Privacy Policy

1. What data we collect

We collect the following personal data in order to provide the educational service:

• Adult account: email address and password (stored with a secure hash).
• Child profile: first name, date of birth, and optional PIN.
• Technical data: minimal access logs (anonymised IP, user agent) and essential session cookies.

We do not collect biometric data, geolocation data, or financial information.

2. Legal basis and parental consent

Processing data of children under 13 (COPPA) or 14–16 depending on jurisdiction (GDPR-K) requires verifiable consent from the parent or legal guardian. By creating a child profile, the adult account holder provides that consent on behalf of the child. The legal basis is explicit consent (Art. 6.1.a GDPR) and compliance with the parental verification obligation imposed by COPPA.

3. Rights (access, rectification, erasure)

As the account holder or the child's legal representative, you may exercise at any time:

• Access: request a copy of the data we hold about you or the child.
• Rectification: correct inaccurate data from the user panel or by email.
• Erasure: delete the account and all associated data irreversibly.
• Portability: receive your data in a machine-readable format (JSON).

To exercise these rights, email us at privacy@videokids.app.

4. Retention and minimisation

We retain data only for as long as necessary to provide the service. Data from a deleted account is removed within 30 days from active systems and within 90 days from backups. We do not sell or share personal data with third parties for commercial purposes.

5. Cookies

We currently only use essential cookies: a secure session cookie (httpOnly, SameSite=Lax) required to maintain authentication. We do not use tracking or advertising cookies. Optional analytics are available but disabled by default; the cookie banner lets you enable them.

6. Contact

For any privacy-related query, email us at privacy@videokids.app.