Privacy policy

Last updated: November 10, 2026

Kids Are OK is a family location app built around one rule: a parent can see where a child is only during a check, and the child sees every check. The app also lets a child and the adults of their own family call each other: a parent decides whether the child has calls at all, and the child decides which of the adults may use them. This policy explains what the app records, who can see it, how long we keep it and how you can delete it.

It is written to be read, not to be survived. If anything here is unclear, write to us and we will explain it in plain words.

Who we are

Kids Are OK is operated by NeriusCognitaren OÜ, registry code 17503018, Sepapaja tn 6, 15551 Tallinn, Estonia ("we"). Write to us at [email protected] about anything on this page, or at [email protected] about anything else.

We are the controller of the personal data described here. That means the responsibility is ours and not a parent's: we decide what the app records, how long we keep it, who in a family can see what, and that a child's log cannot be edited or deleted. A parent sets up the family and gives the consent for their child, but a parent does not instruct us on how to handle the data, and a child can bring a request straight to us. Estonian communications law points the same way: the duty of confidentiality we owe covers not only the customer who signed up but also the people who use the service with that customer's agreement, which here means the child and the other adults of the family, each in their own right.

We collect as little as we can

We only collect what a feature of the app actually needs, and we use it only for what this page says. We do not keep a child's location in order to build a picture of their life, we do not profile anyone, and we do not combine this data with anything bought from a data broker. If we ever want to use the data for something new, we will change this page first and, where the law requires it, ask you.

What we collect

Parents and trusted adults

• Email address, used to sign in with a one-time code. There is no password. Sign-in codes are stored only as a hash.
• If you choose to sign in with Apple or Google instead: an identifier for your Apple or Google account, the email address they give us and, the first time, your name if you let them share it. With Apple the email can be a private address that Apple forwards to you. We do not get your Apple or Google password, contacts or anything else from those accounts. With Apple we also keep, encrypted, a token Apple gives us, and we use it for one thing only: to withdraw the app's access with Apple when you delete your account.
• The name you choose. Your children see it in their log.
• Device details: platform (iOS or Android), app version, when the phone last reported, and push notification tokens. An iPhone also gives us a second token, used only to ring the phone for an incoming call.
• Each installation of the app gets its own identifier in our database, so that we can tie a check to the phone it was opened on and switch off a phone that has been lost or removed from the family.
• Your location, only while you choose to share it with your children, and only the latest point.

Children

• The name, birth year and country a parent enters when adding the child.
• Location points from the child's phone: coordinates, time, accuracy, battery level, whether the phone is charging or moving, and whether the location looks faked.
• Whether tracking works: location permission, battery saving and when the phone last reported. Also two yes or no answers: whether the app has a PIN and whether the phone has a screen lock. We never receive the PIN or the screen lock itself.
• What the child sends on purpose: SOS, answers to "Are you OK?", Check Ins, and the calls the child makes or answers.
• The child's own choice about who may call them: for each adult of the family, whether calls are on with that adult.
• The parent's setting for each child: whether calls in the app are available to that child at all.
• Device details and a push notification token for the child's phone. A child's iPhone also has a second token, used for one thing only: ringing the phone for an incoming call. Apple requires that such a message always show an incoming call screen, so the child sees every call that arrives.

Who decides about calls

Two switches have to agree before a call can happen, and they belong to different people on purpose.

The parent's switch. Each parent has one switch per child, "Calls", and it starts on. Switch it off and that child cannot call anyone in the family and nobody in the family can call them, until a parent switches it back on. It is a gate for the whole feature, not for one person: a parent cannot use it to choose who the child talks to.

The child's switch. For each adult of the family the child has their own switch, and it starts off. Nothing is pre-ticked: a tick we put there ourselves would not be the child's choice. A new adult added to the family also starts switched off. Only the child can switch an adult on, and only the child can switch that adult off again. No parent can switch an adult on in the child's place, and no parent can ask us to do it. We will not do it either.

So a call between a child and an adult happens only when the parent's switch for that child is on and the child has switched that adult on. If either is off, our server refuses the call, whichever of the two is calling, and the adult's app says that calls are not available rather than ringing.

