Privacy Policy
Draf: dokumen ini sedang ditinjau oleh penasihat hukum dan dapat berubah sebelum peluncuran.
Dokumen ini saat ini hanya tersedia dalam bahasa Inggris. Versi bahasa Inggris adalah versi yang berlaku.
The short version
- YubiKids is a learning app for children aged 3 to 12. Only parents and guardians aged 18 or over can create accounts. Children use YubiKids through a profile that a parent creates.
- We collect the minimum we need to teach and to enforce the screen-time rules you set.
- We do not show ads, sell data, or put third-party analytics, advertising or tracking code in the app.
- Children’s drawings stay on their device unless you turn on cloud backup.
- You can export or delete all of your family’s data from inside the app at any time.
The rest of this policy explains the details. Our Children’s Privacy Notice covers information about children specifically.
Who we are
YubiKids (“YubiKids”, “we”, “us”) provides the YubiKids mobile and tablet app, the website at yubikids.com, and the related services (together, the “Service”).
[Company legal name and registered address will be added before launch.]
Contact for privacy questions: privacy@yubikids.com.
Information we collect
From parents and guardians
| Information | Why we need it |
|---|---|
| Email address | To sign you in with a one-time code, record your consent, send receipts and, if you opt in, weekly reports |
| Sign in with Apple or Google identifier | To sign you in if you choose those options |
| Parental consent records (time, notice version, method) | To show we obtained consent before creating a child profile |
| Your screen-time settings and changes, including which guardian made each change | To apply your rules and show your family a history of changes |
| Push notification token for your own (parent) device | To send you notifications, such as time requests |
We do not store passwords. Your parent PIN is stored on your devices only as a protected one-way hash and is never sent to us in readable form.
About children (provided by a parent)
| Information | Why we need it |
|---|---|
| Nickname (can be an emoji or avatar name) and avatar choice | To show the right profile |
| Birth year and month | To choose an age-appropriate starting level |
| Language | To show content in the right language |
We do not ask for a child’s full name, photo, school, address or precise location.
Created when your child uses the app
| Information | Why we need it |
|---|---|
| Learning progress (activities completed, answers right or wrong, hints used, skill levels) | To choose the next activity and to build your progress reports |
| Screen-time usage (minutes of learning and play) | To enforce your limits, including across several devices |
| Drawings | Stored only on the device unless you turn on cloud backup (Premium) |
Children cannot type messages or free text that leave their device, and there is no way for children to communicate with anyone through YubiKids.
Device and technical information
To run the Service securely we process: device platform and model type, operating system and app version, language, the country derived from the network connection, a cryptographic public key created for each paired device, and crash reports (stack traces without device identifiers). App analytics events are sent only to our own servers, are pseudonymous (identified by a salted hash, never by email or nickname), and never include free text.
We do not collect advertising identifiers, contacts, photos from the camera roll, microphone recordings or precise location.
Purchases
Subscriptions are bought through the Apple App Store or Google Play. They send us a transaction record so we can unlock Premium. We never receive your card details.
On our website
- Analytics: Cloudflare Web Analytics, which does not use cookies or track you across sites.
- Forms: if you join the waitlist, register teacher interest or contact support, we receive what you enter (such as your email and message).
- Bot protection: forms are protected by Cloudflare Turnstile, which processes limited technical signals to tell people from bots.
The website does not use advertising or tracking cookies.
How we use information
We use information to:
- Provide the Service: profiles, activities, adaptive learning, screen-time rules, remote commands between your devices, cloud backup if enabled.
- Produce your progress reports and, if you enable it, a written weekly summary.
- Process subscriptions and free trials, and prevent trial abuse.
- Keep the Service secure, detect clock tampering and abuse, and fix crashes and content errors.
- Respond to support requests.
- Comply with law.
We do not use information about children for advertising, profiling for marketing, or selling.
Artificial intelligence
Activities, illustrations and voice-overs are created with AI assistance and reviewed by a person before publication. This happens before content reaches the app and uses no information about your family.
If you enable the optional AI-written weekly summary, we send only aggregated skill scores to an AI model operated through our infrastructure provider. We never send your child’s nickname, drawings or other identifying details. Children never interact with an AI chat.
Legal bases (EU, EEA and UK)
- Consent from a parent or guardian, for creating child profiles and processing children’s information.
- Contract, to provide the Service and subscriptions you request.
- Legal obligation, for example keeping purchase records for tax.
- Legitimate interests, for security, fraud prevention and keeping the Service working, balanced against your rights and with children’s interests given particular weight.
Who we share information with
We do not sell or rent personal information, and we do not share it with third parties for their own purposes.
We use a small number of service providers who process data on our behalf under contract:
| Provider | Purpose |
|---|---|
| Cloudflare | Hosting, databases, file storage, email delivery, security, website analytics |
| Apple and Google | Processing subscriptions; delivering notifications to parent devices |
| Email delivery provider (if different from Cloudflare) | Sending sign-in codes, receipts and reports |
We may also disclose information if required by law, to protect the safety of a child or others, or as part of a merger or acquisition, in which case this policy continues to apply to your information.
Where information is stored
Our infrastructure runs on Cloudflare’s global network. Personal data of families in the European Union is stored in the EU. Where information is transferred internationally, we use appropriate safeguards such as Standard Contractual Clauses.
How long we keep information
| Information | Retention |
|---|---|
| Account, guardian and child profile data | While your account exists, then deleted within 30 days of account deletion |
| Detailed learning events | 13 months; summaries kept while your account exists |
| Detailed screen-time usage | 90 days, then kept only as daily totals |
| Backed-up drawings | Until you delete them or your account |
| Device keys and notification tokens | Until the device is unpaired |
| Purchase records | As long as tax law requires, with minimal fields |
| Waitlist and support emails | Until you ask us to delete them, or when no longer needed |
If a free family account has no device activity for 18 months, we send two warning emails and then delete it.
How we protect information
Connections are encrypted. Each child device proves its identity with its own cryptographic key rather than a password. Backed-up drawings are private and accessible only through short-lived links. Administrative access is restricted and logged. No security is perfect, but we follow a written security program and an incident response plan, and we will notify you and regulators as the law requires if a breach affects your information.
Your rights and choices
- Export: download all your family’s data from the app (Account → Export data).
- Delete: delete your account from the app (Account → Delete account). Access ends immediately and personal data is erased within 30 days.
- Review and correct: see and edit child profiles in the app at any time.
- Withdraw consent: delete a child profile or your account; we then stop collecting information about that child.
- Opt out of emails: weekly report emails are opt-in and can be turned off at any time.
- Notifications: every notification category can be turned off.
Depending on where you live, you may also have rights to access, rectify, erase, restrict or object to processing, and to data portability. To exercise any right, use the in-app tools or email privacy@yubikids.com. You can also complain to your local data protection authority.
Changes to this policy
If we make a material change, we will notify parents in the app and by email before it takes effect and, where required, ask for consent again.
Contact
Email privacy@yubikids.com with any privacy question or request.
Ada pertanyaan tentang dokumen ini? Kirim email ke privacy@yubikids.com