Privacy Policy
Last updated: September 17, 2026
KidBoard helps parents manage their children's duties, rewards and household rules. Because KidBoard is used by families with children, we are especially careful with children's information. This policy explains what we collect, why, who helps us process it, how long we keep it, and the choices you have.
Who we are
KidBoard is operated by Edunova International Services Co., Ltd. ("we", "us"), which is the data controller responsible for your personal information under this policy.
Edunova International Services Co., Ltd.
1055/587 State Tower, 29th Floor, Silom, Bangrak, Bangkok 10500, Thailand
[email protected]
Who controls the account
KidBoard accounts are created and controlled by a parent or guardian. Children do not create their own accounts: a parent creates a child profile and sets a username and password the child uses to sign in to "Kid Mode". The parent is responsible for the child profiles they create and can edit or delete them at any time. A parent can invite a second parent (a "co-parent") to share the same family.
Information we collect
From parents
- Account details: name, email address and password (stored hashed, never in readable form). If you sign in with Google or Apple, we receive your name, email address and that provider's account identifier. Apple may give us a private relay address instead of your real one. We never receive your Google or Apple password.
- Preferences: currency and language settings.
- Co-parent invitations: the email address of anyone you invite to join your family.
- Subscription details: which plan you are on, its status and renewal date. Payments are processed by Apple (in the iPhone and iPad app) or Stripe (on our website). We never receive or store your card number.
- Device information: a device identifier and platform (iOS or Android) when you sign in on the mobile app, used to keep your account secure and to verify referrals.
- Push notification token: if you allow notifications, a token that lets us send you alerts such as approval requests.
- Messages you send us: for example, support emails.
About children
This information is entered by the parent, or by the child while signed in to Kid Mode under the parent's account:
- Child profile: the child's name or nickname, a username, a password (stored hashed), an avatar or optional photo, and reminder times.
- Activity: duties, bonus tasks, rewards, faults, goals, daily records, and points and pocket-money balances.
- Photos of completed chores: when submitting a task for approval, a child can attach a photo taken with the device's camera or chosen from its photo library. These photos are shown to the parents in that family so they can approve the task. The camera and photo library are only accessed when the child chooses to add a photo, and only after permission is granted on the device.
- Push notification token: if notifications are allowed on the child's device, used to send duty and goal reminders.
Collected automatically
- Crash reports: if the app or our servers hit an error, a report is sent containing technical details such as the app version, device model, operating system and what went wrong. We have configured this not to attach personal identifiers such as your name, email address or account details.
- Security logs: sign-in attempts and IP addresses, used to detect and prevent abuse.
- Website analytics (only with your permission): on kidboard.app, and only if you accept analytics cookies, we use Google Analytics to understand which pages are visited and how the site is used, including your browser, device type and approximate location. If you decline, the analytics script is not loaded at all. The mobile app does not use Google Analytics.
How we use information
- To provide and operate KidBoard's features for your family.
- To authenticate you and keep accounts secure.
- To send notifications you have allowed, such as approval requests and reminders, and essential account emails such as password resets.
- To process subscriptions and confirm which plan you are on.
- To generate the reports and progress summaries you request, including PDF exports.
- To operate our referral program — device identifiers confirm that referred sign-ups are distinct people and prevent abuse.
- To diagnose crashes and fix problems.
- With your permission, to understand how our website is used so we can improve it.
Under Thailand's Personal Data Protection Act (PDPA), and the EU or UK GDPR where it applies to you, we rely on: performing our contract with you (running the service); our legitimate interests (security, abuse prevention and fixing crashes); your consent (website analytics, notifications, and camera or photo access); and legal obligations (for example, keeping payment records).
What we do not do
- We do not sell your or your children's personal information.
- We do not show advertising in KidBoard, and we do not use your or your children's data for advertising or to build advertising profiles.
- We do not use device identifiers for advertising or to track you across other companies' apps and websites.
- Children cannot make purchases. Subscriptions can only be bought from the parent's screens, and Kid Mode has no way to reach them.
- Children cannot share personal information publicly in KidBoard.
Children's privacy (COPPA, PDPA, GDPR and similar laws)
KidBoard is designed to be operated by parents. Where laws such as the U.S. Children's Online Privacy Protection Act (COPPA), Thailand's PDPA, or the children's provisions of the EU or UK GDPR apply, the parent provides and controls the information about their child, and can review, correct or delete it at any time from within the app or web portal. We collect only what is needed for the family-management features described above. If you believe we hold information about a child without a parent's involvement, email [email protected] and we will delete it.
Who we share information with
We share information only with the service providers below, and only what each needs to do its job for us. Each is required to use the information solely to provide its service to us and to protect it with safeguards at least equal to those described in this policy.
- Hosting provider — stores KidBoard's data and runs our servers.
- Apple — Sign in with Apple, App Store subscription payments, and delivery of push notifications to iPhones and iPads.
- Google — Sign in with Google; Firebase Cloud Messaging, which delivers push notifications to Android devices; and, only with your consent, Google Analytics on our website.
- Expo — relays push notifications to Apple and Google, and delivers app updates.
- RevenueCat — manages in-app subscriptions. It receives an anonymous KidBoard account number and your App Store purchase history, not your name or email address.
- Stripe — processes subscription payments made on our website.
- Mailjet — sends account emails such as password resets.
- Sentry — receives crash reports, configured without personal identifiers.
We may also disclose information if required by law, or where necessary to protect the rights and safety of our users.
Some of these providers process information outside Thailand and outside your own country, including in the United States. Where the PDPA, GDPR or similar laws require it, such transfers are covered by appropriate safeguards, such as standard contractual clauses.
How long we keep information
We keep your family's data for as long as your account is active. You can delete a child profile at any time, and you can permanently delete your whole account yourself from Settings in the app or web portal. Deletion takes effect immediately and removes your family's data, including uploaded photos.
A small amount is kept for longer: deleted data may remain in encrypted backups for up to 30 days; security logs are kept for up to 90 days; and payment records are kept by Stripe and Apple for as long as financial and tax law requires. See how to delete your account for exactly what is removed and what is retained.
If you subscribed in the iPhone or iPad app, deleting your KidBoard account does not cancel that subscription, because it is billed by Apple. Cancel it in your Apple ID's subscription settings first.
Security
Data is transmitted over encrypted (HTTPS) connections and passwords are stored using industry-standard hashing. No system is perfectly secure, but we work to protect your family's information and will notify you if a breach affects it where the law requires.
Your choices and rights
- Access and correct: view and edit your profile and your children's profiles in the app or web portal, or email us for a copy of the information we hold.
- Delete: delete child profiles, or your entire account, from Settings at any time.
- Notifications, camera and photos: turn these off at any time in your device's settings.
- Website analytics: change your choice at any time from Cookie settings at the bottom of our homepage, or right here. Withdrawing consent stops analytics immediately and removes its cookies.
- Emails: opt out of non-essential emails.
- Complain: you can contact Thailand's Personal Data Protection Committee, or, if you are in the EU or UK, your local data protection authority.
To exercise any of these rights, email [email protected]. We respond within 30 days.
Changes to this policy
We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, notify you in the app or by email.
Contact us
Questions about this policy or your data? Email [email protected].