Privacy & Conditions

Company: UAB Kiddooo global
Effective Date: April 1, 2025
Last Updated: April 1, 2025

1. Introduction

This Privacy Policy (the "Policy") explains how UAB Kiddooo global (legal entity code: 306337696, address: Odminių g. 14-7, LT-01121 Vilnius, Lithuania; hereinafter "Kiddooo", "we", "our", or "us") collects, uses, stores, and discloses your and your family members’ personal data, including children's data (hereinafter the "Data"), when using the Kiddooo mobile application (the "App").

Kiddooo is a SaaS-based platform designed to strengthen family bonds through personalized, AI-driven activities tailored for children from infancy to adolescence. These activities integrate internationally recognized educational methods (e.g., IB PYP, Montessori, Reggio Emilia, etc.).

We are committed to complying with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable data protection laws. When processing data of users from the United States, we also adhere to COPPA and other applicable U.S. regulations.

Technical Infrastructure: The Kiddooo platform operates using Google Cloud Platform (Cloud Run), Firebase, and DigitalOcean.

Artificial Intelligence: Our services are powered by OpenAI models currently deployed in a containerized infrastructure via Google Cloud Platform (Cloud Run).

2. Data Controller and Contact Information

Data Controller: UAB Kiddooo global

Legal Entity Code: 306337696

Address: Odminių g. 14-7, LT-01121 Vilnius, Lithuania

Email: info@kiddooo.com

Data Protection Officer: Gabrielė Medingytė, info@kiddooo.com

3. Data We Collect

Account and Profile Data
Parents/Guardians: Name, surname, email, phone number, encrypted password, city, interests (for family-matching functionality).
Children: Name or nickname, date of birth, gender, special needs (if provided), learning focus areas.

Usage Data
Completed activities, time spent in the app, interactions, achievement metrics.
Child’s development data by learning area.
AI-generated activity requests.
Challenge participation, earned badges.

Technical Data
IP address, login time, device type, operating system, device ID, error reports (e.g., via Firebase Crashlytics).

Location Data
Used only with permission for features like “Map and Locations” and “Get Directions.” Permissions can be managed in settings.

Third-Party Data
Calendar sync (e.g., with Google Calendar) is available only with permission.
Optional sign-in through Google, Apple, or Facebook may provide access to public profile data.

4. How and Why We Use Your Data

To register and manage user accounts.
To enable the core features of the app.
To generate personalized activity suggestions.
To track and report on child development.
To respond to user inquiries and send important notifications.
To analyze user behavior and improve the app.
To enable calendar and map functions.
To fulfill legal obligations.

5. Legal Bases for Data Processing

Performance of a contract (Article 6(1)(b) GDPR).
Consent (Article 6(1)(a) GDPR), when required.
Legitimate interest (Article 6(1)(f) GDPR).
Legal obligation (Article 6(1)(c) GDPR).

6. Data Recipients

Service providers (e.g., OpenAI, GCP, Firebase, Stripe, analytics tools).
Educators (only with explicit consent).
Law enforcement authorities when legally required.
Business successors in the event of asset transfer.

7. Data Transfers to Third Countries

Data may be processed in the U.S. (e.g., OpenAI, GCP).
Transfer security is ensured through the use of Standard Contractual Clauses (SCC) or compliance with the Data Privacy Framework (DPF), where applicable.

8. Data Retention Periods

Account data: 3 years after account deletion.
Child data: Until consent is withdrawn or 2 years after account deletion.
Analytics data: 24 months (anonymized).

9. Data Security

Data encryption.
Access control.
Regular audits and staff training.
Infrastructure: Google Cloud Platform, Firebase, DigitalOcean.

10. Children's Privacy

Children’s data (under age 14) is processed only with verified parental/guardian consent.
Parents can view, edit, or delete their child’s data via app settings or by contacting us.
We follow the principle of data minimization.

11. Your Rights

Right to access your data.
Right to correct inaccuracies.
Right to request data deletion ("right to be forgotten").
Right to restrict processing.
Right to data portability.
Right to object to data processing.
Right to withdraw consent.
You may exercise these rights via email at info@kiddooo.com or through the app settings.

12. Cookies and Tracking Technologies

We use essential, analytical, and (if applicable) marketing cookies and SDKs.
For more information, please refer to our Cookie Policy.

13. Policy Updates

Significant changes will be communicated via the app or email.
We recommend reviewing this Policy periodically.

14. Complaints

If you believe your data is being processed unlawfully, you may file a complaint with:
State Data Protection Inspectorate
www.vdai.lrv.lt

KIDDOOO COOKIE POLICY

Effective as of: April 1, 2025
Last updated: April 1, 2025

This Cookie Policy explains how Kiddooo (UAB Kiddooo global) uses cookies and similar tracking technologies in our mobile application and related website. This Policy supplements our Privacy Policy.

1. What are cookies?

Cookies are small text files stored on your device (computer, phone, tablet) during your browsing session. They help identify your device, remember preferences, and support efficient service delivery.

2. What types of cookies do we use?

Essential cookies

These are necessary for the core functionality of the app, such as authentication, security, and account access.

Analytics cookies

Used to gather statistical insights into how users interact with the app, which helps us improve performance and user experience.

Functional cookies

Remember your settings and preferences (e.g., language or time zone).

Marketing cookies (if applicable)

Used for interest-based advertising and content targeting. These cookies are not applied to child user profiles.

Note: At this time, we do not use third-party ad networks. If implemented in the future, they will comply with COPPA and GDPR.

3. Third-party cookies

Some features may rely on third-party services (e.g., embedded YouTube videos, Google Maps, Stripe payments), which may set their own cookies. Please refer to their individual privacy policies for more information.

4. Legal basis for cookie use

Essential cookies – Legitimate interest (GDPR Article 6(1)(f)).
Other cookies (analytics, functional, marketing) – Based on user consent (GDPR Article 6(1)(a)).

5. Cookie controls

In the app:

You can manage cookie settings under the “Privacy” section or via a Consent Management Platform (CMP), if integrated.

In browsers:

You can clear cookies via your browser settings or configure it to reject cookies.

6. Cookie retention periods

Session cookies: last until the session ends.
Persistent cookies: up to 24 months, depending on their purpose.

7. Infrastructure and AI integration

Kiddooo operates on modern cloud infrastructure and AI services:

Infrastructure: Google Cloud Platform (Cloud Run), Firebase, DigitalOcean.
AI integration: Kiddooo is powered by OpenAI models, securely deployed via Cloud Run containers on GCP.

8. Contact

If you have questions about cookie usage, please contact us at:
Email: info@kiddooo.com

For more information, please refer to our Privacy Policy.

Let's Chat

info@kiddooo.com

Social Media