Nothing here is hidden from the child. When an adult switches the parent's switch off or back on, it is written into the child's feed and into the family log with the name of the adult who did it, so the child and the other parent both see who it was and when. The child's own choice works the other way round: it is private, each adult sees only whether calls are on with them, and it is not written into the family log.

This covers calls, and nothing else. SOS, safety zone alerts, "Are you OK?", Check In and every other safety feature keep reaching every adult of the family exactly as before, whatever either switch is set to. A child cannot switch off being looked after, and a parent cannot switch off being reachable in an emergency: SOS still goes out even when calls are off for everyone.

Our legal basis for holding both switches, and for refusing a call that either of them blocks, is our contract with the parent together with our own interest in a product where a parent can govern a feature and a child still chooses who may reach them by voice.

Reporting a problem

If something in the app is wrong, frightening or against our terms, we need to hear it from you, because nobody here is watching a family. Anyone in the family, including a child, can write to [email protected], and should put "report" in the subject line. If a child may be in danger, or the report is about the sexual abuse or exploitation of a child, write to [email protected] instead, or put "child safety" in the subject line. A child can also write to [email protected] about anything on this page. The terms of use at kidsareok.com/terms say what we do with a report, how long we take and how to complain if you disagree with what we decided.

One thing changes when a report arrives, and we would rather you read it here than discover it later. Once we are told about something, we keep what we have about that report so that we can look into it, answer the person who sent it and, where the law requires, hand it to the authorities: the report itself and our correspondence about it, and whatever of the reported material and the accounts involved we still hold at that moment. For a report about the sexual abuse or exploitation of a child this is not our choice. United Kingdom law requires a provider like us to report such content to the National Crime Agency once we become aware of it, and to keep, for one year, the material we hold about it and the data we hold about the user concerned, and to keep the reference number of the report for five years. United States law requires the same kind of report to the National Center for Missing and Exploited Children, and treats the report as a request to preserve what it concerns for one year. Neither law asks us to go looking, and we do not: both start from the moment we are told. We will do that, and we will not tell the person reported when telling them could put a child at risk or obstruct an investigation. Our legal basis for keeping it is that legal obligation, together with our interest in protecting a child. A call is not recorded, so of a conversation itself there is nothing for anyone to keep.

Calls

A child and any adult of the family can call each other in the app, by voice or with video, in both directions, if the child has turned calls on with that adult. The call goes over the internet, so a child with no phone credit can still reach a parent.

The microphone and the camera work only during a call that the person started or answered themselves. There is no auto-answer, and nobody can switch on someone else's microphone or camera from a distance. Video is switched on by each person themselves.

A call happens only if the parent's switch for that child is on and the child has turned calls on with that adult. Our server refuses to start one otherwise, whichever of the two is calling, and the adult's app shows no call button but a line saying that calls are not available with that child.

We never record a call. There is no recording, no copy, no transcript, and no audio or video is stored anywhere. The sound and the picture go directly between the two phones and are encrypted on the way (WebRTC with DTLS-SRTP). When the two phones cannot reach each other directly, the encrypted stream is relayed through Cloudflare's TURN service, which passes it on and cannot listen in. We cannot listen in either.

What we do keep is one line about each finished call, in the family log and in the child's feed: who called whom, whether it was audio or video, how it ended (answered, declined, missed, cancelled or failed), when it was and, if it was answered, how long it lasted. We keep that line like the rest of the log. The app also keeps, while a call is ringing or running, the technical record it needs to connect the two phones: which devices are in the call and the connection details they exchange.

The app asks for the microphone permission when you make or answer your first call, and for the camera permission when you first switch video on. You can refuse, and then that part of a call does not work. You can take the permission back in the phone's settings at any time.

The family log

Every check with its time and reason, every change of family rules and safety zones, every time an adult switches calls off or back on for a child, alerts and who closed them, and one line for every call. The log exists so that the child always knows who looked and why. It can be added to, and it cannot be edited or deleted, by a parent or by us.

Technical logs

Our servers keep technical logs of the requests they receive. A log line holds the IP address the request came from, the time, which part of the service was asked for and how long the answer took. We use these logs to find faults, to see that the service is up and to stop abuse, such as someone asking for thousands of sign-in codes. We do not use them to work out where anyone is: an IP address is not location data of the kind this app is about, and we never show it to another member of a family.

