Privacy

What we collect

Waitlist: the name, email and number of children you submit on this website, used only to contact you about KidsCloud.

Your account: your name, your email, and how you sign in (email and password, Google or Apple).

Your family: what you and the people you invite add — your children’s names and birth dates, the calendar, custody days, notes, messages and the record of changes. This can include sensitive details, such as a doctor’s appointment; you choose what to write.

Voice and shared text: when you speak to the assistant, your voice is turned into text on your phone, and the audio never leaves it. That sentence — or text you share into the app from another app, such as an email — is sent, together with the first names of the children and guardians in your space, to our AI provider so it can fill in the form for you. Nothing is saved until you confirm it. We log each request (whether it worked, how long it took, what it cost), never the words.

Your device: if you allow notifications, a device identifier and your app language, to deliver them.

Usage and errors: which features are used and when something fails, linked to your account’s id — never what you write.

We don’t collect your location, contacts or photos, and there is no advertising.

How we use it

Only to provide and improve KidsCloud. Your family’s information is visible only to the people who were given access to it. We never sell your data or use it for advertising.

We process it because you asked us to provide the service (a contract), and, for usage and error data, because of our legitimate interest in keeping the app working.

Who processes it

These providers process data only on our behalf, under a data processing agreement:

Supabase — our database, sign-in and servers, in Frankfurt (EU).

PostHog — usage and error statistics, in the EU.

Anthropic — the AI that understands a spoken or shared sentence, in the United States. It doesn’t use your data to train its models.

Resend — emails such as invitations, in the United States.

Expo, Google (Firebase) and Apple — delivering notifications to your phone.

Google and Apple — sign-in, only if you choose to use them.

Cloudflare — hosting for this website and the web app.

Where data leaves the EU, it’s protected by the safeguards the GDPR requires, such as the European Commission’s Standard Contractual Clauses.

Keeping and deleting your data

We keep your data while your account exists.

To delete your account, open the app, tap your own face on the Space screen and choose Delete account. It happens at once, on every device.

Children only you manage are deleted, with everything about them. Where another editor also looks after a child, you leave that child’s space: what you wrote there (events, messages, the record of changes) stays visible to them without your name, because it’s part of that family’s history too. Your private notes, reminders, notifications, settings and assistant log are deleted.

If you can’t sign in, write to support@kidscloud.app from your account’s email and we’ll delete it within 30 days. To leave the waitlist, write to us or use the unsubscribe link in any of our emails.

Deleted data may remain in encrypted backups for a short time, until they’re overwritten.

Your rights

You can access, correct, delete or export your data, and object to how it’s used, by writing to support@kidscloud.app. You can also complain to the Portuguese data protection authority (CNPD, www.cnpd.pt).

Changes

If we change this policy, we update the date at the top, and we tell you in the app about any important change.