Privacy Policy
Last updated: April 16, 2026
KidHub (“we,” “our,” or “the app”) is a family scheduling and coordination app. We take your family's privacy seriously — especially when it comes to children's data. This policy explains what data we collect, how we use it, who we share it with, and how you can control or delete it.
1. Data We Collect
We collect the following categories of personal information:
2. Children's Data & COPPA Compliance
KidHub is designed for parents and guardians to manage their family's schedule. The app is not directed at children under 13. We require all users to confirm they are 18 or older and a parent or legal guardian during account registration.
Children's data (names, dates of birth, health profiles, school information) is entered by the parent/guardian and stored securely in their account. We do not:
- Allow children to create their own accounts
- Collect data directly from children
- Share children's personal information with advertisers
- Use children's data for behavioral targeting or profiling
Parents can view, edit, or delete all of their children's data at any time within the app (Settings → Child Profiles). Full account deletion (see Section 7) removes all children's data permanently.
3. How We Use Your Data
- Display your family's schedule, playdates, and group activities
- Send push notifications for event reminders, playdate invitations, and connection requests
- Send email invitations to non-app contacts (via Resend) when you initiate a playdate or party invite
- Send SMS verification codes for phone number verification (via Twilio)
- Sync events with your Apple or Google Calendar (when you enable this feature)
- Display local weather information (when you enable this feature)
- Process subscription purchases (via RevenueCat/Apple)
- Improve the app through anonymized usage analytics
4. How We Store Your Data
All personal data is stored in Google Firebase (Firestore database and Firebase Storage) hosted in the United States. Data is encrypted in transit (TLS) and at rest (AES-256). Firebase's security rules restrict access so that only authenticated users can read their own data.
5. Third-Party Services
We use the following third-party services that may process your data:
| Service | Purpose | Data shared |
|---|---|---|
| Firebase (Google) | Authentication, database, file storage | All app data |
| RevenueCat | Subscription management | User ID, purchase receipts |
| Mixpanel | Usage analytics | User ID, screen views, feature usage (no child PII) |
| Resend | Email delivery | Recipient email, message content (when you send invites) |
| Twilio | SMS verification | Phone number (for verification codes only) |
| Expo | Push notifications | Device push token, notification content |
| Google Maps Platform | Location autocomplete for events | Search queries (no user identity) |
| Apple (StoreKit) | In-app purchases | Apple ID, purchase receipts |
| Open-Meteo | Weather data | Approximate coordinates (no user identity) |
We do not sell your personal data to any third party.
6. Data Sharing
Your data is shared with other KidHub users only in the following cases:
- Family links: when you create a co-parenting link, the linked parent can see shared children's events
- Playdates: other participants see the playdate details (date, time, location, your child's first name)
- Groups: group members see the group schedule and member list
- Email invites: when you send an invite, the recipient receives the event details and your name/email
We never share your data with advertisers, data brokers, or unrelated third parties.
7. Account Deletion
You can delete your account and all associated data at any time: Settings → Help & Support → Delete Account.
When you delete your account, we permanently remove:
- Your user profile and all personal information
- All children's profiles, health records, and school information
- All events, playdates, and group memberships
- All photos and file uploads
- All contacts and family connections
- All homework, chores, and rewards data
- Your Firebase Authentication account
Deletion is processed immediately via an automated Cloud Function. A non-identifying audit record (timestamp and deletion counts only — no personal data) is retained for compliance purposes. Deletion is irreversible.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data (visible in the app at all times)
- Correct inaccurate data (editable in Settings → Child Profiles, account settings)
- Delete your data (Settings → Help & Support → Delete Account)
- Export your data — contact us at the email below
- Withdraw consent for optional features (calendar sync, weather, push notifications) at any time in Settings
If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect and the right to opt out of data sales (we do not sell data). If you are in the EU/EEA, you have rights under the GDPR including data portability and the right to lodge a complaint with your local data protection authority.
9. Data Retention
We retain your data for as long as your account is active. If you delete your account, all data is removed immediately (see Section 7). We do not retain personal data after account deletion except for the anonymous audit timestamp.
10. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will notify you via in-app notification or email. The “Last updated” date at the top reflects the most recent revision.
11. Contact Us
For privacy questions, data requests, or concerns about children's data:
admin@kid-hub.app