Welcome to Kidoc ("we", "our", or "us"). Kidoc is a screen-free parenting and child development mobile application that empowers parents and caregivers to create engaging, age-appropriate, offline play activities for their children (ages 1–12) with the guidance of our AI companion, Roo.
We take privacy, particularly children's privacy, with the utmost seriousness. This Privacy Policy explains what information we collect, how we handle and protect it, and the choices available to you.
1. Important Principles & Children's Privacy (COPPA & GDPR-K Compliance)
- Kidoc is Built for Parents and Guardians: The Kidoc app is designed exclusively for use by adults (parents, guardians, educators) to facilitate screen-free, offline play with their children. It is not directed at or intended to be operated independently by children under 13 (or under 16 in the European Economic Area).
- We Do Not Knowingly Collect Personal Information from Children: We do not solicit, collect, or store personally identifiable information (PII) directly from children.
- Child Profile Data Remains on Your Device: When you enter your child's first name, age/birth month, developmental goals, and interests, this data is stored locally on your device in a private SQLite database. It is never stored on our central database servers or used for marketing or profiling.
- Adult Verification (Parental Gate): Kidoc incorporates a strict Parental Gate (math challenge or adult verification) before allowing access to external web links, in-app customer support, app settings, or subscription purchases.
2. Information We Collect
A. Account & Authentication Information
When you create an account or sign in, we collect basic account credentials via Google Firebase Authentication:
- Email & Password: Your email address and encrypted password credentials.
- Google Sign-In: Your Google account email address, display name, and unique user identifier (UID).
- Apple Sign-In (iOS): Your Apple ID unique identifier and, if shared, your email address (including Apple private relay emails) and name.
B. Device & Local Profile Information (Stored Locally on Device)
The following information is stored directly in your device's local private database (SQLite):
- Children's Profiles: Name/nickname, age, avatar choice, developmental milestone goals, and interest tags.
- Playbox Materials: Items you select or enter as available household materials (e.g., cardboard boxes, markers, spoons).
- Activity History & Skill Tree: Past generated activities, favorite bookmarks, completion ratings, and developmental progress logs.
- Keepsake Caps: Photos taken or selected by you, embellished with digital sticker overlays, timestamps, and memory notes.
C. Information Processed for AI Features (Ephemeral Cloud Processing)
When you actively use our AI assistant Roo, specific request parameters are processed securely through our server-side Cloud Functions powered by Google Cloud & Google Gemini AI:
- Activity Requests: Coarse child age (in years/months), current mood, available time budget, setting (indoor/outdoor), and selected household materials.
- Voice Input ("Tell Roo"): When you use the microphone to speak your activity request, the audio snippet is streamed securely to our Cloud Function for real-time speech-to-text transcription via Google Gemini. The audio snippet is processed in memory and discarded immediately after generating the text. No voice biometric data or audio recordings are retained.
- Household Material Scanner (Vision): When you use the camera to scan household craft supplies, the image frame is processed ephemerally by Google Gemini Vision to identify household items (e.g., "paper cups", "tape"). The image is discarded immediately after item detection.
- Keepsake Caps AI Overlays: When you request an AI memory frame or caption for a photo in the Keepsake Studio, the photo is sent securely for graphic synthesis and discarded immediately upon completion.
- Important: None of this data is used to train Google Gemini foundational models. All AI processing is performed under Google Cloud Enterprise privacy terms.
D. Subscriptions & In-App Purchases
If you subscribe to Kidoc Pro, your transaction is handled directly by the Apple App Store or Google Play Store. We utilize RevenueCat to manage subscription entitlements. We never receive or store your credit card numbers, bank details, or payment card information.
E. Analytics & Usage Diagnostics (PostHog)
We use PostHog to understand aggregate user journeys, app performance, and feature adoption:
- Strict Privacy Sanitization: Our analytics pipeline automatically scrubs and filters all event data before transmission. Children's names, exact birthdates, raw photos, and reflection text are strictly prohibited and stripped.
- Session Replay Protection: If session replay is enabled for UX diagnostics, all text input fields, images, and camera viewports are strictly masked on the device.
- Opt-Out Available: You can disable analytics tracking at any time in Settings → Privacy → Analytics Opt-Out.
