Privacy Policy

This policy covers personal data processed through KidMemoir and content parents add on behalf of their children.

KidMemoir follows applicable data protection principles, including lawfulness, transparency, purpose limitation and data minimization, under the GDPR and relevant local requirements.

We may process account, profile, child profile, memory and technical usage information to provide the service.

• Name, email address and account preferences
• Basic child profile details supplied by a parent
• Memories, dates, notes, photos, videos and audio recordings
• Security, session, device and error records
• Plan and feature usage information

Data is used to operate accounts, preserve memories securely, apply preferences, maintain security and provide requested support.

We do not use data to create unrelated advertising profiles without an appropriate legal basis or user choice.

We recognize the sensitivity of children's information. It should only be added by a parent or authorized user with the child's best interests in mind.

• Child profiles are private by default
• Access is restricted through account sessions and row-level security
• Parents should avoid unnecessary data and assess sharing carefully
• A child's views should be considered when appropriate for their age and maturity

Data is retained while an account is active and as needed to provide the service. Legal obligations, security records or disputes may require longer retention.

After a deletion request, data is removed from active systems; secure backup deletion may take additional time through normal retention cycles.

We use technical and organizational measures including access controls, session security, encrypted transfer, private storage and database row-level security.

No digital system can guarantee absolute security. Contact us promptly if you identify suspicious activity.

Depending on applicable law, you may have rights to access, correct, delete, restrict, object to processing and receive a portable copy of your data.

• Request information about processed data
• Correct inaccurate or incomplete information
• Request deletion or restriction where applicable
• Object depending on the legal basis for processing
• Complain to a competent data protection authority

Infrastructure providers may be used for hosting, authentication, storage and email. They receive data only as needed to provide those services.

Where international transfers occur, applicable safeguards and contractual protections are assessed.

For privacy requests, contact hello@kidmemoir.com with enough information for us to verify your identity and understand the request.

Requests are reviewed within applicable legal timeframes and security verification requirements.