Privacy Policy

What the app keeps, and where

A grown-up adds a profile for each child: a first name or nickname, an age band, the buddy the child picks (Sami, Lina or Ziad), and the grade, subject and path they learn in. No photos, no date of birth, no school name, no location.

For each profile the app keeps its progress: lessons finished, stars collected and where the child is in each path, plus the parents' settings.

Without parental sign-in and explicit sync consent, children's profiles, learning progress and parent settings remain on the device and are not uploaded to a Kidverse account.

What we don't do

No ads in the app, no third-party advertising, analytics or tracking tools, no advertising ID (it is blocked in the Android app), no chat or social features, and no links that take a child out of the app; external links exist only in the parents' area.

The app never asks for the camera, microphone, contacts, photos or location.

We never sell any data, and never share children's information for advertising, marketing or behavioral profiling.

The parent account (optional)

The app works without signing in. From the parents' area, which opens only after a question for grown-ups, a parent can sign in with Apple or Google to save the children's progress and restore it on other devices.

When you sign in, Apple or Google gives us an account identifier and, if the provider shares it, your email address (Apple lets you hide your real address). We use them for sign-in, account management and support. We register the device with its system type, app version and last connection time, used for session management, compatibility and service security. We never receive a password.

When Sign in with Apple is used, we securely keep the Apple authorization credential needed to revoke the connection when the account is deleted. Session tokens are stored in hashed form.

Creating an account does not upload anything by itself: children's profiles and progress are uploaded only after the parent explicitly agrees to save them to their account, and we keep that consent with its date.

When the app goes online

To download lesson content (pictures and voices) from our content server, even without signing in. Like any download, the server logs the device's IP address, the time and the file name; these logs are not linked to any child.

After a parent signs in and consents, to sync the children's profiles and progress with our server. Our servers log incoming requests (time, type and result) to run and protect the service.

Content-delivery and request logs are kept for no more than 30 days and then deleted, unless we need them longer to investigate a security problem or meet a legal obligation. All data travels over an encrypted connection (HTTPS).

Service providers

We use a small number of providers, each processing only what its service needs: Apple and Google for the optional parent sign-in, our server hosting provider to run our server, its database and backups, Cloudflare to store and deliver lesson content, and Netlify to host this website.

We do not authorize our hosting or content-delivery providers to use children's profile information or learning progress for advertising or independent profiling; they process it under their data-processing terms only to provide their service. Apple and Google process sign-in information under their own privacy policies.

Purchases and subscriptions

There are currently no purchases or subscriptions in the app. If they are added later they will go through the App Store or Google Play, we will never see payment details, and we will update this page first.

Where data is kept, and for how long

Synced account data is kept in a database on our server, with a daily backup that is deleted after 30 days.

We keep account data while the account exists. Data on the device stays until you delete it or remove the app.

Withdrawing consent and deleting data

A parent can withdraw permission for future cloud sync at any time by signing out in the parents' area; nothing is uploaded after that until consent is given again. Previously synced information stays stored until the parent deletes the account or requests deletion as described below.

"Delete account and data" in the parents' area removes the account record, the child profiles linked to it and their synced progress, ends every session and disconnects Apple or Google. Remaining copies in backups are deleted within 30 days.

Deleting the account does not erase the copy kept on the device itself; use "Remove from this device" in the parents' area, or remove the app.

You can also request account deletion without the app on the Delete account page of this website, or by emailing kidverse90@gmail.com with the subject "Delete my Kidverse account", including if you can no longer access the app. We may ask you to verify account ownership, and we process verified requests within 30 days.

Children's privacy

Kidverse is made for children under 13, is used with a parent's supervision, and follows the App Store Kids Category rules and the Google Play Families Policy.

We collect no personal information directly from children. A parent must complete the protected sign-in and explicit consent before any of a child's profile information or progress can be uploaded, and we never use this information for advertising or profiling.

Parents can review and change their children's profiles, delete them with the account, and withdraw consent at any time.

This website

This website uses no cookies and no analytics or advertising tools, and its fonts are served from the site itself. Our hosting provider (Netlify) logs incoming requests (IP address, time and page), keeps them according to its retention settings, and they are used only to run and protect the site.

Changes to this policy

We publish every update on this page with its date above. If an update changes how children's data is used, we tell parents inside the app and ask for their consent again before it applies.

Contact

Kidverse is published and operated by Kidverse, the developer responsible for the data described in this policy.

For any privacy question or request about your child's data, email kidverse90@gmail.com; we reply within a few days.