Conçu pour la vie privée des enfants
Cette page est affichée en anglais jusqu'à la vérification de sa traduction.
KudosNest is a family app for parents: chores and reward points for children, and homework pages that a parent scans so that AI can check them for the parent. This policy explains what we collect, why, who we share it with, how long we keep it, and the choices parents have. It includes our notice to parents under the U.S. Children's Online Privacy Protection Act (COPPA).
Who we are
Phan Thanh Tuyền
11B, Lane 192 Yen Hoa Street, Hanoi, Vietnam
Phone: +84 902 051 688
Email: contact@kudosnest.com
Contact us at this address with any question about this policy or about your child's information.
The short version
- The account belongs to a parent. Children never create accounts and never give us an email address.
- We collect a child's information only after a parent has given consent, confirmed with a code we email to the parent. A parent can take it back at any time in the app.
- Homework photos are taken by the parent and deleted from our servers within 24 hours. The parent's own phone keeps a copy so the parent can check the results later; the parent can delete it at any time.
- Chore photos from a child's device are off until a parent turns them on, and are deleted within 24 hours.
- An example photo a parent adds to show a child what a finished chore looks like stays on the parent's phone and the children's devices. We only pass it along and delete our copy within 24 hours, and never send it to AI.
- There are no ads, no analytics or tracking tools, and we never sell or rent anyone's information.
- We do not use children's information to train AI models.
- A parent can delete a child's data, or the whole family account, at any time in the app.
Information we collect from parents
- Account: your email address, a display name, your password (stored only as a secure hash), your language, your time zone and your family's country (taken from your phone's region when you sign up; you can change it), which decides the local rules we follow. If you sign in with Apple or Google instead, we receive an account identifier from them and, if you share it, your email address (Apple may give a private relay address) and name; we never see your Apple or Google password.
- Email: we use your email address to confirm it is yours, to send password reset links you ask for, and, only if you turn it on, a weekly report. We don't send marketing email from the app, and our emails have no tracking pixels or tracked links. Each link works once and expires (60 minutes for a password reset, 7 days for confirming your email); we keep only a scrambled form of it, deleted a week after it expires.
- Consent records: what you agreed to, when, how it was confirmed, and which version of this policy.
- Consent codes: to confirm that a parent gives consent, we email a one-time code to your account email address and, about a day later, one email confirming what you agreed to. We keep only a scrambled form of the code; a code that was never used is deleted after 7 days.
- Subscriptions: if you subscribe, the app store handles payment. We receive the status of your subscription and keep a history of its purchases, renewals and cancellations, never your card details.
- Payments on our website (Vietnam): parents in Vietnam can also buy the Family plan on this website by bank transfer through payOS. You sign in with a one-time link we email you (it works once, for 15 minutes). We keep each payment's order number, plan, amount, dates and status, never your bank details, and we email you 7 days and 1 day before the period you bought ends. While you are signed in, the website keeps one cookie that is needed for the payment and expires within an hour.
- Invitations: your family's invite code, which family used whose code, and the extra AI credit it earned. We never ask for or keep the email address, phone number or contacts of anyone you invite.
The waitlist
Before launch, parents can join our waitlist on this website. We keep the email address, the number of kids, the language of the page and which version of the page it was sent from, and use them only to email you once when KudosNest launches and to learn which description of the app works better. The website uses no cookies or tracking for this: page views are counted per day without identifying anyone. Email us to be removed. The waitlist is deleted 12 months after launch at the latest.
Information we collect about children
KudosNest is for children aged 6 to 15. We treat every child the same way, including those aged 13 to 15 whom COPPA does not cover: a parent creates each child's profile and gives consent, and the protections in this policy apply to all of them. With the parent's consent, we collect and keep:
- Profile: a nickname, the child's age (stored as a birth year), an avatar picked from a list, the child's language, the colour and style the child picks for child mode from a list, and how child mode celebrates finished chores (set by a parent). The child's device also remembers which badges and celebrations it has already shown; this is removed when the device signs out or is unpaired. We ask parents not to use a child's full name.
- Chores and rewards: the chores a parent assigns, when the child marks them done, the parent's decision, reward points, streaks, reward requests, the days a parent pauses chores, and a weekly family goal a parent sets (its title, target and shared reward, and how many chores each child added to it).
- Homework: photos of homework pages that the parent takes in parent mode, and the results: each question, the child's written answer, the correct answer and a short explanation for the parent.
