Privacy Policy

KidShare is the data controller for the personal data processed through our platform. Contact: [email protected]

We collect the following categories of personal data: • Account information: your first name, last name, email address, and password (stored in hashed form) • Family data: family name, member roles, and invitation status • Child profiles: name, date of birth, gender, medical information, school details, emergency contacts, preferences, and milestones • Financial data: expense amounts, categories, descriptions, split ratios, and receipt uploads • Communication data: messages exchanged between co-parents within the platform • Calendar data: custody schedules, events, swap requests, vacation plans, and activity schedules • Payment records: settlement amounts, dates, and payment methods • Usage data: language preferences and last login timestamp

We process your personal data under the following legal bases: • Contract performance (Article 6(1)(b) GDPR): Processing necessary to provide the co-parenting platform services you signed up for, including expense tracking, calendar coordination, and messaging. • Consent (Article 6(1)(a) GDPR): When you create an account and voluntarily provide information. You may withdraw consent at any time by deleting your account. • Legitimate interest (Article 6(1)(f) GDPR): For platform security, fraud prevention, and service improvement, where these interests are not overridden by your rights.

Your data is used exclusively to provide and improve the KidShare platform: • Operating the co-parenting platform and its features • Facilitating expense tracking, splitting, and settlement between co-parents • Enabling messaging and communication features • Managing custody calendars, events, and schedule coordination • Maintaining child profiles with shared information for both parents • Sending transactional emails (verification, password reset, settlement reminders, monthly summaries) • Ensuring platform security and preventing unauthorized access

We do not sell, rent, or trade your personal data. We do not display advertising. Your data is shared only with: • Your co-parent: When you create or join a family, both parents can access shared family data including expenses, messages, calendar events, child profiles, and rules. • Extended family members: If invited, they receive view-only access to relevant family data based on their role. • Convex: Our backend infrastructure provider, which stores and processes data on our behalf under a data processing agreement. • AhaSend: Our email delivery provider, which processes email addresses to deliver transactional emails. We may also disclose data when required by law or to protect our legal rights.

KidShare processes data about children as entered by their parents or legal guardians. Children do not create accounts or interact with the platform directly. Important safeguards: • Only parents and authorized family members within a family can access child data. • Child data includes names, dates of birth, medical information, school details, and emergency contacts — all entered voluntarily by parents. • We apply the principle of data minimization: we only store child data that parents choose to enter. • Parents can edit or delete child data at any time through the platform. • Child data is deleted when the child is removed from the family or when the family is deleted.

We retain your personal data for as long as your account is active and you use our services. • Account data: Retained until you request account deletion. • Family data: Retained as long as the family exists on the platform. • Messages: Retained as long as the family exists. In documented mode, messages are immutable for record-keeping purposes. • Uploaded files (receipts): Retained as long as the associated expense exists. Upon account deletion, your personal data is removed. Shared family data (expenses, messages) may be retained in anonymized form for the other co-parent's records.

Under the GDPR, you have the following rights regarding your personal data: • Right of access (Article 15): Request a copy of the data we hold about you. • Right to rectification (Article 16): Correct inaccurate or incomplete data. You can update most data directly in the app. • Right to erasure (Article 17): Request deletion of your personal data. You can delete your account through the app. • Right to restriction (Article 18): Request that we limit processing of your data in certain circumstances. • Right to data portability (Article 20): Receive your data in a structured, machine-readable format. • Right to object (Article 21): Object to processing based on legitimate interest. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

KidShare uses minimal browser storage: • Authentication tokens: Stored to keep you signed in securely. • Language preference: Stored in localStorage to remember your chosen language. We do not use tracking cookies, analytics cookies, or any third-party advertising cookies. We do not use any third-party analytics services.

We implement appropriate technical and organizational measures to protect your data: • Passwords are hashed — we never store them in plain text. • All data is transmitted over HTTPS (TLS encryption). • Family data access is restricted to authorized family members only. • Email verification is required for new accounts. • Our backend infrastructure (Convex) provides enterprise-grade security.

Your data may be processed on servers located outside the European Economic Area (EEA), specifically where our infrastructure provider (Convex) operates. When data is transferred outside the EEA, appropriate safeguards are in place in accordance with GDPR requirements.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on the platform. We encourage you to review this policy periodically. The "Effective date" at the top of this page indicates when this policy was last updated.

For any privacy-related questions, concerns, or to exercise your data rights, contact us at: [email protected]