F. Crash Reporting (Sentry)
We use Sentry to monitor app stability and fix technical bugs. Sentry receives anonymous stack traces, device hardware models, and OS versions. No child profiles, photos, or personal messages are ever sent to Sentry.
G. Customer Support (Crisp)
If you initiate a live support chat from Settings, your chat messages and registered email are processed by Crisp Chat to allow our team to assist you.
3. Device Permissions We Request & Why
Kidoc requests the following system permissions only when you interact with specific features:
| Permission | Platform | Purpose |
|---|---|---|
| Camera | iOS & Android | Used to take photos for Keepsake Caps and to scan household craft supplies for the Playbox. |
| Photo Library (Read/Write) | iOS & Android | Used to select existing photos for Keepsake Caps and to save generated keepsake images to your camera roll. |
| Microphone | iOS & Android | Used solely when you tap and hold the microphone button to tell Roo what activity you want. |
| Network / Internet | iOS & Android | Required to communicate with Firebase, Google Gemini Cloud Functions, and manage subscriptions. |
You can review or revoke any of these permissions at any time through your device's operating system settings.
4. How We Use Your Information
We use the information we collect strictly to:
- Provide, maintain, and personalize the Kidoc offline activity experience.
- Synthesize creative, safe, screen-free play prompts calibrated to your child's age and interests.
- Transcribe your voice prompts and detect household supplies via camera.
- Manage your free weekly quotas (3 free activities/week) and Kidoc Pro subscription status.
- Provide prompt customer support and resolve technical issues.
- Protect against fraud, abuse, and security vulnerabilities.
5. Third-Party Service Providers
We share data only with trusted infrastructure providers necessary to operate the application. We do not sell, rent, or trade personal data to third parties, data brokers, or advertisers.
| Service Provider | Role / Purpose | Privacy Policy |
|---|---|---|
| Google Firebase | User Authentication & Cloud Functions | Firebase Privacy |
| Google Cloud / Gemini | AI Activity Synthesis, Voice STT, Vision Detection | Google Cloud Privacy |
| RevenueCat | App Store / Play Store In-App Purchase Management | RevenueCat Privacy |
| PostHog | Product Analytics & Funnel Diagnostics (Anonymized) | PostHog Privacy |
| Sentry (Functional Software) | Crash Diagnostics & Performance Monitoring | Sentry Privacy |
| Crisp IM SARL | In-App Customer Support Chat | Crisp Privacy |
6. Data Retention & Storage
- Local Data on Device: Child profiles, activities, and Keepsake Caps reside on your device until you delete them within the app, clear app data, or delete your account.
- Server-Side Quota & Anti-Abuse Records: To prevent free tier abuse and quota cycling (e.g., repeatedly creating and deleting accounts to bypass limits), an anonymous, irreversible cryptographic hash (HMAC-SHA256) records usage counts on Firebase Firestore. This anti-abuse fingerprint contains no names, child information, or readable email addresses, and automatically expires via a 90-day time-to-live (TTL).
- Crash & Diagnostic Logs: Stored in Sentry and PostHog for a maximum of 90 days, after which they are permanently deleted.
7. Your Rights & Choices
Depending on your jurisdiction (including GDPR, CCPA/CPRA, and Indian Digital Personal Data Protection Act), you have the following rights:
- Access & Portability: You can view all your stored children profiles, activities, and memories directly within the app.
- Correction: You can edit child names, ages, interests, and pantry items directly in the app settings.
- Deletion: You can permanently delete your account and all associated data at any time directly in the app (Settings → Account → Delete Account) or by submitting a request to support@kidoc.in. See our Account Deletion Policy.
- Opt-Out of Analytics: You can toggle off analytics tracking in Settings.
8. Security Safeguards
- All network communications between the app, our Cloud Functions, and third-party APIs use strict TLS 1.3 / HTTPS encryption.
- Sensitive API keys (such as Google Gemini and RevenueCat secrets) are never bundled inside the client application binary; they are securely stored inside Firebase Secret Manager and executed strictly server-side.
- Firebase Authentication uses industry-standard token-based authentication and secure session management.
9. Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect app updates or legal requirements. Material changes will be communicated via in-app notification or an updated "Effective Date" at the top of this policy.
10. Contact Us
If you have questions, feedback, or privacy-related requests, please contact our Data Protection and Support Team at:
Email: support@kidoc.in