Privacy Policy

We collect information necessary to operate the KidKonekt platform effectively and securely.

Child Information:

• Full name and date of birth
• Identity / passport number
• Home address
• Health details and medical notes
• Enrollment and attendance records

Parent / Guardian Information:

• Full name and identity number
• Phone number and email address
• Relationship to the child

Emergency Contact Information:

• Full name and phone number
• Relationship to the child

Account & Usage Data:

• Login credentials (email and encrypted password)
• User role (admin, teacher, parent)
• App usage activity and session data

Your information is used solely to provide and improve KidKonekt services:

• Manage child registrations and enrollment records
• Facilitate communication between parents and daycare staff
• Track attendance and daily activity reports
• Send important notifications and updates
• Maintain health and emergency contact records for child safety
• Enable role-based access for admins, teachers, and parents
• Improve app performance and fix technical issues

KidKonekt handles children’s data with the highest level of care and responsibility.

• Children’s data is only accessible by verified daycare staff and the child’s registered parents or guardians
• Health and personal information is stored securely and never shared publicly
• We comply with applicable child privacy protection laws
• All child registrations require approval by a daycare administrator

Your data is stored securely using industry-standard infrastructure:

• All data is stored on Supabase — a secure, encrypted cloud database platform
• Data is transmitted over HTTPS with TLS encryption
• Authentication is handled via secure session tokens
• Access is restricted by role — admins, teachers, and parents only see relevant data
• We perform regular security reviews to maintain data integrity

While we implement strong security measures, no system is 100% impenetrable. We encourage users to use strong passwords and report any suspicious activity immediately.

We do not share your personal data with third parties except in the following limited circumstances:

• Daycare staff: Teachers and administrators at your registered daycare access data relevant to their role
• Service providers: Trusted infrastructure providers (e.g., Supabase) who process data on our behalf under strict confidentiality agreements
• Legal compliance: When required by law, court order, or to protect the safety of a child

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate or outdated information
• Deletion: Request deletion of your data (subject to legal and operational requirements)
• Portability: Request your data in a portable format
• Objection: Object to certain types of data processing

To exercise any of these rights, please contact us using the details below.

We retain your personal data only for as long as necessary to provide our services or as required by law:

• Active account data is retained for the duration of your enrollment with a daycare
• Upon request for deletion, data is removed within 30 days
• Some anonymised records may be retained for compliance and operational reporting

KidKonekt is a mobile application and does not use browser cookies. We may collect anonymised usage analytics to improve the app experience, such as screen navigation patterns and crash reports. This data cannot be used to identify individual users.

You have the right to request the deletion of your personal data and any data associated with your child(ren) at any time. We will process all verified deletion requests within 30 days.

Your email must include the following:

• Your full name and registered email address
• The name of the daycare you are registered with
• The full name(s) of the child(ren) whose data you want deleted
• A brief reason for the deletion request (optional but helpful)

What happens after you submit a request:

• You will receive a confirmation email within 2 business days
• We may ask you to verify your identity before processing the request
• All personal data including child records, parent information, and emergency contacts will be permanently deleted
• Deletion will be completed within 30 days of verification
• You will receive a final confirmation email once deletion is complete

Please note: Some anonymised or aggregated records may be retained for legal and compliance purposes and cannot be deleted. These records cannot be linked back to any individual.

We may update this Privacy Policy from time to time. When we do, we will notify users through the app and update the effective date at the top of this document. We encourage you to review this policy periodically.

Continued use of KidKonekt after any changes constitutes acceptance of the updated policy.