- Chore photos (only if a parent turns them on): when a parent asks for photo proof of a chore and allows photos from the child's device, the child takes a photo of the finished chore. The app first checks on the device that no face is in the photo and does not send a photo with a face. Photos are deleted within 24 hours. A parent can also add a photo of a finished chore for Roo's check, taken on the parent's device; the child does not see it.
- Example photos for the child (KudosNest Family): a parent can add one photo of what a finished chore looks like, which the child can open in child mode. The parent takes or picks it on the parent's own phone; the app checks on that phone that no person is in it (a photo with a person is not sent), makes it smaller and removes its hidden details, such as where and when it was taken. The photo is kept on that phone and on the children's devices, inside the app (not in the photo gallery). Our servers only pass it to the children's devices: our copy is deleted as soon as every device has it, and within 24 hours at the latest. We keep only a version number and which devices have it. It is never sent to Anthropic or any other AI.
- Roo's chore check (only if a parent turns it on): Roo's suggestion whether the chore looks done, and one short encouraging sentence for the child.
- The child's own agreement (some countries): where the law asks children to agree as well as their parent (in Vietnam, children from 7 to under 16), child mode shows a short explanation in the child's language and two buttons. We keep when the child tapped "I agree", which version of this policy it was, and when the child or a parent took it back. Until the child agrees, the child's device sends us nothing: no finished chores, chore photos, hints, reward requests, screen-time use or reactions. The child can still see their chores and points.
- Hints: how many hints a child asked for on a question. The text of the hints is kept only as long as the page photo (at most 24 hours), so that each hint can build on the last.
- The child's device: when a parent pairs a child's phone or tablet, we store a device identifier we create, the platform (iOS or Android) and a 4-digit PIN chosen on that device (stored only as a secure hash).
- Notifications: if notifications are allowed on a phone, a push token that Apple or Google gives that phone, so we can tell it, for example, that a new chore is waiting. Tokens are removed when you sign out, unpair the device or delete the data.
Child mode has no free-text fields, chat or search: children use buttons only, so they cannot type personal information into the app. We do not collect a child's email address, phone number, school, address, contacts, precise location, voice or face data. The face check on chore photos runs only on the device: nothing about a face is stored or sent to us.
How we use information
- To run the service for your family: show chores and points, sync parent and child devices, check homework pages and give your child hints.
- To keep the service secure, prevent abuse and enforce plan limits.
- To measure the cost of AI features per family, using counts only (no page content).
We do not use any information for advertising, for profiling, or to train AI models. If we ever wanted to use a child's information for anything not needed to run the service, we would ask for a parent's separate consent first.
How homework checking and hints work
When a parent scans a page, the photo is sent from our servers to our AI provider, Anthropic, which reads the page and returns the results. When a child asks for a hint, the page photo, the question and the child's age and language are sent the same way. We never send a child's name. Hints are leading questions only: the app checks every hint and replaces any hint that contains an answer. Under its commercial terms, Anthropic does not use this content to train its models.
On the Family plan, a parent can ask for 5 practice problems like the ones a child missed. The missed questions, their correct answers, the skill and the child's age and language are sent to Anthropic, which writes new problems. We never send a child's name or the page photo for this. A parent can send the problems to the child's device, which shows the questions only.
How Roo's chore check works
If a parent turns on Roo's chore check (a separate choice from allowing chore photos), the child's chore photo, the parent's photo for Roo's check if there is one (not the example photo shown to the child), the chore's title and steps and the child's age and language are sent from our servers to Anthropic, which suggests whether the chore looks done and writes one encouraging sentence for the child. We never send a child's name. Roo only suggests: the parent approves the chore, unless the parent has chosen to approve automatically when Roo is sure.
A parent can also ask for suggested steps for a chore. The chore's title, and the age and language the parent picks, are sent to Anthropic, which suggests a few short steps. We remove children's names from the title first. The suggestions go to the parent only; nothing reaches the child until the parent edits and saves the steps.
Who we share information with
We share information only with service providers that help us run KudosNest, only as needed for that, and under contracts that require them to protect it:
- Anthropic (AI provider): homework page photos and questions, for grading and hints; missed questions, for practice problems; chore photos, chore titles and steps, for Roo's chore check when a parent turns it on; chore titles and a child's age, for step suggestions a parent asks for.
- CloudFly (cloudfly.vn) (hosting): runs our servers and database.
