The short version: Kinder Shield is a parental control service — not an advertising business.
We collect only what's needed to keep your family's devices safe and working, we never sell personal
data, we never use children's data for ads, and you can export or delete everything at any time.
1. Who we are
Kinder Shield ("Kinder Shield", "we", "us", "our") provides a parental control application for
families, available on Android and iOS, together with this website and our family dashboard. This
policy explains how we handle personal data when you visit kindershield.app, create a
Kinder Shield account, start a free trial, or use the Kinder Shield apps.
For the purposes of the EU/UK General Data Protection Regulation (GDPR) and similar laws, Kinder
Shield is the data controller for the account and service data described below. Parents and
guardians remain in control of their family's account and act as the decision-maker for their
child's use of the service.
This policy does not apply to third-party websites, app stores, or services we link to. Please
review their own privacy policies.
2. What we collect
We keep collection to the minimum needed to run the service. Depending on how you use Kinder
Shield, this may include:
Account and contact details
- Parent/guardian name, email address and password (stored only as a salted hash).
- Family name, time zone, and the devices and child profiles you add to your family circle.
- Billing status and subscription details. Card payments are processed by our payment provider —
we receive a subscription reference, never your full card number.
Child profile data
- First name or nickname, age/date of birth and avatar chosen by the parent.
- Device pairing identifiers and app/device settings you configure (screen-time limits, blocked
apps, allowed contacts).
- We do not require a child's email address, phone number, photo or precise identity to create a
profile.
Device and usage data
- Screen-time minutes, app usage summaries, device battery/online status and enforcement events
(for example, "daily limit reached").
- App version, platform, and diagnostic/crash logs used to keep the apps stable.
Location data
- Approximate and precise device location, only when location sharing is enabled by the parent and
permitted on the child's device, so family members can see each other on the family map and use
safe-zone alerts.
- Location history is retained for a limited period and is visible only to your approved family
circle. Sharing can be paused at any time.
Messages and family communications
- Family chat messages are end-to-end encrypted between family members' devices. We cannot read
their contents, and they are not used for advertising, profiling or recommendations.
EarnIt photo proofs and mood check-ins
- Photos a child submits as proof of a completed task, shared only between the child and their
parents/guardians, and automatically deleted once the submission is resolved.
- Mood check-ins the child chooses to record, visible only to the parents/guardians in that family.
Website and support data
- Information you submit through our contact, newsletter or free-trial forms (name, email, message).
- Essential session and security data (see Cookies).
3. How we use it
- Provide the service — create accounts, pair devices, sync settings and show the family
dashboard.
- Protect children — apply the screen-time limits, app rules and safe zones a parent has
configured, and send the parent the resulting alerts.
- Keep families connected — deliver family messages, location sharing and mood check-ins to
the intended family members only.
- Bill and support you — manage trials and subscriptions, respond to support requests, and
send essential service emails.
- Keep Kinder Shield safe and working — detect abuse, fraud and security incidents, debug
crashes, and maintain service reliability.
- Improve the product — using aggregated, de-identified statistics that are never tied back
to an individual child.
We do not use personal data for automated decision-making that produces legal or similarly
significant effects, and we do not build advertising profiles.
4. Legal bases for processing
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
- Performance of a contract — to provide the Kinder Shield service you signed up for.
- Consent — for location sharing, optional notifications, and any processing that requires
verifiable parental consent, including children's data. Consent can be withdrawn at any time in
the app or by contacting us.
- Legitimate interests — to secure the service, prevent abuse, and improve our product,
balanced against your rights and expectations.
- Legal obligation — to keep records, respond to lawful requests, and meet tax and consumer
law duties.
5. What we never do
- We never sell or rent personal data.
- We never show ads in the Kinder Shield apps or use personal data for third-party advertising.
- We never read family messages, which are end-to-end encrypted.
- We never use children's data for behavioural advertising or profiling.
- We never embed third-party advertising or social trackers on this website.
- We never make a child's data visible to anyone outside the family circle the parent approved.
6. When we share information
We share personal data only in the limited circumstances below:
- Within your family circle — parents/guardians and the child profiles they created see the
data described above, according to the permissions they set.
