Privacy Policy

1. Introduction

KidMapp (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website (kidmapp.com) and mobile application (together, “the Service”).

2. Data We Collect

2.1 Information you provide

• Account data: name, email address, and profile photo when you create an account
• Guardian-managed child profiles: nickname, avatar, birth month and year, and optional activity or accessibility preferences used for age fit, participation, XP, and family gameplay
• Content: reviews, photos, and missing-place submissions you choose to share
• Authentication: if you sign in via Google or Apple, we receive your name and email from those services

2.2 Information collected automatically

• Location data: your approximate location (via GPS, IP address, or browser geolocation) to show nearby playgrounds. Location access is optional and can be revoked at any time via your device settings.
• Device data: device type, operating system, browser type, and app version
• Usage data: pages visited, features used, and interaction patterns to improve the Service

3. How We Use Your Data

We use your data to:

• Provide and improve the Service, including personalized playground recommendations
• Display your reviews, photos, and contributions to other users
• Track your XP, level, and leaderboard position
• Determine child participation and reward eligibility, reserve limited prizes, and show guardian-owned collection status
• Send important service notifications (e.g., account security, policy changes)
• Analyze usage patterns to improve features and user experience
• Prevent fraud, abuse, and enforce our Terms of Service

4. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: hosting (Railway, Supabase), authentication (Google, Apple), and map services (Google Maps) that help us operate the Service
• Other users: your display name, avatar, reviews, photos, and XP level are visible to other users
• Prize sponsors: only prize and quantity information needed for collection, plus aggregate campaign reporting. We do not share guardian contact details, child profiles, child names, avatars, ages, family routes, or identifiable participation history with sponsors.
• Legal requirements: if required by law, regulation, or legal process

5. Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices. We use Supabase for database and authentication services. While we take reasonable measures to protect your data, no system is 100% secure.

6. Children's Privacy

KidMapp is operated through guardian-owned accounts and does not provide independent child accounts. A guardian may create and manage a child profile so KidMapp can provide age-appropriate experiences, participation, XP, and rewards. Child-profile information remains under the guardian account and is not shared with prize sponsors. If you believe child information was submitted without appropriate guardian involvement, contact us so we can investigate and remove it where required.

7. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Withdraw consent for location tracking at any time
• Object to processing of your data for certain purposes

To exercise any of these rights, contact us at privacy@kidmapp.com.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising trackers. Analytics data is collected in aggregate form to improve the Service.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

10. International Transfers

Your data may be processed in countries outside your country of residence, including within the European Economic Area (EEA). We ensure appropriate safeguards are in place for any international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: