Privacy policy

Who we are

Kidslen (“we”, “us”) provides a companion app for children’s phones and a web dashboard for parents or guardians. This policy explains what personal data we process, why, for how long, and what rights you have. It applies to kidslen.app, the Kidslen apps and the hosted Kidslen service.

Data we collect

We collect the minimum needed to run the service:

• Parent account: email address, display name, password hash, and family settings (policies, limits, alerts).
• Child profile: a display name or nickname and an optional date of birth entered by the parent. No child email, phone number or government ID is required.
• Activity data from connected platforms: content titles, platform name, timestamps, durations and search terms where the platform makes them available.
• Android app-usage history: names and foreground minutes for supported apps, collected with active monitoring and data-collection consent and Android Usage access, even without a connected platform account. Revoke either consent to stop collection and uploads. Turning off Usage access in Android settings stops new measurements; previously queued history may still upload while those consents remain active. Existing history follows the activity retention and deletion controls below.
• Parent Apps has separate local opt-ins for the launchable-app name/package list and per-device daily duration snapshots, kept for at most 30 days. Turning either sharing option off stops uploads and requests deletion of that snapshot type, retrying when online. It does not stop or delete the app-usage history above.
• Optional Android Accessibility applies parent-selected rules through a visible break screen, without reading window content, messages or keystrokes.
• Consent records: when the parent and child acknowledged the transparency screen, and the app version shown.
• Technical data: device identifiers, model, OS and app versions, battery and permission state, push tokens and operational diagnostics. Family chat messages, reactions, reports and call participants/times/status are also stored to deliver communication features.

What we do not collect

Kidslen does not record the screen, log keystrokes or read messages from other apps. Kidslen family chat is stored on our service; guardians can view sibling conversations, as disclosed to the children. Camera and microphone are used only for calls a user actively joins; the camera also scans enrolment QR codes. Call media passes through Cloudflare’s WebRTC relay and is not recorded by Kidslen. Location sharing is normally about every 15 minutes with consent; SOS, check-in and an individual parent location request may send an additional point, shown on the child’s phone.

Why we process data

• To show parents watch-time statistics, the live activity feed and alerts.
• To enforce the policies the parent has set (daily limit, bedtime window, blocked platforms, keyword alerts).
• To show the child what is shared on the transparency screen.
• To secure accounts, prevent abuse and keep the service reliable.
• To reply when you contact us.

Our legal bases are the parent’s consent (including consent on behalf of the child, as required by COPPA, GDPR Article 8 and Vietnam’s Decree 13/2023/ND-CP), performance of our terms with the parent, and our legitimate interest in keeping the service secure.

Retention

Default automatic retention: activity 90 days, location 30 days, family messages and message reports 180 days, call history 90 days, operational diagnostics 14 days and security audit records 365 days. Parents can manually delete older activity or a child profile. Account deletion removes the account and its private data; shared family data remains for other guardians, or is deleted when the last guardian deletes their account.

Sharing

We do not sell personal data or show ads. Service providers process hosting and network traffic (including Cloudflare), push notifications (Google Firebase and Apple), and email delivery. Family-call media is relayed by Cloudflare. Connected services receive authenticated requests made on the device. Family members receive messages and the activity their permissions allow. When configured, Sentry processes crash/performance diagnostics; Firebase and Apple process push delivery and operational telemetry. No advertising tracking is enabled. This release does not send activity to an external AI provider. We may disclose data when legally required.

Your rights

Parents can export a child profile, revoke consents, delete activity or delete their account from Settings in the parent app or dashboard. Account deletion includes a confirmation step and removes active-service data as described above. For deletion requests without the app, email [email protected] with the subject “Delete Kidslen account”; we verify account ownership before acting. Backup copies expire through backup rotation; contact us for the applicable period. Children can ask a parent or contact us to request deletion or correction.

International transfers

Kidslen and its service providers may process data outside your country. There is no automatic storage-region selection based on registration. Contact [email protected] for information about the hosting location and safeguards applicable to your family.

Changes and contact

We will announce material changes to this policy by email and on this page before they take effect. Questions and requests: [email protected].