People outside the family

Some of what a family types in can be about someone else. A safety zone can be a friend's home or a grandparent's address, and the reason a parent gives for a check is free text. We do not ask for this and we would rather not have it, so we ask families not to put other people's details into those fields. If you are not in a Kids Are OK family and believe we hold something about you, write to [email protected] and we will find it and delete it.

What we never collect

Messages, contacts, photos, recordings of a call, the list of apps, screen time and the child's phone number. There is no chat in Kids Are OK and no messaging of any kind: the app cannot send a message between people, and it never reads what a child writes anywhere else. We never touch text messages, WhatsApp, iMessage, Snapchat, Instagram, email or any other app's conversations, and there is no setting a parent could find that would let them do it either.

The microphone and the camera are used only during a call that the person started or answered themselves, and nothing from that call is recorded or stored. The app can be locked with a PIN or with the phone's own face or fingerprint unlock, and we never receive either: the PIN is stored only as a hash inside the phone's secure storage, and the face or fingerprint check is done by the phone's operating system, which tells the app yes or no and nothing else.

Why we are allowed to process it

A parent can withdraw consent for a child at any time by removing the child from the family or by deleting the family. Withdrawing stops the recording and deletes the child's location data. It does not undo what has already happened, and it does not empty the family log, which exists for the child.

Who sees what

• Parents see a child's location only inside a check. A check is recorded in the child's log, and the child can replay exactly the points the parent saw.
• Outside a check, parents see facts without location: whether tracking works, battery level, alerts, SOS, answers and Check Ins.
• Alerts, such as leaving a safety zone, contain no coordinates.
• Trusted adults receive SOS and alerts. They never see where a child is.
• Each adult sees whether the child has turned calls on with them, and nothing about what the child decided for anyone else. The parent's switch is the other way round: it is visible to the whole family, because switching it off or on is written into the child's feed and the family log with the name of the adult who did it.
• A call is seen and heard only by the two people in it, while it lasts. Afterwards, the parents, the trusted adults and the child see the same line about it in the family log: who called whom, audio or video, the outcome and the duration.
• Children see the family rules, safety zones, every check and every alert in their log. They see a parent's location only when that parent chooses to share it, and only if the child's phone has a screen lock or the app has a PIN, so a stranger holding the phone cannot see it.
• Nobody at our company watches a family's map. We look at family data only when we have to, for example to fix a fault you have reported to us or to answer a valid legal order.

How long we keep it

We keep a child's data only as long as the feature it belongs to needs it, and we never keep it indefinitely. Here is the whole picture, and there is a plain statement of our retention policy for a child's information further down this page.

The stores take the subscription payments, so we hold no invoices and no card details. For each purchase we keep the identifier the store gives it, which plan it is, until when it is paid and whether it was refunded, for as long as the family exists. We use them only to ask the store whether the subscription is live, and so that one purchase cannot be moved to another family.

When the family subscription ends

Until a parent starts the subscription, the child's phone records nothing, with one exception: when the child presses SOS, the phone records location for the next hour. A parent cannot see those points without a subscription. They are kept for 24 hours, and if a parent starts or renews the subscription within that time, the parent can open a check and see where the child was after the SOS. After a paid period ends, the family has 7 more days with everything working and a reminder on every screen; after a free week that was cancelled before any payment, there are no extra days. After that the child's phone stops recording location, except for the hour after an SOS described above, no parent can open a check, no call can be made in the app, and the family log and the replay are no longer shown. What is already stored keeps its normal deadline: the last location points disappear within the family's chosen window of up to a day, and the copies of what a parent saw within 30 days.

We want to be exact about the rest. Today the family account itself, with the log, the zones and the names, is not deleted automatically when a subscription ends: it stays until a parent deletes the family or their account in the app, which they can do at any time. We have not yet set a period after which we delete a family that nobody pays for and nobody uses, and we would rather say so than publish a number we do not keep. When we set that period, we will change this page and tell families by email before the first deletion.

Deleting your account

Parents and trusted adults can delete their account in the app settings.

