Parents' Notice: Children's Data Practices

Kudo Kids, LLC (doing business as KudoKids) 4030 Wake Forest Road, STE 349, Raleigh, NC 27609 Email: legal@kudokids.org Phone: (910) 593-7070

KudoKids is designed for children ages 3-12. We collect the following categories of information, nearly all of which require your consent first (the exceptions — error diagnostics, and the app's automatic update check, which sends the device's network address and an installation identifier to our update provider — are collected under COPPA's internal-operations exception and are marked below):

Required for Core Features

• Name and date of birth (used to calculate your child's age) -- provided by you (the parent)
• Sign-in passcode -- the number, letter, or picture passcode you or your child set to open your child's profile (number and letter codes are stored only in scrambled, one-way form; a picture passcode is stored as the pictures chosen), used only to sign your child in
• Profile choices -- the avatar, companion and color theme chosen for your child, a nickname your child may type for their own profile, which your family sees in place of their name (screened before it is saved), and the growth areas you pick (used to choose the affirmations and activities we suggest)
• Requests to a parent -- when your child sends you a request -- for more time or access (more screen time, more Safe Browser time or a schedule change), for help with an activity, for a new task to earn Kudo Coins, or to take Kudo Coins out of savings -- the request, the reason the app shows with it, any short note they choose to write, and your answer
• Activity data -- task completions, a mastery level for each task (still learning, proficient or mastered, based on how many times it has been completed and approved), Kudo Coin earnings/spending, game sessions (which game, the score, how long, whether it was finished, the coins spent and earned, and the theme), streaks and streak adjustments, story progress (which stories and episodes your child reads, how far they got, and the choices they make along the way), badges earned, the rewards your child adds to their wishlist, the items your child unlocks or buys and which ones they have equipped, the times of any practice sessions with a specialist you invited, and a record each time your child's profile is opened on a device (when, and basic technical information about the device and app)
• Routine & reward activity -- per-routine completion records (full or partial credit), per-day routine weight allocations you set, how much of the fixed daily routine allotment has been used, days you choose to skip a routine, optional hold challenges (the store's "wait before spending" offers and what happened, how many your child has refused in a row, and the stage they have reached), locked-savings deposits, device-timer sessions, task-timer events, Kudo Coins your child puts toward a family reward goal, streak shields earned or used, saving-helper records (savings goals and streaks), growth-routine mastery checks and the harder steps we suggest (including your child's request for harder routines), and, if you set an earliest time for a routine and your child marks it done before then, a record that they did and your answer if you review it, which also drives the optional Trust Builder if you turn it on
• Calendar -- calendar events you create, or import from a calendar feed, and assign to your child (title, notes, days and times, and whether it earns Kudo Coins), shown on your child's calendar
• Device tokens -- for push notifications (a persistent identifier under COPPA)
• Device records -- for each device signed in to your family, including a shared or kid-mode device your child uses: a persistent identifier the app creates for that device, the device's name and type, the mode it is set to, and when it was last used (updated each time the app opens), so you can see, manage and remove your family's devices
• In-app notifications -- the alerts the app creates for your child and for you about your child's activity, such as an approved task or a blocked message, and a record of alerts we held back, for example during bedtime quiet hours
• Network (IP) address, during a device handoff only -- when you move your child's session to another device by scanning a pairing code, we record the network address of the device asking and the device approving, so we can investigate abuse of the handoff. On a child handoff one of those is your child's own device. This is a persistent identifier under COPPA. We erase both addresses 30 days after the handoff and delete the handoff record entirely after 90 days, both by scheduled job. We do not use them for anything else, and never to locate or profile a child.
• Usage / screen-time data -- which areas of the app your child uses and for how long, recorded by default to power per-child daily screen-time limits. No personal content is recorded. You can adjust or turn off the daily limit in Settings -> Kids Access -> Daily Time Limits. Turning off Usage Time Insights in Settings -> Data & Privacy stops this recording for every child in your family.
• Cross-household membership -- if your child belongs to more than one family on KudoKids (for example, separated co-parents), we record each household membership so coins, badges, and premium features follow your child between households
• App update check -- when the app starts or returns to the foreground, it asks our update provider for newer app code, sending the device's network address and an installation identifier (see Expo under "Who Receives This Information"); collected under COPPA's internal-operations exception
• Error diagnostics -- when technical errors occur, we collect error context (a technical stack trace and device information such as the device model and app version) plus a short trail of recent app events, to help us fix bugs. No screen recording is ever captured -- screen-recording capture is disabled in our error-monitoring configuration. In child mode the event trail is filtered to structural events only (navigation, timing, and app-lifecycle entries) and identifiers are scrubbed, so no child names, messages, or personal content are transmitted. Collected under COPPA's internal-operations exception; no separate consent required.

