KidzOrb Privacy Policy

Effective Date: May 1, 2026
Last Updated: May 1, 2026

1. Introduction

KidzOrb ("we," "our," or "us") is committed to protecting your family's privacy. This Privacy Policy explains how we collect, use, store, and protect information when you use KidzOrb at kidzorb.com (the "Service").

KidzOrb is a platform for parents and guardians. We do not offer accounts to children, and we do not knowingly collect personal information directly from children under 13.

2. Who We Are

KidzOrb is operated by Johanna Ravelo, founder and CEO.
Contact: support@kidzorb.com
Website: https://kidzorb.com

3. What Information We Collect

3.1 Account Information

When you create a KidzOrb account, we collect:

• Your name and email address
• Password (stored encrypted, never in plain text)

3.2 Family Profile Information

Information you voluntarily enter about your family, including:

• Children's first names, ages, grades, and schools
• Home address and zip code
• Activity and schedule information
• Guardian and emergency contact details
• Household information

3.3 Financial Information

• Kid-related expense records you enter manually
• Receipt and expense data extracted from emails you authorize us to scan (see Section 3.5)
• We do not collect bank account numbers, credit card numbers, or payment credentials

3.4 Communications

• Emails sent to your dedicated @assistant.kidzorb.com address
• AI-generated summaries and action items derived from those emails
• We store the content of inbound emails to provide the Service

3.5 Google Account Data (Optional)

If you connect your Google account, we access:

• Gmail: We scan for activity-related emails, schedules, and receipts. We read email content only to extract relevant information for your KidzOrb account. We do not store full email bodies permanently beyond what is necessary to process them.
• Google Calendar: We read calendar events to identify and import activities and school events. If you choose "Allow changes," KidzOrb can also add and update events on your calendar, and shows you a confirmation each time it does.

KidzOrb's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google OAuth with the minimum scopes necessary. You can disconnect Google at any time from Settings.

3.6 Usage Data

• Pages visited, features used, and general app interactions
• Device type and browser (for debugging and improvement)
• We do not use third-party advertising trackers

4. How We Use Your Information

We use your information solely to:

• Provide and improve the KidzOrb Service
• Power AI features like schedule detection, expense parsing, and message triage
• Send you product updates and important account notices (you can opt out of marketing)
• Respond to support requests
• Comply with legal obligations

We do not:

• Sell your data to third parties
• Use your children's information for advertising
• Share your data with data brokers
• Build behavioral profiles on children

5. COPPA Compliance

KidzOrb is designed for parents and guardians, not children. We comply with the Children's Online Privacy Protection Act (COPPA):

• We do not allow children under 13 to create accounts
• All child profile data is entered and controlled exclusively by the parent/guardian account holder
• We do not collect data directly from children
• We do not use children's information for advertising or behavioral profiling
• Parents may request deletion of all child-related data at any time (see Section 8)

If you believe we have inadvertently collected information from a child under 13 without parental consent, please contact us immediately at support@kidzorb.com.

6. Data Storage and Security

• All data is stored on secure, managed cloud infrastructure (Base44)
• All data transmission uses HTTPS/TLS encryption
• Each parent account is isolated — you can only access your own family's data (Row-Level Security is enforced at the database layer)
• Google OAuth tokens are stored securely and never exposed to the frontend
• We conduct regular reviews of access controls and security practices

7. Data Sharing

We share data only in these limited circumstances:

We do not share your data with schools, leagues, coaches, or other third parties without your explicit consent.

AI processing partners (OpenAI, Google Gemini) process data under their own privacy policies and data processing agreements. We send only the minimum data necessary for each AI task.

8. Your Rights and Data Deletion

You have the right to:

• Access all data we hold about your family
• Correct any inaccurate information
• Export your data (contact support@kidzorb.com)
• Delete your account and all associated data

How to Delete Your Account

1. Go to Settings → Account → Delete My Account
2. Confirm deletion
3. All of your data — including child profiles, expenses, messages, and sync preferences — will be permanently deleted within 30 days

You may also request deletion by emailing support@kidzorb.com with the subject line "Data Deletion Request."

9. Data Retention

10. Cookies

KidzOrb uses minimal cookies for:

• Keeping you logged in (session cookie)
• Basic app functionality

We do not use advertising cookies or third-party tracking pixels.

11. Changes to This Policy

We will notify you by email and in-app notice at least 14 days before making material changes to this Privacy Policy.

12. Contact Us

Questions about privacy or data? We're real people and we respond.

Email: support@kidzorb.com
Subject line: Privacy Question
Website: https://kidzorb.com

KidzOrb · Everything about your kids. One place. Finally.