Privacy Policy

This Privacy Policy describes how the KidShield parent app collects, uses, and shares information when a parent manages a family account, pairs a child device, reviews activity, and uses child-safety features.

Last updated: August 11, 2026

Information We Process

• Account details needed for sign-in, such as email address and authentication identifiers.
• Family account information, including parent and child display names and optional child age.
• Child-device safety data, including screen-time settings, app-rule settings, and child-protection status.
• Challenge and rewards data, including assigned challenges, submissions, review outcomes, credits, and redeemed screen time.
• When a parent enables AI checking, the approved rubric and the child’s submitted questions, answers, explanations, and selected images needed to evaluate that challenge.
• Technical service data needed to operate the app, such as Firebase Cloud Messaging tokens and App Check / integrity signals.

How We Use Information

• To create and maintain a parent account and family relationship.
• To pair and manage child devices linked to the family.
• To display device status, challenge activity, and credits in the parent app.
• To send operational notifications, such as challenge submissions, time requests, and protection alerts.
• To secure the service, prevent abuse, and verify that authorized app builds are calling backend services.

How Information Is Shared

Information is shared within the family account so linked parents can manage linked child devices. The service also uses infrastructure providers such as Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Storage, and Firebase Cloud Messaging to operate the product.

AI checking is optional and controlled by the parent. When enabled, the minimum challenge instructions, approved grading criteria, and submitted work needed for grading are sent to Google’s Gemini API for processing. Gemini does not receive Firebase credentials, authentication tokens, arbitrary account access, or unrelated family information. KidShield does not use child submissions to train its own models or for advertising.

Data Retention

Family data is retained while the family account remains active and for as long as needed to operate the service, enforce safety features, maintain records of challenge activity, and meet legal or operational obligations. AI-check evidence is retained only as needed for retry, parent review, audit, and abuse prevention, then is eligible for automated deletion under the service retention schedule. When an account is deleted, KidShield deletes account and family data and requests that Google Play stop renewal of subscriptions purchased by that account. A minimal, access-restricted billing record, including the Play purchase token when still necessary, may be retained for billing reconciliation, cancellation retries, refunds, fraud prevention, and legal compliance. It is deleted as soon as it is no longer needed and no later than 90 days after the subscription expires or cancellation completes, whichever is later.

Security

KidShield uses access controls, authenticated backend services, and integrity protections intended to limit unauthorized access. No method of storage or transmission is completely secure, but reasonable measures are used to protect service data.

Your Choices

• Parents can update settings, unlink devices, or stop using the service.
• Parents can use the support contact listed on the Google Play listing for privacy-related requests.
• Parents can request account and associated-data deletion in the app or through the standalone web instructions.