Optional (You Choose)

• Wellness data -- emotion check-ins (the emotion your child picks and a 1-5 mood score -- children do not type free text), meditation sessions, affirmation sessions and wellness exercises (including any affirmations you write or switch off for your child), and behavioral assessments you complete about your child (if you use that feature)
• Speech- and reading-practice progress and targets -- for the speech-practice and learn-to-read activities, which practice sounds, words, and reading stages your child worked on, how far along each one is, when each practice session happened, and any practice targets you or a specialist you invited set for them (chosen from a fixed list we supply). Your child types nothing into these, and no audio or transcript is kept (see Speech recognition below)
• Creative content (drawings & artwork) -- we store the drawings your child makes in the app — both the finished picture and the stroke data used to draw it. The drawing feature and family sharing of drawings are on by default; you can turn either off in Settings. Drawings can be shared with other members of your own family while sharing is on, and with a specialist only if you grant them drawing access (see below); never with anyone else. You can see the drawings saved in your family on the parent dashboard (the family's most recent drawings; we send a full copy of every drawing on request), including drawings your child has removed from their own gallery — a removed drawing stays visible to you until you permanently delete it. You can turn drawing, and family sharing of drawings, on or off in Settings.
• Companion idea cards (Companion Studio) -- if your family uses Companion Studio, you can turn on idea cards for a child aged 6 or older: your child then puts together an idea for a companion by choosing from a fixed set of picture cards, shapes and name chips. There is nothing to type, draw, upload or photograph, and nothing is built unless an adult decides to build it. The cards your child picked stay in your family's account; if an adult builds the companion, they help shape the adult's request to Google Gemini (see Who Receives This Information), never with your child's name or profile. This is off for every child until you turn it on for that child, and it is not offered to children under 6. Separately, an adult can start a companion from a reference picture -- a child's drawing, a pet, a toy or a thing, never a photo of a person -- which we keep for about 24 hours at most.
• Theme Worlds (beta) -- while Theme Worlds is in beta, we offer it to some families only. Once your family is admitted, it is on for each child unless you turn it off for that child or for your whole family in Settings, where you also set the daily time limit and how many Kudo Coins each minute costs. We keep a record of each visit (when, which place, how many minutes, and the Kudo Coins each minute cost) and the minutes used each day. In a room, up to four children explore together: today only brothers and sisters in your own family, and a child from another family can join only after you give a separate consent for your child that we record. The children in a room see your child's companion move, the set gestures and world stickers your child sends, the name and emoji shown for your child, and their age range; that movement is relayed live and not stored, and there is no typing and no voice in a room. We also keep who asked to join a room and the answer, a record when the host sends a child home from a room, each game round's results, and, only if you turn on world leaderboards for a child aged 6 or older (off by default), your child's best scores. A child in a room can tell us what happened by choosing a reason from a list; we keep that report with who was in the room, and if our team does not review it within 24 hours, or decides to, we pause Theme Worlds for the reported child until we lift the pause.
• Social data -- friend codes (two random words, never typed); multiplayer games (who played together, each player's score and finishing place, and each move, including any word your child types as a guess, which the other players see); friend connections; the cheers your child sends brothers and sisters (a phrase they pick); a nickname your child may choose to type (screened before it is saved), which is shown, with your child's friend code, to someone who enters that code and to your child's accepted friends and their families; the names your child gives to group chats, which the chat's members can see; messages your child sends to members of your own family (parents, siblings, grandparents, and other adults in the family, one-to-one or in family group chats), which are on from the start (you can turn them off by turning off messaging for that child or for your family); messages to connected children in other families, each friendship needing your approval unless you choose auto-approve; leaderboard participation; and, only if you turn on friends of friends, the messages your child sends in a group chat that includes a friend's friend. An adult you invite into your family who joins a family chat can see that chat's earlier messages. When your child deletes or edits a message, the earlier text is hidden from the chat, not deleted: the parents who monitor that conversation (in a chat with another family, that family's monitoring parents too) and our safety and support staff can still read it, it is included in your data export, and it is kept for the period shown for messages below; if our screening blocks a message or edit your child tries to send, the message is not delivered, but the start of its text is saved in the alert we send you so you can see what was blocked, and that alert is deleted on the schedule shown for in-app notifications below
• Gift notes -- when your child sends Kudo Coins to a sibling, they may write a short note (up to 120 characters) to send with it. This is free text your child writes; it is screened for inappropriate language before it is stored, and the sibling who receives the gift can read it.
• Safe Browser sessions -- if you turn on Safe Browser, we record each session your child spends on the sites and videos you approved (which approved destination, when, and for how long) so the time counts toward the limits and earnings you set. We do not record general web browsing, and Safe Browser reaches only the destinations you approve. Approved outside websites receive data directly from your child's device, and KudoKids does not receive what they collect -- see "Who Receives This Information" below.
• Speech recognition -- performed entirely on your child's device by the recognizer built into the operating system (Apple or Google); the app requires on-device recognition, and on a device that cannot recognize speech on the device, the app does not listen for words. No audio or transcript is ever kept or transmitted (when you turn on the microphone level meter, audio is held briefly on the device only to measure loudness and deleted when the meter stops). KudoKids retains and transmits no biometric identifiers of your child -- speech-to-text is on-device-only, and no voiceprint, face template, or other biometric is ever collected, stored, or shared by KudoKids. Face ID / Touch ID, when used, is matched on-device by Apple only and is never collected or readable by KudoKids. The optional eye-rest "peek" step uses on-device face detection only (the exercise movement mirror is a plain on-screen preview and uses no face detection): the app estimates in real time whether a face is present, roughly which way the head is turned, and whether the eyes appear open, never records, stores, or transmits any camera frame or measurement, and never performs face recognition -- no faceprint or face template is ever created.

