Privacy Policy

Introduction

Kudos Kids ("the App") is operated by Igloo Labs Limited ("we", "us", "our"), a company registered in England and Wales. We are committed to protecting the privacy of all our users, with particular attention to children's privacy.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using Kudos Kids, you agree to the practices described in this policy.

Children's Privacy (COPPA Compliance)

Kudos Kids is designed for use by families, including children under 13. We take children's privacy extremely seriously and comply with the Children's Online Privacy Protection Act (COPPA) and equivalent UK/EU regulations.

What we do NOT collect from children:

• Email addresses
• Real names (we only store a first name or nickname chosen by the parent)
• Location data
• Device identifiers linked to children's profiles
• Photos of children (photo proof uploads are of completed tasks, not of the child)
• Any personally identifiable information (PII)

Parental consent

Children's accounts are created and managed exclusively by a parent or legal guardian. Parents must provide verifiable parental consent before a child can use the App. Children access the App through a family code and a simple 4-digit PIN — no email or password is required.

Parental rights

Parents have the right to:

• Review all data associated with their child's profile
• Delete their child's account and all associated data at any time
• Revoke consent for their child's use of the App
• Request a copy of any data stored about their child

Information We Collect

Information from parents (account holders)

Data	Purpose	Basis
Name	Account identification, display in family	Contract
Email address	Login, notifications, account recovery	Contract
Password (hashed)	Authentication	Contract
Push notification token	Sending task/purchase alerts	Consent
Marketing preferences	Email communications	Consent

Information from children's profiles

Data	Purpose	Basis
First name / nickname	Display within the family app	Parental consent
PIN (hashed)	Profile access within the family	Parental consent
Date of birth (optional)	Age-appropriate experience	Parental consent
Avatar emoji	Visual identification within the family	Parental consent
Task completion data	Reward calculation, progress tracking	Parental consent
Task proof photos	Evidence of task completion	Parental consent

Automatically collected data

We collect limited technical data to ensure the App functions correctly:

• Error reports (via Sentry) — crash data and performance metrics to fix bugs. For children's profiles, error reports contain only family-level identifiers and no PII.
• API logs — anonymised request logs for security and debugging, retained for 30 days.

How We Use Your Information

We use the information we collect to:

• Provide and maintain the Kudos Kids service
• Authenticate users and secure accounts
• Send push notifications about task completions, approvals, and achievements
• Improve the App based on anonymised usage patterns
• Send marketing communications (parents only, with consent)
• Respond to support requests

We never use children's data for marketing, advertising, or profiling.

Data Sharing

We do not sell your data to third parties. We share data only with:

• Service providers who help us operate the App (cloud hosting, email delivery, error tracking). These providers are bound by data processing agreements and cannot use your data for their own purposes.
• Law enforcement when required by law or to protect the safety of our users.

Third-party services we use:

Service	Purpose	Data shared
Railway (hosting)	Application hosting	Encrypted application data
AWS S3	File storage (task proof photos)	Uploaded images
Resend	Email delivery	Parent email addresses
Sentry	Error tracking	Anonymised crash reports
Expo	Push notifications	Device push tokens
Amazon (Alexa)	Voice assistant	Account-linked task data

Data Security

We take the security of your data seriously:

• All data is transmitted via HTTPS/TLS encryption
• Passwords and PINs are hashed using industry-standard algorithms (bcrypt)
• API access is secured with token-based authentication (Laravel Sanctum)
• Child tokens have restricted permissions and cannot access parent functions
• Database access is restricted and encrypted at rest
• Regular security audits and dependency updates

Data Retention

• Active accounts: Data is retained for the lifetime of the account.
• Deleted accounts: Upon account deletion, all personal data is permanently removed within 30 days. Task proof photos are deleted from storage within 7 days.
• API logs: Retained for 30 days, then permanently deleted.
• Error reports: Retained for 90 days via Sentry.

Your Rights

Under UK GDPR and applicable data protection laws, you have the right to:

• Access — Request a copy of the data we hold about you and your family
• Rectification — Correct inaccurate information
• Erasure — Request deletion of your account and all associated data
• Portability — Request your data in a portable format
• Withdraw consent — Opt out of marketing or revoke consent at any time
• Complaint — Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, email us at privacy@kudoskids.app.

Cookies

The Kudos Kids mobile app does not use cookies. Our website (kudoskids.app) uses only essential cookies required for basic site functionality. We do not use analytics cookies, advertising cookies, or tracking pixels.

International Transfers

Our servers are located in the EU. If data is processed outside the EU/UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the App or email. The "Last updated" date at the top of this page indicates when the policy was last revised.

Contact Us

If you have questions about this Privacy Policy or our data practices:

• Email: privacy@kudoskids.app
• Company: Igloo Labs Limited, London, United Kingdom
• Website: igloolabs.app