You can also ask us to delete it without the app, for example if you no longer have the phone. Write to [email protected] from the email address of your account, or tell us which address it is, and say that you want the account deleted. To make sure the request comes from you, we send a link to that address, and we delete the account once you confirm. The result is the same as deleting it in the app, as described below. We do it as soon as we can and within one month. A subscription bought in the App Store or Google Play is billed by them: cancel it there, because deleting the account does not stop the billing.

• If the last parent deletes their account, the whole family is deleted: the children, their location points, the switches for calls on both sides, the family log, the safety zones and the devices. The children's phones stop recording. Trusted adults keep their own accounts, but they lose access to that family.
• If one adult leaves while the family stays, we remove what identifies them: the name they chose, their email address, their year of birth and country, their sign-in codes, the link to their Apple or Google account and their phones' notification tokens, and any points from a location they were sharing. What stays is a nameless record that someone who is no longer in the family once opened these checks, shown to the child as "A former parent" or "A former trusted adult". This keeps a parent from hiding their checks by deleting the account. Their phones stop working with the app at once.

A parent can also remove a single child from the family in the settings. That stops the recording on the child's phone, deletes the child's location data and deletes the switches for calls on both sides.

All of this is removed from the live service straight away. The daily recovery copies made before the deletion still hold the data until they are deleted themselves, at most 6 days later.

Children, and parents in the United States

A child's phone can be linked only with a one-time code from a parent. Before the code is issued we show the parent exactly what the app will record from the child's phone, and the parent confirms that they are the child's parent or legal guardian and that they agree to it. We keep a record of each consent together with the version of the text that was shown.

For a child under 13 in the United States the Children's Online Privacy Protection Act applies, and a tick box is not enough. We do not issue a linking code for such a child until a verified parental consent has been completed. The parent first confirms that they are an adult with Kids Web Services, a free service run by Epic Games. Kids Web Services emails the parent a link, and the parent confirms either with a credit or debit card, which is charged 5 cents and refunded, or with the last four digits of their Social Security number. We never see the card or the number: Kids Web Services tells us only that the check succeeded, with a reference number, and we keep that reference with the consent. A parent does this check once, and then gives consent for each child in the app. After each such consent we email the parent a note of what they agreed to and how to withdraw it. Here is what the consent covers.

• What we collect from the child: their first name, year of birth and country, as entered by the parent; location points from their phone, with time, accuracy, battery level, whether the phone is charging or moving and whether the location looks faked; whether location recording is working; what the child sends on purpose, which is SOS, answers to "Are you OK?" and Check Ins; the calls the child makes or answers, as described in the next point; the child's own switch for calls, and the parent's switch for that child; and the phone's notification tokens and device details.
• Calls, and the child's voice and image. A child and an adult of the family can call each other in the app. The child's microphone works only during a call the child started or answered themselves, and the camera only when the child switches video on. Their voice and their picture are not collected: the sound and the picture go directly between the two phones, encrypted, and nothing is recorded, stored or transcribed. What we keep is one line about the finished call in the family log: who called whom, audio or video, the outcome, when it was and how long it lasted. There is no auto-answer, and no parent and nobody else can switch on the child's microphone or camera from a distance.
• What we never collect from the child: their messages, in any app, because the app has no chat of its own and never reads another app's conversations; contacts; photos; recordings of a call; the list of apps on the phone; screen time; and the child's phone number.
• How we use it: to answer a parent's check, to run safety zones, SOS and Check In, to connect a call the child makes or answers, to apply the child's switches, to show the child their own log and replay, and to tell a parent when the child's phone has stopped reporting. Nothing else. No advertising, no profiling, no selling, no sharing with anyone except the service providers listed on this page, and nothing is used to train machine learning models.
• Who we disclose it to: the child's own parents and, for SOS and alerts without location, the trusted adults the parents added. The live sound and picture of a call go only to the person on the other end of that call. Outside the family, only the service providers listed below, and only so that they can do the job described there.
• What a parent can do: refuse consent, in which case the child's phone is never linked; switch calls off for the child entirely, and back on, at any time; ask us for a copy of what we hold about the child; delete the child from the family, or delete the whole family, at any time in the app, which stops the recording and deletes the child's location data; and write to us with any question. What a parent cannot do: choose which adults the child talks to, switch a particular adult on in the child's place, or ask us to do it. Switching calls off or on is shown to the child, with the name of the adult who did it. What a parent does decide is who is in the family, and a child can only ever call an adult the parents brought in. A parent who does not want that at all can remove that adult, or remove the child from the family.
• We do not require more than we need. We never make a child give us more information than the app actually needs in order to take part.