Can your child make their own information public? No. KudoKids has no public posting, no public profile, and no open comment area. Nothing your child writes, draws, or records is ever published to the open internet. One thing a grown-up can choose to publish: if an adult lists a companion your family built in the shared gallery, that companion gets its own web page anyone with the link can open. It shows the companion's pictures, its name, its rarity word and its theme, plus the two-word alias we mint -- never a family name, a child's name, a photo, or anything anyone typed. An adult turns the page off, or the whole listing off, under Manage companions.

These things can be seen outside your own family, and a parent controls each one:

• Friend discovery. We give your child a friend code made of two random words (never your child's name); your child can swap it for another random pair but cannot type one. The code becomes findable only after you enable friends for that child, and then only by someone signed in to KudoKids who enters the complete code. There is no partial-match search and no browsing. Whoever has the complete code sees your child's avatar and their friend name — a nickname your child chose, or otherwise the words of their friend code — and, once a friendship is accepted, your child's friend card (described below). Whether you are asked to approve the request depends on the friend-approval setting you chose. Turn friends off for that child if you would rather they were not findable at all.
• Messages. If you approve a friend connection, your child's messages are visible to that child and to both children's parents, so that either parent can see what was said. Accepted friends also see your child's friend card: the name on your child's profile if it passes our safety screen (otherwise a screened stand-in, such as the words of their friend code), their friend name — a nickname your child chose or the words of their friend code, which the friends list shows in place of the name — and the friend code, age, companion (avatar), color theme and current streak, and whether messaging and leaderboards are turned on for your child.
• Group chats with a friend's friend (off unless you turn it on). If you turn on "friends of friends" for your child and the other child's family turns it on for theirs, your child can join a group chat with a friend's friend you have not approved when a friend both children share is in that group. That child and the grown-ups in their family see your child's friend card and the messages your child sends in that group. If the shared friend leaves, the two children stay in the group and can still read its earlier messages, but can no longer send messages there. Turning it on records your separate consent (see "How We Obtain Your Consent"), and you can turn it off at any time in Family Settings.
• Multiplayer games. While friends are on, your child can play a game with a friend you have accepted, including a friend in another family; that friend sees your child's friend card and how your child plays and scores in that game, and we keep the game, including its moves, for the period shown below.
• Your story, if you share one. If you write a testimonial about your child under Settings → Share your story and we approve it, it can appear on kudokids.org with your child's first initial (or first name, if you choose) and age. You can take it down at any time.
• Leaderboards. Unless you turn off Leaderboards for your child in Settings → Kid features → Friends & Messaging, while Friends & Messaging is on for your family your child's game scores appear on the global game leaderboard, which anyone signed in to KudoKids can view -- shown as "Anonymous" to everyone except your own family and friends you have accepted.
• Another household you link your child to. If you link your child to another family on KudoKids (for example, a co-parent's household), that family receives your child's name, age, date of birth and theme, sees your child's Kudo Coin balance, streak and activity from then on, and can receive the routines, rewards and settings you choose to send. Everyone in that family can see your child as a member of it.
• Guardian contact details (yours, not your child's). When you approve a friend connection between your child and a child in another family, the two families' owner and admin guardians exchange contact details, so a responsible adult on each side can reach the other.
• A listed companion. If an adult lists a companion your family built, adults in other families see it in the shared gallery, their children can meet it in the app, and it gets the public web page described above -- always under the two-word alias we mint, never a name. A companion built from your child's idea card never shows your child's picks as theirs.

