Privacy policy
Last updated: 27 October 2026. This policy covers the KiddoTots app (iPhone, iPad and Android) during its beta test, and this website.
KiddoTots is in beta. Please test it with grown-up supervision. We'll update this page, and tell families in the app, before any change to how information is used.
The short version
- We collect the least we can: a nickname and an age group for each child, and their lesson progress.
- We never ask for a child's full name, photo, school, birthday, location or contact details.
- There are no ads, no tracking and no analytics tools in the app or on this website. We don't sell or share data for marketing.
- A grown-up sets everything up behind a family passcode, and can delete a child's information at any time.
What we collect
| Information | Why | How long we keep it |
|---|---|---|
| Family passcode, stored only as a secure one-way hash | So only a grown-up can change settings, see progress or leave child mode | Until the family account is deleted |
| Each child's nickname, animal picture, age group, chosen buddy and settings | To pick the right lessons and let the buddy greet them | Until the child's profile is deleted |
| Lesson progress: which questions were answered, right or wrong, hints used, time spent | To choose the next level and show the grown-up how it's going | Until the child's profile is deleted |
| Safety events: only the kind of event (for example "asked for personal details"), never the words | So the grown-up can see if something needed attention | Until the child's profile is deleted |
| Subscription status: plan, expiry date and the store's reference number | To unlock lessons for the whole family | While the account exists. Payment details are handled only by Apple or Google; we never see them |
Microphone and voice
The microphone is off unless a grown-up turns it on in the grown-ups area. When it's on, the child presses and holds a button to talk. During the beta, speech is recognised by the phone or tablet's built-in speech service (Apple or Google). Depending on the device, that service may send the audio to Apple or Google to recognise it. KiddoTots never stores voice recordings. Recognised words are not kept unless a grown-up chooses to keep them, and then for 7 days at most.
The buddy's voice in our stories is pre-recorded and AI-generated (made with OpenAI). No information about your child is used to make it. Other spoken lines use your device's built-in voice, on the device.
The AI tutor
During the beta, the buddy's replies come from lines written and checked by us, not from a live AI. If we turn on an AI tutor in future, we'll update this policy first and ask for a grown-up's permission in the app. Answers are always checked by the app itself, not by an AI.
Where information is stored
Family and progress information is stored on our server, hosted by Railway, and sent to it over an encrypted connection. A copy of recent progress is kept on the device so lessons work offline, and it syncs when the device is back online.
Children's privacy
KiddoTots is made for children, so a parent or carer must create the family account and confirm they've read how data is handled before adding a child. Children can't change settings, see prices, make purchases or leave child mode without the family passcode. We follow the principles of the US Children's Online Privacy Protection Act (COPPA) and the UK Age Appropriate Design Code: we collect only what the app needs, use it only to run the app, and let parents review and delete it.
Your choices and rights
- See progress: open the grown-ups area in the app.
- Delete a child's information: Grown-ups → choose the child → Delete profile. This removes their profile, progress and any saved words from our server and from the device.
- Delete the whole family account, or ask what we hold: email us (below) from the address you'd like us to reply to. We'll confirm it's your account before acting.
- Turn things off: the microphone, voice and session length are all in the grown-ups settings.
Depending on where you live (for example in the UK, EU or US) you may have further rights to access, correct, delete or move your information. Contact us to use them.
This website
kiddotots.com uses no cookies, no analytics and no third-party fonts or scripts. Like any website, the hosting provider (Vercel) may briefly process technical information such as IP addresses to deliver pages and keep them secure.
Changes
If we change this policy, we'll update the date above. For important changes, we'll tell families in the app before the change takes effect.
Contact
Questions or requests: privacy@kiddotots.com