Privacy

Short version: KiddoCue is for families who already know each other. Only the families you connect with see your kids, and you can delete everything at any time.

What we keep

• Your account: first name, username, and a scrambled (hashed) password. We can’t read your password.
• Your family: family name, kids’ first names, their avatars or photos, and birthdays if you add them.
• If you add them (all optional): your email and phone number, up to two emergency contacts, and your kids’ allergies and medical notes.
• What you post: free times, busy times, play date requests and plans, invites and RSVPs, messages, and play date photos.
• Your settings: time zone (for reminders), quiet hours, and which alerts you want.
• Notifications: if you turn them on, your phone’s push address so we can send them.

We don’t read your phone’s contacts, and we don’t track your location.

Who can see what

• Your kids, their photos and birthdays: your family, and only the families you’ve connected with.
• Free times: connected families, or just the ones you pick.
• Play date photos: only the parents of the two families on that play date. Only the family that added a photo can delete it.
• Invites: the host and the families invited. Guests don’t see the guest list.
• Party links: if a host shares a party link, anyone with it sees the party’s title, date and time, the host family’s name and the birthday kid’s first name and avatar. Not the address. That shows once you RSVP with a KiddoCue account. If you RSVP without an account, the host sees the name you typed and your answer.
• Emailed invites: if a host emails a party invite to a list of addresses, we use them only to send that email. We don’t keep the addresses, just a scrambled fingerprint so the same person isn’t emailed twice.
• Classes you’re waiting to join: families in the class see your family name, parents’ first names and the kids you picked, so they can let you in. You see nothing of the class until then.
• Messages: the families in that chat.
• Classes and groups: members see the kids you put in the group (first name and avatar) and parents’ first names. Your phone number and kids’ birthdays are shared with a group only if you turn that on for that group. Allergies, photos and emergency contacts are never shared with a group.
• Your email: nobody. It’s only used to send you a password reset link and, unless you turn it off, a link to each new play date.
• Your phone number: only the other family on a play date with you, and the host or families coming to a party with you, as Call and Text buttons. You can turn this off in Settings.
• Allergies and medical notes: only the family who has your kid, meaning the play date host or party host, and a family deciding on your play date request. Never shown to all your connected families, and never included in notifications, the calendar feed, or chats.
• Emergency contacts: only the family who has your kid, from 3 hours before a play date or party until 3 hours after.
• Pickup help: when you ask “can anyone grab my kid?”, the families you ask see who, where and when. The family who takes it also gets your phone number, those kids’ allergies and your emergency contacts.
• Carpools: families in a carpool see each other’s riding kids, the schedule and phone numbers.
• Kid mode: your kid’s asks go only to your own family. The other family isn’t told unless you invite them.
• Your calendar link: anyone who has it can read your play dates, so keep it private. You can reset it in Settings.

Weather

If you turn on weather for park posts, your phone asks for your rough location. It stays on your phone. Only a rounded version (about 1 km) is sent to Open-Meteo to get the forecast. KiddoCue’s server never sees it.

What we don’t do

• We don’t sell or share your data.
• No tracking or analytics scripts.
• Families you aren’t connected with can’t find or see you.

Blocking and reports

You can block any family. They aren’t told. If you report a family, message or photo, the report goes to the KiddoCue team with who sent it, so we can follow up. The other family doesn’t see it.

What the KiddoCue team sees

The person running KiddoCue has an admin page with counts (how many families, play dates and so on), family names and usernames, when each family last used the app, and reports sent with the 🚩 button. It doesn’t show messages, photos, emails, phone numbers or allergies, except a message or photo someone reported.

Backups

We keep a daily copy of the app’s data for 14 days, on the same private server, so we can recover from a mistake. A family you delete disappears from those copies within 14 days.

Deleting your data

You can clear any contact or medical info at any time in the app. To delete everything, go to Family → Delete account. You can delete just your login (if another parent stays), or your whole family: kids, photos, posts, invites, and messages. Play dates you had with another family stay in their history, but your photos are removed from them. Deleting can’t be undone.

To get a copy of your data, go to Family → Settings → Download our data.

Getting back in

If you’ve added an email, you can get a reset link by email. You can also create a recovery code in Settings and keep it somewhere safe, or get a one-hour reset code from the other parent in your family.

Questions

See Help for how everything works, or email us.