When a shared screen-time session is being set up, the person starting it can see whether each sibling can afford the chosen length, including their coin and device-time balances; this is shown only within your family.

• To operate the app -- tracking chores, managing rewards, running games
• To award streak bonuses -- when your child completes all of the day's routines on days in a row, they build a streak, and higher streak ranks earn a small daily Kudo Coin bonus; you can turn streak bonuses off in Settings → Kudo Coins → Streaks
• To adjust content and difficulty to your child's age and progress
• To make companions with your family in Companion Studio -- if you turn on idea cards for your child, to keep the cards your child picked and, when an adult decides to build one, to shape the adult's request from them
• To run Theme Worlds -- to hold world time to the daily limit and coin cost you set, to let your child play in a room with the children allowed in, to keep the game scores and leaderboards you turn on, and to review reports and keep rooms safe
• To provide you with reports on your child's activity and progress
• To adjust celebrations and move a task up a level as your child masters it, using your child's mastery level for each task
• To keep KudoKids secure, answer your support requests, and meet our legal obligations
• To decide whether to email you getting-started help or, if you opted in to tips, a note checking whether KudoKids is still working for your family -- based on whether and when your children last used KudoKids; these emails go only to you, contain no details of your child's activity, and you can turn them off
• If your family joined through a school program, to count, together with the other families in that program, whether children completed routines each week, so the school can see how many families are active -- the school sees only totals for the whole program, never a child or a family, and no totals at all for a program too small to keep them anonymous
• To keep chats safe -- messages your child sends are automatically screened for inappropriate language, and we alert you when one is blocked or flagged as a safety concern; our team can review any flagged message, with the sender's name, to keep chats safe

We do NOT use your child's data for advertising, behavioral targeting, or commercial profiling. We never sell or share children's personal information. KudoKids does not place ads in the app or sell advertising space. When you approve YouTube channels or playlists, or a website, in Safe Browser, that video or website can show its own ads or sponsored content, which KudoKids does not remove; videos play in YouTube's privacy-enhanced player (youtube-nocookie.com), which YouTube says does not show personalized ads (see Who Receives This Information).

