Kidoc ("we", "us", "our") is a mobile application that helps parents track school events by scanning documents, emails, and messages using AI. We are committed to protecting your privacy and your children's information.
1. Information We Collect
- Account Information: When you sign up, we collect your email address and display name via Firebase Authentication or Google Sign-In.
- Children's Names and School Details: You may enter your children's names, school names, and grade levels. This data is stored locally on your device in an encrypted SQLite database.
- Document Content: Text you paste, PDFs you upload, or emails you sync are sent to our AI processing service (Google Gemini via a secure server-side proxy) to extract school events. The raw text is stored locally on your device.
- Gmail Messages (optional): If you enable Gmail sync, we access your Gmail inbox in read-only mode to find school-related emails. We only process emails matching school keywords and store message IDs locally to avoid duplicates.
- Subscription Data: If you purchase Kidoc Pro, your subscription is managed by RevenueCat. We do not store or process your payment information directly.
- Crash Reports: We use Sentry to collect anonymous crash reports and error logs to improve app stability. No personal data is included in crash reports.
2. How We Use Your Information
- To extract and display school events from your documents
- To sync events to your device's native calendar (if you grant permission)
- To send event reminders via local notifications
- To manage your subscription status
- To improve app stability through anonymous crash reporting
3. Where Your Data Is Stored
All personal data (children's names, events, documents) is stored locally on your device in an encrypted SQLite database. We do not have a cloud database that stores your personal information.
- Firebase Authentication: Your email and auth tokens are managed by Google Firebase (see Firebase Privacy).
- AI Processing: Document text is sent to our server-side proxy, which forwards it to Google Gemini for event extraction. Google's data processing terms apply (see Gemini API Terms). We do not retain document text on our servers after processing.
- RevenueCat: Subscription data is managed by RevenueCat (see RevenueCat Privacy Policy).
4. Children's Privacy (COPPA Compliance)
Kidoc is a tool for parents, not for children. We do not knowingly collect personal information directly from children under 13. Parents enter their children's names voluntarily, and this data is stored only on the parent's device. Children's names are obfuscated in the local database using encryption.
If you believe we have inadvertently collected information from a child, please contact us immediately at the email below.
5. Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is shared only with:
- Google Firebase: For authentication
- Google Gemini (via proxy): For AI event extraction
- RevenueCat: For subscription management
- Sentry: For anonymous crash reporting
6. Your Rights
- Delete Your Data: You can delete all local data by signing out and uninstalling the app, or by using the "Delete Account" option in Settings. More on Deleting Account Data.
- Revoke Gmail Access: You can disconnect your Google account at any time from Settings.
- Export: You can share your events via the app's share feature.
7. Security
We use field-level encryption for sensitive data stored locally, secure HTTPS connections for all network requests, and server-side API key management to protect your Gemini API access. Authentication tokens are stored in secure platform storage (Android Keystore / iOS Keychain via MMKV).
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the "Effective Date" above.
9. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at:
Email: bharathdhakar.in@gmail.com