KidClimb Privacy Policy

Effective date: 2025-12-17

Applies to: KidClimb website and mobile/web apps (the “Service”)

Summary (plain language)

KidClimb is a parent-managed app for tracking activities, milestones, and routines for children. Parents or legal guardians control accounts. Children do not create accounts and should not submit personal information to KidClimb. We collect only what we need to run the Service, and we do not sell child data.

Who we are

KidClimb (“KidClimb”, “we”, “us”) provides a parent-managed Service intended for families in the United States and Canada.

Who the Service is for

The Service is intended for parents and legal guardians. Children do not directly interact with account creation or account management.

If you believe a child has provided personal information to KidClimb without a parent or legal guardian’s involvement, contact us so we can address it.

Information we collect

We aim to minimize data collection. Depending on how you use KidClimb, we may collect:

1) Account information (parent/guardian)

• Email address (for login, security notices, and account communications)
• Authentication data handled by our auth provider (we do not store your raw password)

2) Child profile information (entered by the parent/guardian)

KidClimb may store child-related information that a parent/guardian enters, such as:

• Child display name or nickname
• Child age or birthdate (used to tailor age-appropriate activities)
• Optional preferences (e.g., focus domains, reminders, favorites, routines)
• Milestones / skill status and other tracking you choose to record

3) Activity and usage data (family tracking)

• Activity logs you create (e.g., what you did, when, and any notes)
• Saved items and collections you create

4) Device and technical data

We collect limited technical information to keep the Service secure and reliable:

• Device/browser information (e.g., user agent)
• IP address (used for security, fraud prevention, and rate limiting)
• Diagnostic logs (for debugging) and crash reports (if enabled)

5) Cookies / local storage

KidClimb may use cookies and local storage for:

• Authentication/session management
• Remembering preferences (e.g., selected child, onboarding state)
• Reliability features (e.g., offline queues)

How we use information

We use information to:

• Provide, maintain, and improve the Service (e.g., show relevant activities by age)
• Save your settings and family tracking data across devices
• Secure the Service (fraud prevention, abuse prevention, rate limiting)
• Provide customer support and respond to requests
• Comply with legal obligations

Legal basis / consent (Canada and other jurisdictions)

In Canada, we collect, use, and disclose personal information with your knowledge and consent, except where permitted or required by law. You can withdraw consent by deleting data or closing your account, subject to legal/operational requirements described below.

How we share information

We do not sell child data. We share information only as needed:

Service providers (processors)

We use vetted providers to operate KidClimb (e.g., hosting, databases, authentication, analytics you opt into, error monitoring). These providers process data on our behalf under contractual obligations to protect it and use it only to provide services to us.

Legal and safety

We may disclose information if we believe it is reasonably necessary to comply with law, protect the rights and safety of users, or prevent fraud/abuse.

Business changes

If KidClimb is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this policy and applicable law.

Children’s privacy (COPPA + best practices)

KidClimb is designed as a parent-managed service:

• Children do not create accounts.
• We do not knowingly solicit personal information directly from children.
• We do not allow child-directed public profiles, messaging, or social features by default.
• We do not use behavioral advertising targeted at children.
• We do not sell children’s personal information.

For a plain-language overview, see Child Privacy Notice.

Advertising and analytics

• KidClimb does not serve behavioral advertising to children.
• Any analytics used by KidClimb is intended to measure product performance and reliability. Where applicable, we provide settings to opt in/out (and we do not enable analytics in a way that targets children).

Location data

KidClimb does not collect precise location by default. If a future feature uses location, it will be optional, parent-controlled, and clearly explained at the time of collection.

Data security

We use administrative, technical, and organizational safeguards appropriate for an early-stage product, such as:

• Access controls and authentication
• Encryption in transit (HTTPS)
• Least-privilege access to production systems
• Monitoring and logging for abuse prevention and debugging

No method of transmission or storage is perfectly secure, but we work to protect your data.

Data retention

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

Typical retention:

• Active account: data is stored until you delete it or close your account.
• Backups/logs: limited retention for operational reliability and security.

See Data Deletion Policy for timelines and details.

Your rights and choices (parents/guardians)

Depending on your jurisdiction, you may have rights to:

• Access: review information associated with your account and child profiles
• Export: obtain a copy of your data (e.g., via in-app export)
• Correct: update inaccurate information
• Delete: delete child data or close your account

You can manage many of these directly in the app (Settings / Basecamp). You can also contact us for help.

International transfers

KidClimb may process data in the United States and other locations where our service providers operate. We take reasonable steps to ensure appropriate safeguards for cross-border transfers.

Changes to this policy

We may update this policy from time to time. We will post the updated version in the Service and update the effective date.

Contact

For privacy requests or questions:

• Email: privacy@kidclimb.com

• Confirm COPPA posture and whether any feature could be interpreted as “child-directed” (even though accounts are parent-managed).
• Confirm whether additional disclosures are needed for Canadian provincial privacy laws beyond PIPEDA.
• Confirm whether we need a designated privacy officer name/address for Canada.
• Verify data retention timelines and backup deletion commitments are accurate for our actual infra.
• Review third-party vendor list and add a public-facing list (or clarify “service providers”) if advisable.
• Confirm governing jurisdiction language and whether separate US/Canada addenda are needed.