• Supabase -- hosts our database and handles authentication (stores all family/child data), and relays theme-world room play live between the devices in a room without storing it
• Expo -- delivers push notifications: Expo's servers receive the device push token (a persistent identifier) and the notification content, and notification payloads may reference child profiles. Expo hands each notification to Apple's or Google's push service for delivery to the device. When the app starts or returns to the foreground, it also checks Expo's update service for newer app code; that check carries the device's network address, the app's version, platform, and update channel, and a random identifier the update software creates once for each installation of the app and sends with every check, from every device including a child's -- a persistent identifier used only to deliver app updates (support for internal operations) and not linked to any account, family, or child. The check carries no account, family, or child data
• Stripe -- processes parent payments only; KudoKids sends no child data to Stripe. A gift buyer's message (the note an adult adds when buying a gift plan, not a child's gift note) is passed on without removing names, so anything the buyer types in it, such as a child's name, reaches Stripe (when typed at checkout) and Resend (which emails it)
• Apple / Google -- provide the speech recognizer built into the device's operating system; for your child's speech features, recognition runs entirely on the device, and no audio or transcript is ever transmitted to Apple, Google, or KudoKids. A parent's dictation to KudoKids AI is also recognized on the device, and the text is sent as the parent's message (see the Google Gemini entry)
• Apple StoreKit / In-App Purchase (iOS) -- processes parent purchases only; no child data is sent to Apple
• Sentry -- error monitoring; receives error context (stack traces and device information) and, from a parent's own session, our internal account and family identifiers, used only to diagnose and fix problems. No screen recording is captured -- screen-recording capture is disabled -- and child-mode event trails are filtered to structural events and scrubbed of identifiers before transmission. How we make sure that identifier is never used for anything else: an error report from a parent's own session carries that parent's account id; a report from your child's session carries no account id at all -- not yours, and not that of any other adult signed in on the device, such as a specialist or a relative you gave Kids Login. We also clear the family identifier from the report for the whole of your child's session. We keep only three kinds of structural event (which screen, app start and stop, and timing), with any account or profile identifier stripped out before anything is sent, and we discard the record of what was happening before your child started. We run no advertising network and no analytics SDK anywhere in the app, and no system of ours joins this identifier to a child's profile, activity, or messages. It cannot be used to contact your child, to build a profile of your child, or to target advertising, because none of the systems that would do those things exist here
• Google Gemini -- powers KudoKids AI, an optional assistant available only to parents and guardians, the optional chore-chart import during parent setup, and, for a parent's support request, its text, which Gemini uses to suggest a title. Children can never use AI features. For KudoKids AI we also send your family's task, routine and reward lists, with each child shown only as an anonymous label. Before anything is sent to Google, children's profile names in the text we send are automatically replaced with anonymous placeholders, and we never add your children's ages, coin balances, activity history, or messages ourselves, but anything a parent types or shows in a photo, such as a child's age, is sent as written. A photo a parent chooses to send — attached to a KudoKids AI message, or a chore-chart photo imported during setup — goes to Google unchanged, so a child's name or face shown in it is sent too. KudoKids does not store these photos. In Companion Studio, Gemini also generates the concept pictures and the spoken name when an adult builds a companion, from the adult's request -- which can include the cards your child picked -- and from any reference picture the adult uploads, which is sent as it is, so anything written on a child's drawing reaches Google too; it also checks the companion's pictures and words for safety. We never add your child's name, profile, age or activity to any of these.
• Google Cloud Vision -- checks a reference picture an adult uploads in Companion Studio and reports only whether it looks unsafe or shows a person or a face, so we can refuse it; nothing about your family or your child is sent with the picture, but the picture itself can show your child (a drawing, or a photo that breaks our no-people rule, which we then refuse and do not keep)
• Tripo -- turns the concept image an adult chose in Companion Studio into a 3D companion model; it receives that image and nothing else: no child data, no name, and no account identifier
• Google (ML Kit face detection) -- on iOS and Android the optional eye-rest feature uses Google's on-device face detector. No image, video frame, face measurement or result ever leaves the device. The detector itself sends Google technical usage and performance metrics about the component, including device and app information and a device identifier that is not linked to any account, used only to maintain and improve the component -- never what the camera sees, and nothing that names your child or your family.
• Anthropic (Claude) -- staff-only support and operations tooling that children never interact with. While our team works on a support request or an engineering task, the account records they are working with -- which can include a child's profile or activity records -- may be processed by Claude. Our commercial terms prohibit Anthropic from using this data to train its models.
• Resend -- delivery of parent emails and adult-family-member invitations; KudoKids sends no child data (a gift buyer's message carries whatever the buyer typed -- see Stripe)
• Google Workspace -- hosts our company email and calendar, so if you email us (for example at privacy@kudokids.org), it holds your message, including anything about your child you choose to include; Google may not use it for advertising
• Apple Quick Look (iOS) / Google Scene Viewer (Android) -- on-device augmented-reality viewers; no camera frames or data are transmitted
• Netlify -- hosts the KudoKids web app: when KudoKids is used in a web browser, child mode included, Netlify's servers receive the device's network address and the standard request details any browser sends to load the app, such as the page address, so it can deliver the web app.
• YouTube / Google -- if you add approved YouTube channels or playlists in Safe Browser, approved videos play in a privacy-enhanced embedded player (youtube-nocookie.com), which YouTube says does not show personalized ads. YouTube's rules do not let apps block the ads YouTube serves, so YouTube can still show ads matched to the video, and a creator can promote products in a video. You can stop YouTube viewing at any time in Safe Browser settings. When your child browses the approved videos, their thumbnails load from Google's servers, and when your child watches a video, Google receives standard playback data for that video -- the same data any YouTube viewer generates; either way, Google receives the device's network address. We never send your child's name, age, account, or search text to Google.

Each of these service providers is contractually bound to keep your child's information confidential and to use it only to perform the service we have retained them for. Before we allow any provider to collect, maintain, or receive children's personal information, we take reasonable steps to confirm it can protect that information and obtain written assurances that it will employ reasonable measures to maintain its confidentiality, security, and integrity (16 CFR §312.8(c)).