If you believe we hold information about a child under 13 without a parent's consent, write to [email protected] and we will delete it.

Our retention policy for a child's information

We collect a child's personal information for one purpose only: to run the safety features of the app for that child's family, which are the checks a parent opens, the child's own log and replay, safety zones, SOS, "Are you OK?", Check In and calls inside the family. We keep each piece of it only for as long as that feature needs it, and we never keep a child's information indefinitely or "just in case".

The deadlines are the ones in the table under "How long we keep it", and the short version is this: location points for the family's window of 1, 6 or 24 hours, and the points of an SOS hour for 24 hours; the copy of what a parent saw inside a check for 30 days, because the child's right to replay it is the point of the app; phone status reports for 7 days; nothing at all of the sound or picture of a call. The daily recovery copies of the database hold the same data for 6 more days at most, with the location points encrypted, and are then deleted. The child's name, the family log and the family's rules last as long as the family account, because the log is the child's record of what the adults did. When a parent removes a child from the family, or deletes the family, we delete the child's information as described under "Deleting your account". We do not keep a child's information for any purpose other than the ones named on this page, and we do not use it to build a profile, to advertise or to train models.

We protect it with the measures described under "Security": encryption of the sensitive fields in our database, encrypted connections, access limited to the few people who need it, and a design that holds as little as possible for as short a time as possible. We keep this policy under review and we will update this page if any of these periods changes.

If you are a child using this app

This app is set up by your parent, and some things only your parent can change. You cannot leave the family yourself, and you cannot delete the app's record of where you have been. That is on purpose: the point of the app is that your parents can check on you and that you can always see when they did. One thing, though, is yours alone: which adults may call you. Your parents can switch calls off for you altogether, and you will see it when they do, but they cannot choose who you talk to.

What you can always do:

• See every check in your log, with the reason your parent gave, and replay exactly the places they were shown.
• See the family rules, the safety zones and every alert about you.
• See when an adult joins or leaves the family.
• Press SOS.
• Decide, for each adult in your family, whether they can call you. Every switch starts off until you switch it on, and nobody else can switch an adult on for you.
• Call the adults you have switched on, by voice or with video, without any credit on your phone, as long as your parents have calls switched on for you.
• See it in your feed when a parent switches calls off for you, or back on, with the name of the one who did it.

How calls work, honestly. There are two switches, and they belong to different people.

Yours: next to each adult in your family there is a switch, "Calls". It starts off. You switch on the ones you want, and only you can do that. Your parent cannot switch an adult on in your place, cannot pick for you, and cannot ask us to do it, and we will not do it either. If things are hard with one adult, you can keep calls on only with the ones you want, and nobody is told what you decided about anyone else: each adult sees only whether it is on with them. Your choice is not written into the family log. You can change it whenever you like in the app's settings.

Theirs: each parent has one switch for you, and it starts on. A parent can switch it off, and then calls in the app do not work for you at all, with anybody, until a parent switches it back on. They cannot use it to pick which adults you talk to: it is all or nothing. And it is not quiet. When a parent switches it off or back on, your feed says so with their name, and the family log says so too, so you and your other parent both see who did it. If that happens and it feels unfair, say so, and you can also write to us.

One thing neither switch touches: SOS, alerts, "Are you OK?" and Check In still reach every adult in your family. Even with calls switched off for you completely, SOS still goes out. Switching off calls does not switch off the people who are supposed to come if something happens.

If something in the app frightens or upsets you, you can tell any adult you trust, and you can also write to us at [email protected] with the word "report" in the subject line. We will read it and answer you.

About calls. Your microphone works only in a call you started yourself or answered yourself, and your camera only when you switch video on. Nobody can answer for you and nobody can switch on your microphone or your camera from their phone. No call is recorded, by us or by your parents. After a call, your feed and your family's log show one line about it: who called whom, whether it was audio or video, how it ended and how long it lasted.