- CloudFly (cloudfly.vn) (storage): holds homework and chore photos until they are deleted, at most 24 hours; parents' photos for Roo's check until removed; and example photos for children only while passing them to the children's devices, at most 24 hours.
- Apple and Google: deliver the app and handle in-app purchases.
- Google (Firebase Cloud Messaging) and Apple (Push Notification service): deliver notifications. They receive the push token and the text of the notification. Notifications to parents leave out the child's name unless a parent turns names on. Chore reminders on a child's own device never name the chore; while an on-time bonus can still be earned, they add the time it ends and how many points it is worth. Notifications carry no other information about a child. We use Firebase for notifications only, with its analytics turned off.
- Zoho Mail (email delivery): receives your email address and the emails we send you: links to confirm your email or reset your password, consent codes and the consent confirmation (these name what you agreed to, never a child) and, only if you turn on the weekly report email, the weekly summary, which includes your children's nicknames and their progress (chores done, homework pages checked, share of correct answers, a skill to practise). It never receives photos, homework answers or hints.
- RevenueCat (subscriptions): receives subscription status for the parent's account only, never children's information.
- payOS (payment processor in Vietnam, parent billing data only): receives the order number, the amount and a short transfer note for payments a parent makes on our website, never children's information. Your bank handles the transfer.
We may also disclose information if the law requires it, or to protect the safety of a child. We do not sell, rent or trade information, and we do not share it with advertisers or data brokers.
How long we keep information
| Information | Kept for |
|---|---|
| Homework page photos on our servers | At most 24 hours, then deleted automatically |
| Homework page photos on the parent's phone | Kept in the app on the phone that took them, until the parent deletes the photo, the child or the family, or removes the app. We cannot see this copy. On iPhone it is part of the phone's own backup (for example iCloud) if the parent uses one; on Android it is left out of backups. |
| Hint text | At most 24 hours, deleted with the page photo |
| Chore photos from a child's device | At most 24 hours, then deleted automatically |
| A parent's photo for Roo's check | Until the parent replaces or removes it, or removes the chore |
| Example photos for a child, on our servers | Only until every child device has it, at most 24 hours, then deleted automatically |
| Example photos for a child, on the parent's phone and the children's devices | Until the parent replaces or removes it, removes the chore or deletes the child or family, or the device is signed out or unpaired. We cannot see these copies. On iPhone they are part of the phone's own backup if one is used; on Android they are left out of backups. |
| Homework results, chores (with Roo's suggestion and sentence), points, rewards, hint counts | While the family account exists |
| AI usage counts (no content) | 13 months; after that only monthly totals that are not linked to any family |
| Subscription history (purchases, renewals, cancellations and their dates and prices; no card details) | While the family account exists, at most 25 months |
| Payments on our website (order number, plan, amount, dates; no bank details) | Paid: 10 years, as our accounting record; if you delete the family account, the record stays without any link to you. Not paid: 90 days |
| Invitations (which family used whose code; nothing about the invited person) | While both families exist; if one is deleted, the other keeps its record for at most 13 months |
| A child's own agreement (where the law asks for it) | While the child's profile exists |
| Consent codes (scrambled) | A code never used: 7 days. A used code's record (when and what you agreed to): while the family account exists |
| Everything, after a parent deletes a child or the family | Deleted at once; removed from backups within 30 days |
Parents' rights and choices
- Review: everything we keep about your child is visible to you in the app. You can also ask us for a copy at the email address above.
- Delete: in the app, open Family, then Your data, to delete one child's data or the whole family account. See Delete your data.
- Refuse further collection: you can withdraw consent at any time: turn it off in the app under Family, then Privacy; delete your child's data in the app; or email us. Turning consent off signs out child mode on every device at once, so nothing more is collected from your child's devices; what we already have stays until you delete it in Your data. You can still use parent mode for your children (for example, checking homework you photograph yourself) until you delete their data. We then stop collecting your child's information.
- You can consent to us collecting and using your child's information without consenting to any sharing beyond the service providers listed above; we do not do any other sharing.
We will not require a child to share more information than an activity needs.
Security
We keep a written information security program. Information is encrypted in transit; passwords and PINs are stored only as secure hashes; every request is checked so that a family can only reach its own data; access by our staff is limited to what is needed to run the service.
Changes to this policy
We will tell parents about any material change before it takes effect, and ask for new consent where the law requires it. The version and date at the top of this page change with every update.