Privacy Policy — KidiPass
Last updated: June 4, 2026
KidiPass ("the app", "the service", "we") is an educational app for children ages 3–12 that combines a screen-time gate with personalized practice. This policy explains what information we collect, how we use it, who we share it with, and what your rights are. Questions: [email protected].
Important: the account is created and managed by a parent or guardian. The child uses the app under parental supervision, and the parent provides consent for collecting and processing the child's information.
1. Information we collect
a. Parent information
- Email address and display name, for creating an account and signing in.
- Subscription and trial status (Trial/Pro/Free).
b. Child information (provided by the parent)
- First name, age or date of birth, gender.
- Hebrew and English reading levels, active subjects, and learning preferences.
c. Learning and usage data
- Questions answered, answer correctness, response times, help usage, and skips.
- Mastery per subject and skill, daily streaks, and activity summaries.
- App usage events (sign-up, onboarding completion, lesson completion, purchases) for operating and improving the product.
d. Device information
- Paired device identifiers and push notification tokens, used to send messages to the parent.
- To operate the screen-time gate, the app accesses information about the foreground app on the device itself (via accessibility or usage-stats permissions). This information is processed locally on the device for lock/unlock only and is not collected to our servers as browsing history.
e. Payment information
- When you purchase a subscription, payment is processed by Google Play. We do not collect or store credit-card details. We only receive and store subscription status and a purchase identifier.
2. How we use information
- Personalizing learning content to the child's level and progress.
- Managing the account, subscription, and screen-time gate.
- Sending operational messages to the parent (email verification, summaries, system notifications).
- Improving content quality, product performance, and service safety.
We do not use children's information for behavioral advertising, and we do not display ads in the app.
3. Sharing with third parties (service providers)
We rely on trusted service providers that process information only on our behalf and under our instructions:
- Google Firebase (authentication, Firestore database, cloud functions, push messaging) — data is stored in the eur3 region (European Union).
- Google Gemini / Firebase AI — generating tailored questions and responses. Learning context (such as topic and level) is sent to produce the content.
- Mailgun — sending operational emails.
- Google Play Billing — processing subscription payments.
- Google reCAPTCHA and App Check — abuse prevention and security.
We do not sell personal information, and we do not share information with third parties for advertising purposes.
4. Data retention and deletion
We retain information while the account is active. You can request deletion of all information (the parent account and child profiles) by contacting [email protected] or via the in-app account deletion option. We will delete the information within 30 days of the request, except for information we are legally required to retain.
5. Security
Information is transmitted encrypted (HTTPS), stored on secure Google Cloud infrastructure, and protected by server-side authorization rules and request attestation (App Check). No security method is perfect, and we take reasonable measures to protect information.
6. Children's privacy
KidiPass is intended for use by children under parental supervision. The account is created by a parent, and the parent provides consent for processing the child's information. We do not collect precise location, do not show ads to children, and do not use the child's information for marketing. We collect the minimum needed to operate the educational service.
7. Your rights
You may access, correct, and delete information, and withdraw consent at any time. Privacy requests: [email protected].
8. Changes to this policy
We may update this policy from time to time. A material change will be posted on this page with an updated "Last updated" date. Continued use of the service after the update constitutes acceptance of the updated policy.
9. Contact
For any privacy question, contact us at: [email protected].