If something about the app worries you, tell your parent. You can also write to us at [email protected]. We will read it and answer you. If you ask us to delete your data, we usually have to talk to your parent, because they set up the family, but we will tell you what we are doing and why.

Service providers

These are all of them. The list is short because we use few, and we keep it dated so you can see when it last changed.

List last updated: November 11, 2026. If we add a provider, we update this table and the date before the provider starts, and we tell you if it means a change in what we do. We have no advertising partners, no analytics providers, no data brokers and no crash reporting service, so there is nothing else to list.

We do not sell personal data and we never will. We do not share it for advertising, we show no advertising in the app or on this site, we use no advertising or analytics trackers, and we do not profile anyone. We do not use any family's data, and in particular no child's data, to target advertising, to build a profile or to train machine learning models. Under the laws of several United States states, precise location and the data of a person under 18 count as sensitive, and we use them only for the features described on this page.

Sending data outside Europe

Our servers and our database are in Amsterdam, in the Netherlands, so a child's location never leaves the European Union to be stored.

Some of the companies that help us run the app are in the United States. When we ask Apple or Google to deliver a notification, the notification token and the notification text go to them. When the app draws a map, your phone asks Google for the map images. When you buy a subscription, the store handles the payment. When we send you a sign-in code, our email provider handles the message. When you sign in with Apple or Google, they confirm your account to us. When a parent of a child under 13 in the United States confirms that they are an adult, Kids Web Services receives the email address they gave for the check. When two phones in a call cannot reach each other directly, Cloudflare relays the encrypted call, and the nearest relay can be outside the European Union; the relay cannot decrypt the call and keeps nothing.

For these transfers we rely on the European Commission's adequacy decision for the EU and United States Data Privacy Framework where the company is certified under it, and otherwise on the European Commission's standard contractual clauses, with the United Kingdom addendum for data coming from the United Kingdom. Ask us at [email protected] which mechanism applies to which company and we will tell you.

Security

Coordinates and safety zone shapes are encrypted in our database with AES-256-GCM. This is not end-to-end encryption and we do not claim it is: the key is on our server, because the server has to answer a check and run the safety zones. What it means is that a stolen copy of our database, without our server's keys, gives up no routes and no addresses. Sign-in and invite codes are stored only as a hash. Tokens and the app PIN are kept in the phone's Keychain or Keystore and never leave the phone. All traffic uses HTTPS. A call is encrypted between the two phones with WebRTC and DTLS-SRTP, so neither we nor the relay that may carry it can hear or see it, and no part of it is written down anywhere. The part of our service that the app talks to has no right to edit or delete entries in a family log, so a check cannot be erased even by a mistake in our own code.

If something goes wrong and personal data is exposed, we will tell the Estonian Data Protection Inspectorate within 72 hours of finding out, as the law requires, and we will tell the affected families directly, by email and in the app, where the risk to them is high. Because the calls in the app make us a provider of a communications service, a serious security incident also has to be reported to the Estonian Information System Authority, with a first warning within 24 hours of our becoming aware of it, and we will do that as well. We will say what happened, what data was involved and what we are doing about it, even when that is embarrassing for us.

Your rights

Under the GDPR and the UK GDPR you can ask us to:

• tell you what we hold about you and give you a copy;
• correct anything wrong;
• delete your data, which for an account you can also do yourself in the app;
• give you your data in a portable form, or send it to another service where that is technically possible;
• stop or limit what we do with it, or object to it;
• withdraw a consent you gave, at any time. Withdrawing a consent does not make what we did before it unlawful.

A parent can use these rights on behalf of their child. A child can write to us too, and we will help them and tell their parent, as described under "If you are a child using this app".

Write to [email protected]. We answer within one month, and if a request is complicated we may take up to two months more and will tell you why. It is free. If we cannot tell who is asking we may ask you to sign in or to confirm from the email address on the account, and we will not ask for more than we need.

We do not make any decision about you by automated means that has a legal effect on you. Safety zone alerts and the Check In timer are simple rules a parent sets up, and they are visible to the child.

If you think we have got something wrong, please tell us first. You can also complain to a supervisory authority: ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) in Tallinn, Estonia, and you can equally complain to the authority in the country where you live, which in the United Kingdom is the Information Commissioner's Office.