Websites you approve in Safe Browser are different: they are not service providers we have retained, and the written assurances described above apply to our service providers, not to these sites. (YouTube and YouTube Kids are different again -- approved channels and playlists play through the privacy-enhanced embed described in the YouTube / Google entry above, not in the general browser.) Any other website you add to your child's approved list loads inside the app and receives, directly from your child's device, what any website receives from a visiting browser: the device's network address and the technical details any browser sends, such as its type and version. It can keep its own cookies and site data on the device -- KudoKids does not clear them when the session ends, when your child exits, or when you turn Safe Browser off, and they stay available to that site whichever child on the device opens it next. It can run advertising and analytics code, including code from other companies: KudoKids does not filter the scripts, images, fonts, or tracking pixels a page loads, and the services they come from receive the same technical data. KudoKids does block navigation to, and embedded frames from, any site other than the one your child is on, which stops advertising delivered as a frame from another site -- except that, so pages display, every approved site may load supporting content, frames, and pages from a fixed list of hosts we chose: Google (gstatic.com, ggpht.com, ytimg.com, googlevideo.com, accounts.google.com, consent.youtube.com), Amazon CloudFront (cloudfront.net), jsDelivr (cdn.jsdelivr.net), and Cloudflare's cdnjs (cdnjs.cloudflare.com), each of which receives the same technical data when a page uses it. We never send any approved site your child's name, profile, or anything typed in KudoKids. You choose every site and can remove any of them at any time in Safe Browser settings, under Sites.

When your child has friends in other families, your child's friend card (the name on your child's profile if it passes our safety screen, otherwise a screened stand-in such as the words of their friend code; their friend name — a nickname your child chose or the words of their friend code, which the friends list shows in place of the name; the friend code; age; companion; color theme; current streak; and whether messaging and leaderboards are on) and the messages they send are disclosed to the approved connected families -- that is, to the adults and children in any family you have connected with -- and, only if you and the other family both turn on friends of friends, to a friend's friend in a group chat and the adults in that child's family. How you consent to this specific disclosure. Sharing your child's friend card and messages with another family takes your approval, and you choose how you give it. Under "You approve new friends", you approve each request individually before anything is shared. Under "Auto-approve new friends", you are giving that approval in advance for any friend your child adds or accepts, and we will not ask you again per request -- choose it only if that is what you intend. Under "No new friends" your child cannot add anyone, though you will still be asked about requests others send; "Friends off" turns the whole feature off and nothing is shared across families for that child. You can change the setting, or disable messaging entirely, at any time in Family Settings, which stops this disclosure going forward. Friends of friends takes its own consent. It is off for every child until you turn it on and confirm its notice, which records your consent; it works only if the other child's family has turned it on too; and you can turn it off at any time in Family Settings. Another household you link your child to (for example, a co-parent's household) receives your child's name, age, date of birth and theme, sees your child's Kudo Coin balance, streak and activity from then on, and can receive the routines, rewards and settings you choose to send. Same-family visibility (people you yourself invited into your own family) is not an external disclosure. Adults you invite as a parent, guardian or admin can, by default, use the app as your children and read all of your children's messages, including chats with friends in other families. Other invited adults, such as grandparents, nannies and extended family, cannot open a child's account unless you grant them Kids Login. You can change either for any invited adult in Settings → Family & members → Customize permissions.

Guardian contact sharing (adult data): when you and another family's parent each approve a friend connection between your children, the two families become linked, and the owner and admin guardians of each linked family can see each other's first name, last name, and phone number (if one has been added in Settings → My Profile), so the grown-ups can reach each other about their kids. Only owners' and admins' details are shared -- never those of other family members such as grandparents or caregivers -- and this sharing is disclosed on the approval screen before you approve.

A specialist you invite: You may invite an outside adult — a speech therapist, tutor, or occupational therapist — to help with a child's home practice. That adult is someone you choose; we do not check who they are or what they are qualified to do. They are not one of the companies we hire to run KudoKids, so the promises we require from those companies do not apply to them; they act only under the access you grant. You choose which of your children they may work with — between one and ten — which activities they may open with them, and how long the access lasts. For each child you name, they receive that child's name as it appears in your family, avatar, age in whole years, speech-practice progress and targets, and — if you grant drawing — the drawings that child has saved. In the app, they never see your other children's information, or your child's messages, friends, real-money purchases, or billing, and they cannot change your child's settings. During a session their device receives only what the activities need: your child's name as it appears in your family, avatar, age in whole years, display and activity settings, progress and coin balance. It never receives your child's date of birth, sign-in PIN, notification tokens, your answers about your child, or their saved check-in history. During a session they can also see that child's Kudo Coin history (amounts, what coins were earned or spent on, and when) and their app-use record (which parts of KudoKids they used, when and for how long). To practise, they start a practice session and hand your child the device: your child's own app opens limited to the activities you allowed, with a banner naming the specialist and an End button. In that session the specialist works inside your child's own app, under your child's own name: anything saved is saved as your child's own work; practice targets also record who set them. A specialist cannot spend your child's Kudo Coins, speech practice done in a session earns none, and they cannot enter notes, diagnoses, or health information — KudoKids is not a medical record and provides no health services. You can change what they may use, change which children they see, or remove them at any time in Settings → Family & members, and the access ends on its own when the period you chose runs out, unless you renew it, which you can do for up to a year at a time. This access reaches into your own family only; it makes nothing visible to another family.

