent the phone shares one position about every 15 minutes, nothing more. We do not build advertising profiles.

Why we process data

• To show parents watch-time statistics, the live activity feed and alerts.
• To enforce the policies the parent has set (daily limit, bedtime window, blocked platforms, keyword alerts).
• To show the child what is shared on the transparency screen.
• To secure accounts, prevent abuse and keep the service reliable.
• To reply when you contact us.

Our legal bases are the parent’s consent (including consent on behalf of the child, as required by COPPA, GDPR Article 8 and Vietnam’s Decree 13/2023/ND-CP), performance of our terms with the parent, and our legitimate interest in keeping the service secure.

Retention

Activity data is retained for a limited period (90 days by default) and then deleted automatically. Parents can shorten this window in the dashboard. Account data is kept while the account exists. Consent records are kept for as long as the child profile exists, so both sides can prove what was agreed.

Sharing

We never sell personal data and we do not show ads. Data is shared only with infrastructure providers that host the service under a data-processing agreement, and with authorities when legally required. Connected platforms (YouTube, TikTok, Instagram, Facebook) receive only the requests needed to read the child’s own activity; we do not send them anything about your family.

Your rights

Parents can export all family data or delete the whole family with one click from the dashboard. Deletion is immediate in the live database and completed in backups within 30 days. Children can ask a parent to delete data or contact us directly. You can also ask us to correct data, object to processing, or lodge a complaint with your data-protection authority.

International transfers

The hosted service runs in data centers chosen for the region you sign up from. Where data crosses borders we rely on standard contractual clauses or an equivalent safeguard.

Changes and contact

We will announce material changes to this policy by email and on this page before they take effect. Questions and requests: [email protected].