Privacy Policy

1. Who is responsible for your information

Kidrou (“we,” “us,” or “our”) is responsible for the personal information described in this policy. You can contact us using the details in the Contact us section.

This policy applies to the Kidrou iOS and Android applications and this informational website. The website does not contain account forms, advertising trackers, or cookie-based analytics.

2. Information we handle

We handle information you choose to provide, information created through your use of Kidrou, and limited technical information needed to operate the app.

Kidrou requests microphone and, on iOS, speech recognition access only when you choose to record a voice entry. You may deny or revoke these permissions in your device settings and continue using text and manual routine entry.

Kidrou asks for notification permission only when you turn on notifications or a sleep alert. You can turn alerts off in Settings or revoke the permission in your device settings at any time.

3. How we use information

• Provide, synchronize, and maintain your family’s routine history.
• Authenticate users and protect access to family and child information.
• Let invited caregivers collaborate within a shared family.
• Convert text or voice descriptions into draft routine entries for your review.
• Remember your language, theme, and routine-layout preferences.
• Send the notifications you turn on, such as an alert when another caregiver logs that a sleep started or ended.
• Diagnose crashes and reliability issues, prevent abuse, and enforce service limits.
• Understand feature usage and improve Kidrou through product analytics.
• Comply with legal obligations and respond to valid legal requests.

Where applicable law requires a legal basis, we generally process information to provide the service you request, based on your consent for optional features such as the AI assistant and microphone access, for our legitimate interests in security and service improvement, or to meet legal obligations.

4. Family sharing

When another caregiver joins your family using an invite code, that caregiver can access child profiles and routine information belonging to the shared family. Only share invite codes with people you trust. Family membership and database access rules are used to restrict this information to authorized family members.

5. Service providers

We use service providers to operate specific parts of Kidrou. They process information on our behalf or under their own applicable terms.

We share information with these providers only as needed for the purposes described in this policy, and we only use providers whose terms require them to protect it with at least the same level of protection described in this policy.

We do not sell personal information or use child routine information for third-party advertising.

6. Voice and assistant processing

The AI assistant is optional. Before it sends anything to OpenAI, TypeSafe AI, or Langfuse, Kidrou asks for your permission in the app and explains what is sent and who receives it. If you do not allow it, nothing is sent to these services and you can still record routines yourself. You can withdraw permission at any time in Settings under AI assistant; after that, nothing more is sent.

When you use the assistant, it receives your message, a few recent turns of the conversation, and your child’s recent routine entries, including times, amounts, and notes, so it can understand the request and answer questions about your history. Your child’s profile is not sent.

Voice entry is optional. Where your device supports it, Kidrou uses the speech recognition built into iOS or Android in on-device mode, so your voice is turned into text on the device and only that text is sent to an authenticated server function and provided to OpenAI to produce proposed routine drafts. Where on-device recognition is unavailable for your language or device, a recording is created temporarily on your device, sent to the server function, and provided to OpenAI to produce a transcript and proposed routine drafts. Kidrou asks you to review the drafts and saves only the entries you select.

Before that, the text of your message and a few recent turns of the assistant conversation are provided to TypeSafe AI to decide how the request is handled and whether to show an emoji reaction. The content and results of these assistant requests are also sent to Langfuse so we can investigate errors and measure assistant quality.

The application database does not use the audio recording as product history. Short-lived request-log metadata is used for operational rate limiting. Service providers may process transmitted content according to their agreements and applicable terms, so avoid including information that is not needed to create the routine entry.

7. Retention and deletion

Family profiles, child profiles, routine entries, notes, and account preferences are generally retained while your account or shared family remains active, unless you delete them sooner. Assistant rate-limit records are designed to be pruned after approximately five minutes. Notification records are pruned about a day after they are created. A device stops receiving notifications when you sign out of it, and its push token is deleted with your account. Temporary recordings are removed from the app’s local temporary storage after processing or cancellation where the operating system permits.

You can permanently delete your account from Settings. If you are the only caregiver, the family and associated child data are also deleted. In a shared family, information belonging to the family or other caregivers may remain so their service can continue. Account deletion first requests deletion of the associated PostHog person, events, and recordings; if that request fails, Kidrou does not delete the account and lets you retry.

Some limited information may be retained longer when necessary for security, fraud prevention, legal compliance, dispute resolution, or backup integrity.

8. Security and international processing

Kidrou uses authenticated requests, database row-level access controls, family membership checks, and restricted server-side credentials to protect information. No online service can guarantee absolute security, and you are responsible for protecting access to your email, device, and invite codes.

Our service providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers.

9. Your choices and rights

• Review, add, edit, or delete routine entries in the app.
• Manage child profiles and family participation, subject to shared-family permissions.
• Decline microphone access and use manual or text entry instead.
• Decline or withdraw permission for the AI assistant in Settings and record routines yourself.
• Turn notifications and sleep alerts on or off in Settings or in your device settings.
• Request access, correction, export, restriction, objection, or deletion where your local law provides those rights.
• Delete your account permanently from the app’s Settings screen.
• Contact us to ask a privacy question or exercise a legal right.

We may need to verify your identity before completing a request. Depending on your location, you may also have the right to complain to your local data-protection authority.

10. Children’s privacy

Kidrou is intended for parents, guardians, and caregivers—not for children to use independently. Caregivers decide what child information to enter and with whom to share it. Do not create an account for a child or allow a child to submit information directly.

If you believe a child has provided personal information directly without appropriate authorization, contact us so we can investigate and take appropriate action.

11. Changes to this policy

We may update this policy as Kidrou changes or legal requirements evolve. We will update the effective date and provide additional notice in the app when a change is material and applicable law requires notice.