Under COPPA, you have the right to:

• Review all data we have collected about your child (via the parent dashboard or by emailing us)
• Delete your child's data permanently at any time, except the consent records and any information under a legal hold that "How Long We Keep Your Child's Data" describes
• Refuse further data collection by disabling optional features or deleting the profile
• Export your family's data in JSON format, including each child's activity, wellness, social, and creative records; we send any record the export does not include when you ask us (drawing images themselves can be reviewed on the parent dashboard's Kids' Art screen (the family's most recent drawings), and we send a full copy of every drawing on request)
• Revoke consent at any time, which will result in deletion of associated data, except those same records

We do not require your child to disclose more personal information than is reasonably necessary to take part in a game or any other activity, or to receive a prize.

You can manage your child's data directly from the Parent Dashboard in the KudoKids app, or contact us:

Email: legal@kudokids.org Phone: (910) 593-7070 Mail: Kudo Kids, LLC, 4030 Wake Forest Road, STE 349, Raleigh, NC 27609

We will respond within 30 days.

Before collecting any data about your child, we require verifiable parental consent through the app's setup process:

1. You authenticate your identity via email one-time passcode
2. You review a notice describing the categories of data we collect
3. You type your full legal name as a digital signature of consent

Only you, or another parent or legal guardian of your child whom you allow to give consent (you choose this when you invite them, or later in Settings → Family & members → Customize permissions), can give or withdraw consent to data collection on behalf of your child.

Optional data categories are controlled per feature rather than during the signature step: friends and messaging with children in other families stay off until you choose a friends setting for that child (you then approve each new friend unless you choose auto-approve, and "Friends off" turns them off again), family chat and sibling cheers start on, wellness and creative features can be turned off per child at any time in Settings, and friends of friends records its own separate consent when you turn it on; Companion Studio idea cards stay off for every child until you turn them on for that child (aged 6 or older) after reading what they collect, and we record that consent for that child; Theme Worlds, for a family admitted to its beta, starts on for each child and you can turn it off for a child or for your family in Settings, world leaderboards stay off until you turn them on for a child, and a child can share a theme-world room with a child from another family only after you read what that involves and give a consent we record for that child; when you share a code that links your child to another household, the parent in that household records their own consent before the link is made.

You may consent to our collection and use of your child's information without consenting to its disclosure to third parties. Where a disclosure is not integral to running the Service -- for example, sharing your child's friend card and messages with another approved family -- we obtain your separate consent for that specific disclosure, and you can decline or revoke it without losing the rest of the Service. That separate consent is the friend-approval setting you choose for each child: it can be given per request, or in advance for any friend your child adds, and choosing to give it in advance means we will not ask you again each time. Group chats with a friend's friend take a further separate consent: the "friends of friends" setting, off until you turn it on and confirm its notice, and working only if the other child's family turns it on too. See "Who Receives This Information" for what each setting does. Inviting a specialist works the same way: before the invitation is sent you name the children it covers and tick a separate acknowledgment for them, and you can change which children are covered, or end the access, at any time.

Augmented Reality (AR) Camera — AR is on by default and uses the device camera on-device only via native OS AR viewers (Apple Quick Look on iOS, Google Scene Viewer on Android). No camera frames are transmitted to KudoKids or to Apple or Google. 3D models stream from our CDN only. You can turn AR off for the whole family or for each child in Companion settings.

