Plain answers about family data.

1. Scope and who the service is for

This policy applies to the Kingdom Kids website, Android app, and supporting API. The app offers Bible stories, device read-aloud features, games, and progress views for children, while a parent or guardian creates and manages the family account.

A child is not asked to create an account or provide an email address or password. Parents should use a nickname—not a full legal name—when creating a child profile.

2. Information we handle

Parent account and security information

• Parent email address and account identifiers.
• A one-way password hash; the service does not store the readable account password.
• Email-verification and password-reset challenge records, attempt counts, expiry times, and security lockouts.
• Access and refresh tokens used to maintain a signed-in session.

Minimal child-profile information

• A parent-entered display name or nickname and a chosen character/avatar.
• Reading preferences such as text size and whether narration is enabled.
• Learning activity tied to the profile: stories started or completed, game attempts and submitted answers, scores, stars, completed levels, badges, and the last-played time.
• Daily streak dates and the device timezone offset used to calculate a local day.

Website and waitlist information

• A grown-up’s email, consent time, and signup source when they ask to join the launch waitlist.
• Standard technical request information—such as IP address, request time, browser type, and error or security events—may be processed by the production host, reverse proxy, or API to deliver and protect the service.

Information kept on the device

Session tokens, the selected profile, preferences, first-launch state, and optional reminder settings are stored using the device’s protected storage. Reminder notifications are scheduled locally after a grown-up grants notification permission.

3. What the current product does not collect

The current app does not ask for or integrate:

• A child’s email address, password, birth date, school, home address, or precise location.
• Contacts, photos, camera, microphone, or advertising identifiers.
• Third-party advertising, behavioural advertising, or third-party analytics SDKs.

If a future release changes these practices, this policy and the relevant app-store disclosures must be updated before that release is made available.

4. Why we use information

• Create, verify, secure, and recover a parent account.
• Keep each child profile’s content preferences and progress separate.
• Evaluate game activity, award progress, and show family-facing summaries.
• Calculate streaks using the profile’s local day without requesting precise location.
• Deliver requested launch updates to waitlist subscribers.
• Prevent abuse, investigate errors, protect accounts, and operate the service.
• Comply with applicable law and respond to valid legal requests.

5. When information may be shared

Kingdom Kids does not sell or rent personal information.

Information may be disclosed only as needed to:

• Vendors operating the production infrastructure, such as hosting, database, content-delivery, security, and transactional-email providers, under appropriate data-protection terms.
• Comply with law, court orders, or valid government requests, or protect people and the service from harm.
• Complete a merger, financing, acquisition, or sale of assets, subject to notice and continued protection of the information.

Production vendors have not yet been named in this pre-launch policy. Their identities, regions, contracts, and any international transfer safeguards must be reviewed and this policy updated before launch.

6. Retention and deletion

• Parent account and associated child-profile data are kept while the account remains open.
• The self-service deletion flow removes the parent account, child profiles, preferences, story activity, streak history, and game progress and attempts from the active service. A verified-account deletion also removes a waitlist entry using the same email.
• A parent account that is still waiting for email verification can be removed from the same public page after password confirmation. Because that account has not proved control of the email address, an independent waitlist signup is handled through the privacy contact instead.
• Waitlist-only information is kept until launch communications are complete or the grown-up asks for removal.
• Email-verification and password-reset challenges are short-lived and retained only as needed for account security.

Production log and backup schedules are not yet finalized. They must be documented before launch. Once configured, deleted information may remain temporarily in access-restricted backups until their normal rotation, and must not be restored to the active service except for disaster recovery.

7. Children and parent controls

The child experience is attached to a grown-up’s verified account. A parent chooses the child-profile nickname and avatar, can review profile information and progress, and can delete the entire family account. Kingdom Kids does not use child-profile activity for advertising or build advertising profiles.

If a parent believes a child supplied information beyond what the app requests, they should delete the account or contact the privacy address below so it can be investigated and removed.

8. Security

The production service is intended to require HTTPS, hash passwords with Django’s password-security system, restrict data to the authenticated parent account, throttle sensitive endpoints, and store mobile session data in protected device storage. No security control can guarantee absolute protection, so suspected incidents should be reported promptly.

9. Family choices and rights

• Use the account-deletion page to permanently delete an account.
• Turn optional notifications off in the app or device settings.
• Ask to access, correct, or remove information, including a waitlist-only email.
• Exercise any additional privacy rights available in the family’s country or region.

We may need to verify that a requester controls the relevant parent account or email before completing a request.

10. Changes to this policy

This page will show a revised date when the policy changes. Material changes affecting family data should be communicated in the app, by email, or through another appropriate notice before they take effect.

11. Contact

Privacy questions or requests can be sent to privacy@kingdom-kids.app.

Pre-launch status: This privacy inbox is provisional and must be provisioned, monitored, and tested before launch.