- Service providers — vetted processors who host our infrastructure, send email, process
payments and provide crash reporting. They act on our instructions under written data-processing
agreements and may not use the data for their own purposes.
- Legal and safety — when required by law, valid legal process, or when necessary to
protect the safety of a child or another person. Where permitted, we will notify the account
holder.
- Business transfer — if Kinder Shield is merged or acquired, data may transfer as part of
that transaction; we will notify you and this policy will continue to apply until updated.
We do not otherwise disclose personal data to third parties.
7. Children's privacy
Kinder Shield is designed for families and is built around children's privacy rules, including the
US Children's Online Privacy Protection Act (COPPA), the GDPR-K provisions of the EU/UK GDPR, and
applicable app-store family policies.
- Verifiable parental consent. A child's profile is created and controlled by a parent or
legal guardian. We ask for consent from the parent before collecting a child's personal data, and
the child cannot create an account on their own.
- Minimal collection. We collect only the child data needed for parental controls —
typically a nickname, device pairing and usage/limit data. We do not ask children for contact
details, photos or free-text personal information.
- Transparency for kids. Children can see exactly what their parents can see, and location
sharing is visible to the child at all times.
- No advertising to children. We never serve ads to children or use their data for
advertising or profiling.
- Parental rights. A parent or guardian can review, export, correct or delete their
child's data at any time from the dashboard, or by contacting us at
privacy@kindershield.app. We will respond within
the timeframe required by applicable law.
If we learn that we have collected a child's personal data without the required parental consent,
we will delete it promptly.
8. How long we keep it
- Account data — kept while your account is active.
- After deletion — account and child data are removed from live systems promptly and purged
from backups within 30 days, except where we must retain specific records for legal, tax or
security reasons.
- EarnIt photo proofs — automatically deleted once the submission is resolved.
- Location history — retained only for the limited period needed to power recent-history
views and safe-zone alerts.
- Website form submissions — kept only as long as needed to answer your request, then
deleted or anonymised.
9. How we secure it
- Encryption in transit (TLS) for all app, dashboard and website traffic, and encryption at rest
for stored data.
- End-to-end encryption for family messages.
- Passwords stored only as salted hashes; least-privilege internal access with audited
credentials.
- Security headers, CSRF protection and rate limiting on this website.
- Regular dependency updates and monitoring for abuse or unusual activity.
No system can be perfectly secure. If a breach affects your personal data, we will notify you and
the relevant authorities as required by law.
10. International transfers
We aim to store family data in the region closest to you. Where personal data is transferred
outside your country or region, we use lawful transfer mechanisms such as the European Commission's
Standard Contractual Clauses and require appropriate technical and organisational safeguards.
11. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal data we hold about you or your child.
- Export a portable copy of your account data with one tap in the dashboard.
- Correct inaccurate or incomplete data.
- Delete your account and your child's profiles — a one-tap action in the app, with backup
purges completed within 30 days.
- Withdraw consent — for example, pause location sharing or optional notifications, without
losing access to the rest of the service.
- Object or restrict certain processing based on legitimate interests.
- Non-discrimination for exercising your privacy rights.
To make a request, email privacy@kindershield.app or
use the in-app controls. We may need to verify that you are the account holder or the child's parent
or guardian before acting. If you are in the EU/UK you may also lodge a complaint with your local
supervisory authority; in California, you may contact the California Attorney General.
12. Cookies and similar technologies
This website uses only what it needs to work:
- Essential session cookie (
ks_sid) — keeps you signed in to the family
dashboard and protects forms against cross-site request forgery. It is HTTP-only and expires after
24 hours.
- No advertising or third-party tracking cookies. We do not run ad networks, cross-site
trackers or behavioural analytics on this site.
- Local storage — limited to interface preferences needed by the site's own scripts.
You can block or delete cookies in your browser settings. Essential cookies are required for login
and forms to work, so parts of the dashboard may not function without them.
13. Changes to this policy
We may update this policy as the service or the law evolves. When we make material changes, we will
post the new version here with an updated "Last updated" date and notify account holders by email or
in-app before the change takes effect. Continuing to use Kinder Shield after an update means you
accept the revised policy.