We keep your child's information only as long as needed for the purpose we collected it, and never longer. When you delete your child's profile or revoke consent, we permanently delete the associated personal information. If you delete your whole family in Settings, it is removed right away, we can restore it if you ask us within 30 days, and then, unless a legal hold applies, we permanently delete all of your children's personal information. If the account owner deletes their own KudoKids account instead, the family and all of your children's personal information are deleted permanently at once and cannot be restored. We also stop keeping it when your family stops using KudoKids: if nobody in your family uses KudoKids for 24 months (opening the app, choosing a profile, using screen time, earning or spending Kudo Coins, and updating a task all count), we delete your children's personal information. For every category below, the purpose we collect it for is described in "How We Use This Information," and the business need for keeping it is to run that feature for your family and show you your child's history for as long as it stays useful. Activity records that show how your child is growing -- messages, saving-helper records, game sessions, the assessments you complete, streak adjustments, Kudo Coin transactions, device-timer sessions, and Safe Browser sessions -- are kept until the profile is deleted or your family stops using KudoKids for 24 months, so that you can understand and support your child's growth over time. Rows marked "(automatically deleted)" are removed by scheduled purge jobs when their period expires; for every other row, the period shown is the longest we will keep that data -- and in every case, deleting the profile, going 24 months without using KudoKids, or asking us, deletes the data sooner. The exceptions are our consent records, which we keep for the period shown in the table even after the data is deleted, and information under a legal hold (see below). Our retention periods:

Device-handoff network addresses are erased after 30 days and the handoff record is deleted after 90 days, both automatically.

If your family stops using KudoKids. We look at your household, not at each child separately: anyone on the account using the app -- you, another parent or guardian, or any of your children -- keeps the whole family active and starts the 24 months over. So a child who has not used KudoKids in a while does not lose anything while the rest of the family is still using KudoKids.

Before we delete anything, we email the parent who holds the account twice: once 30 days ahead, and again 7 days ahead. If that email address can't receive our messages, we still delete the data at the end of the 24 months. Each email has a one-click link that resets the clock for another 24 months. You can use that link as often as you like -- clicking it more than once is safe and simply keeps the account active. If nobody in your family uses KudoKids in any of those ways and nobody clicks the link, we delete your children's personal information.

Before deleting it, we add your children's activity and age group to anonymous totals (counts of families and of children by age group, tasks completed, Kudo Coins earned and spent, games, screen time, stories, drawings, wellness activities, and messages). Those totals carry no family, profile, or child identifier and no dates, and every family's numbers are added into the same running totals. We do not report any of those totals until at least five families have been combined into them, so a reported number can never describe a single household.

What stops this from running. We do not delete your children's information while there is a legal hold on your account (a preservation obligation, such as litigation or a regulatory inquiry), or while your family is part of an active school program. A founding or lifetime membership does not stop it: we keep your membership and your parent account, but your children's information follows the same 24-month rule.

This deletion covers your children's personal information. Whether you delete your family or it reaches 24 months without use, if a subscription the account owner pays for (or one whose payer no longer has an account) can still charge, including one already set to end at the close of its current billing period, we delete your children's own activity records on schedule but keep family-level records, such as device records and calendar events, until that subscription ends. A subscription another adult pays for becomes theirs and does not delay this deletion. It does not delete your own login, your founding or lifetime purchases, or our consent records -- consent records keep the period shown in the table above, 3 years after the data is deleted.

One honest limit: deletion is not instant everywhere at once. When the job runs, it removes your children's information from our live systems. Our database backups are written on their own schedule and expire on their own schedule, so a copy can remain in a backup until that backup expires.

We do not retain your child's personal information beyond the time reasonably necessary to fulfill the purpose for which it was collected.

KudoKids uses reasonable administrative, technical, and physical safeguards to protect the confidentiality, security, and integrity of children's personal information, appropriate to its sensitivity and to the size and nature of our business. We review those safeguards as our systems change. We do not publish the specifics, because describing them publicly would help anyone trying to defeat them.

We obtain written assurances from every service provider that handles your child's information that it will employ reasonable measures to protect it (see "Who Receives This Information").

No system is perfectly secure. If we discover a breach affecting your child's personal information, we will notify you without unreasonable delay and no later than 72 hours after discovery, and report it to the authorities as required by law.

If you turn on Shared screen-time for a child, that child can start a device-timer session on one device for their brothers and sisters, with or without joining it themselves, whether or not Shared screen-time is turned on for those siblings; you, or another adult you have given approval rights in your family, can also start one. Each child's own bank and coins pay for their own seat. While a shared session is being set up, the child starting it can see whether each brother or sister can afford the chosen length, including their coin and bank balances; this is shown only within your family. We keep a record of each shared session, including who took part and what each child spent, inside KudoKids. This record stays inside KudoKids: it is used only to run KudoKids, is never sold or used for advertising, and is not shared with anyone other than the service providers that host and operate KudoKids for us, except that a specialist you invite can see your child's Kudo Coin history, which includes shared-session spending, during a live session. Shared screen-time is off by default and can be turned on or off any time in each child's profile.