Notice for people in the United States

Categories we collect

Identifiers such as an email address and a device identifier; a name and a year of birth; precise geolocation from a child's phone during the periods described on this page; the content a family creates in the app, such as zone names and the reason given for a check; audio and visual information in the form of the live sound and picture of a call, which passes between the two phones and is never recorded or stored, and the line about each finished call in the family log; internet activity in the form of technical server logs; and commercial information in the form of whether a subscription is live. Precise geolocation and the data of a known child count as sensitive personal information.

Why we collect it

Only to run the features described on this page, to keep the service secure and to handle subscriptions. We do not use sensitive personal information to infer anything about you, and we do not use it for any purpose beyond those the law permits without a separate choice.

We do not sell and we do not share

We have never sold personal information and we have never shared it for cross-context behavioural advertising, and we have no plans to. Because we do not sell or share, the rule that requires opt-in consent before selling or sharing the personal information of a consumer under 16, and a parent's consent for a consumer under 13, is not engaged for us. We do not run targeted advertising of any kind, so there is nothing to opt out of. We do not respond differently to a Do Not Track signal, because we do not track anyone across sites.

Who we disclose it to

Only the service providers named above, and only so that they can do the job described there. They work under contract and may not use the data for their own purposes. We may also disclose data where the law requires it, as described under "When the law makes us hand over data".

Your rights in the United States

Depending on where you live in the United States, you can ask us to tell you what we collect and why, to give you a copy, to correct it, to delete it, and to confirm whether we sell or share it. You can also ask us to limit how we use sensitive personal information, although as explained above we already use it only for the features themselves. Write to [email protected]. We will not charge you, we will not give you a worse service for asking, and we will answer within 45 days, or tell you why we need up to 45 days more.

Someone acting for you

You can use an authorised agent. We will ask for proof that you gave them permission, and we may ask you to confirm it yourself.

If we say no

If we refuse a request, we will say why, and you can ask us to look at it again by replying to the same email. We will answer that appeal within 45 days. If you are still unhappy you can complain to the attorney general of your state.

Parents and children

A parent can use all of these rights on behalf of a child, and for a child under 13 in the United States we deal only with the parent.

When the law makes us hand over data

We may have to give data to a court, a regulator or the police if a valid legal order requires it, or to protect someone's life. When that happens:

• We check that the request is valid and that it comes through a proper channel, and we give only what the request actually covers.
• We tell the family, unless the law forbids us from telling them.
• We point out, where it matters, how little we hold: a child's location points are gone from the service within a day at the most and from the recovery copies within a week, copies of what a parent was shown within 30 days, and no call is recorded, so of a conversation we hold nothing but the line that it happened.

We have no interest in holding data so that someone can ask us for it later.

If the company is sold or closes

If our business, or the part of it that runs this app, is sold or merged, the data described on this page may pass to the buyer. The buyer would be bound by this policy, and we would tell families by email before it happened, so that anyone who did not want it could delete their family first. If we close the service down, we will tell subscribers in advance, stop charging, send a copy of your data to anyone who asks for it and then delete the data.

The website

kidsareok.com sets no cookies and runs no scripts. There is no analytics, no advertising pixel, no embedded tracker, and no font or image loaded from another company's server, so there is nothing here to ask your consent for and no cookie banner to dismiss. Our web server keeps short technical logs of requests, as described under "Technical logs".

Changes to this page

If we change what the app records, who sees it or how long we keep it, we will change this page and the date at the top, and we will tell you by email and in the app before the change takes effect. If a change means we would use a child's data in a new way, we will ask the parent again before we do it.

When a parent gives consent we record which version of this text they were shown, so we can always tell you what an earlier version said. Ask us at [email protected] for any version.

Terms of use

Our terms of use are at kidsareok.com/terms. They explain what you agree to as a parent, what the app can and cannot do, and how the subscription works.

Contact

NeriusCognitaren OÜ, registry code 17503018, Sepapaja tn 6, 15551 Tallinn, Estonia.

• Data protection and anything on this page: [email protected]
• Help with the app: [email protected]
• Legal notices: [email protected]
• Anything else: [email protected]