Privacy Policy

Last updated: 11 October 2026

In short: Kidoit keeps only what a family needs to use the app: a parent's email, the names you give your family and children, and the tasks, points and rewards you create. Children don't need an email or phone number. There are no ads, no tracking and no selling of data. You can delete your account, or any child's data, at any time from inside the app.

1. Who we are

Kidoit is a family app for tasks, points and rewards, run by the Kidoit team ("we", "us"). For anything about your privacy, write to adarsh@thecomputecenter.com. We are the controller (data fiduciary) of the personal data described here.

2. Who uses Kidoit

Kidoit accounts are created by parents and guardians, who must be adults. A parent creates a Family Space and adds their children. A child never creates an account and never has to give an email address or phone number. A child uses Kidoit in one of these ways, all set up by a parent:

not at all: the parent records tasks for them;
in Kid Mode on a parent's phone, locked with the parent's PIN;
on their own device, connected with a one-time code from the parent;
with an email address the parent chooses to link, so the child can sign in on their own.

3. What we collect

Data	Whose	Why
Email address	Parent; a child only if a parent links one	Sign-in with a one-time 6-digit code (there are no passwords)
Display name and avatar (an emoji)	Parent	Shown to the other parent in your family
Family name and emoji; invite codes	Family	So co-parents can share one Family Space
Child's name or nickname, optional birth year, avatar emoji	Child (entered by a parent)	To show the right tasks and points to the right child
Tasks, notes, approvals, points history, rewards and reward requests	Family and children	The core of the app
Device name (e.g. "Pixel 8") and notification token	Parents' and children's devices	To list signed-in devices, let you sign them out, and send notifications
IP address of a sign-in code request	Whoever asks for a code	To limit abuse; deleted after 2 days
Technical logs (which action was used, when, and whether it worked)	All users	To keep the service running and fix problems; kept for up to 30 days; they don't contain email addresses or IP addresses

We do not collect location, contacts, photos, advertising identifiers or payment details. Kidoit contains no advertising and no analytics or tracking tools.

4. How we use it, and our legal basis

To provide the service you asked for (performance of a contract): sign-in, your Family Space, tasks, points, rewards and notifications.
With a parent's consent for children's data: a parent adds each child and chooses how the child uses Kidoit. Linking a child's email address needs the parent's explicit action and a code sent to that address.
Legitimate interests in keeping Kidoit secure and working: rate limiting, technical logs and backups.

We never use children's data for advertising, profiling or any purpose other than running the family's own Kidoit.

5. Who we share it with

We don't sell or rent personal data. Only these service providers process it for us, under their data-processing terms:

Resend: sends sign-in code emails (receives the email address and the email's content).
Google Firebase Cloud Messaging: delivers notifications to phones (receives the notification token and the notification text, such as "Mia finished a task").
Cloudflare R2: stores encrypted-in-transit backups of the database.

Within a family, parents can see everything in their Family Space, and each child sees only their own tasks, points and rewards.

6. Where it is stored

Kidoit's servers are in India. Our providers may process data in other countries, including the United States and the European Union. Where data leaves your country, we rely on the safeguards those providers offer, such as the EU Standard Contractual Clauses.

7. How long we keep it

Account and family data: until you delete it.
Sign-in codes and the IP address of a code request: 2 days.
Technical logs: up to 30 days.
Backups: each nightly backup is kept for 30 days, then deleted automatically. Deleted data therefore disappears from backups within 30 days.

8. Deleting your data

Your whole account: in the app, open Family → Privacy & account → Delete account. If you are the only parent in your family, the family and all of its children's data are deleted too. If another parent is in the family, they keep the family and its history.
One child: open the child's profile, tap ⋮, then Delete permanently.
Without the app: follow the steps on our Delete your account page.

Deletion from our live systems is immediate and can't be undone.

9. Your rights

Depending on where you live (for example under the GDPR or UK GDPR, India's Digital Personal Data Protection Act 2023, or US state laws), you have the right to:

access your data and receive a copy of it;
correct it: most details can be edited in the app;
delete it (see section 8);
withdraw consent, for example by unlinking a child's email or deleting a child;
object to or restrict some processing;
nominate someone to exercise your rights if you die or become unable to (India);
complain to your data-protection authority.

To use any of these rights, email adarsh@thecomputecenter.com. We'll reply within 30 days and may ask you to confirm the request from the email address on your account.

10. Children's privacy

Kidoit is designed for families and is used by children under their parents' supervision. Children's personal data is provided and controlled by a parent, who can review, change or delete it at any time in the app. We collect from children only what they do in the app (for example tapping "I did it!", or a short note on a task) and use it only to run their family's Kidoit. If you believe a child's data was added without a parent's permission, contact us and we will delete it.

11. Security

All connections use HTTPS. Sign-in codes and device pairing codes are stored only in hashed form and expire quickly. Access to the servers is restricted, and the database is backed up every night.

12. Changes

If we change this policy, we'll update the date above. If the change is significant, we'll tell parents in the app before it takes effect.