Bảo vệ quyền riêng tư của trẻ
Trang này hiển thị bằng tiếng Anh cho đến khi bản dịch được duyệt.
KudosNest is a family app for parents: chores and reward points for children, and homework pages that a parent scans so that AI can check them for the parent. This policy explains what we collect, why, who we share it with, how long we keep it, and the choices parents have. It includes our notice to parents under the U.S. Children's Online Privacy Protection Act (COPPA).
Who we are
[to be filled in before launch]
[to be filled in before launch]
Phone: +84 902 051 688
Email: [to be filled in before launch]
Contact us at this address with any question about this policy or about your child's information.
The short version
- The account belongs to a parent. Children never create accounts and never give us an email address.
- We collect a child's information only after a parent has given consent, confirmed with a code we email to the parent. A parent can take it back at any time in the app.
- Homework photos are taken by the parent and deleted from our servers within 24 hours. The parent's own phone keeps a copy so the parent can check the results later; the parent can delete it at any time.
- Chore photos from a child's device are off until a parent turns them on, and are deleted within 24 hours.
- There are no ads, no analytics or tracking tools, and we never sell or rent anyone's information.
- We do not use children's information to train AI models.
- A parent can delete a child's data, or the whole family account, at any time in the app.
Information we collect from parents
- Account: your email address, a display name, your password (stored only as a secure hash), your language and your time zone. If you sign in with Apple or Google instead, we receive an account identifier from them and, if you share it, your email address (Apple may give a private relay address) and name; we never see your Apple or Google password.
- Email: we use your email address to confirm it is yours, to send password reset links you ask for, and, only if you turn it on, a weekly report. We don't send marketing email from the app, and our emails have no tracking pixels or tracked links. Each link works once and expires (60 minutes for a password reset, 7 days for confirming your email); we keep only a scrambled form of it, deleted a week after it expires.
- Consent records: what you agreed to, when, how it was confirmed, and which version of this policy.
- Consent codes: to confirm that a parent gives consent, we email a one-time code to your account email address and, about a day later, one email confirming what you agreed to. We keep only a scrambled form of the code; a code that was never used is deleted after 7 days.
- Subscriptions: if you subscribe, the app store handles payment. We receive the status of your subscription and keep a history of its purchases, renewals and cancellations, never your card details.
The waitlist
Before launch, parents can join our waitlist on this website. We keep the email address, the number of kids, the language of the page and which version of the page it was sent from, and use them only to email you once when KudosNest launches and to learn which description of the app works better. The website uses no cookies or tracking for this: page views are counted per day without identifying anyone. Email us to be removed. The waitlist is deleted 12 months after launch at the latest.
Information we collect about children
KudosNest is for children aged 5 to 16. We treat every child the same way, including those aged 13 to 16 whom COPPA does not cover: a parent creates each child's profile and gives consent, and the protections in this policy apply to all of them. With the parent's consent, we collect and keep:
- Profile: a nickname, the child's age (stored as a birth year), an avatar picked from a list, the child's language, the colour and style the child picks for child mode from a list, and how child mode celebrates finished chores (set by a parent). The child's device also remembers which badges and celebrations it has already shown; this is removed when the device signs out or is unpaired. We ask parents not to use a child's full name.
- Chores and rewards: the chores a parent assigns, when the child marks them done, the parent's decision, reward points, streaks, reward requests, the days a parent pauses chores, and a weekly family goal a parent sets (its title, target and shared reward, and how many chores each child added to it).
- Homework: photos of homework pages that the parent takes in parent mode, and the results: each question, the child's written answer, the correct answer and a short explanation for the parent.
- Chore photos (only if a parent turns them on): when a parent asks for photo proof of a chore and allows photos from the child's device, the child takes a photo of the finished chore. The app first checks on the device that no face is in the photo and does not send a photo with a face. Photos are deleted within 24 hours. A parent can also add an example photo of a finished chore, taken on the parent's device.
- Roo's chore check (only if a parent turns it on): Roo's suggestion whether the chore looks done, and one short encouraging sentence for the child.
- Hints: how many hints a child asked for on a question. The text of the hints is kept only as long as the page photo (at most 24 hours), so that each hint can build on the last.
- The child's device: when a parent pairs a child's phone or tablet, we store a device identifier we create, the platform (iOS or Android) and a 4-digit PIN chosen on that device (stored only as a secure hash).
- Notifications: if notifications are allowed on a phone, a push token that Apple or Google gives that phone, so we can tell it, for example, that a new chore is waiting. Tokens are removed when you sign out, unpair the device or delete the data.
Child mode has no free-text fields, chat or search: children use buttons only, so they cannot type personal information into the app. We do not collect a child's email address, phone number, school, address, contacts, precise location, voice or face data. The face check on chore photos runs only on the device: nothing about a face is stored or sent to us.
How we use information
- To run the service for your family: show chores and points, sync parent and child devices, check homework pages and give your child hints.
- To keep the service secure, prevent abuse and enforce plan limits.
- To measure the cost of AI features per family, using counts only (no page content).
We do not use any information for advertising, for profiling, or to train AI models. If we ever wanted to use a child's information for anything not needed to run the service, we would ask for a parent's separate consent first.
How homework checking and hints work
When a parent scans a page, the photo is sent from our servers to our AI provider, Anthropic, which reads the page and returns the results. When a child asks for a hint, the page photo, the question and the child's age and language are sent the same way. We never send a child's name. Hints are leading questions only: the app checks every hint and replaces any hint that contains an answer. Under its commercial terms, Anthropic does not use this content to train its models.
On the Family plan, a parent can ask for 5 practice problems like the ones a child missed. The missed questions, their correct answers, the skill and the child's age and language are sent to Anthropic, which writes new problems. We never send a child's name or the page photo for this. A parent can send the problems to the child's device, which shows the questions only.
How Roo's chore check works
If a parent turns on Roo's chore check (a separate choice from allowing chore photos), the child's chore photo, the parent's example photo if there is one, the chore's title and steps and the child's age and language are sent from our servers to Anthropic, which suggests whether the chore looks done and writes one encouraging sentence for the child. We never send a child's name. Roo only suggests: the parent approves the chore, unless the parent has chosen to approve automatically when Roo is sure.
A parent can also ask for suggested steps for a chore. The chore's title, and the age and language the parent picks, are sent to Anthropic, which suggests a few short steps. We remove children's names from the title first. The suggestions go to the parent only; nothing reaches the child until the parent edits and saves the steps.
Who we share information with
We share information only with service providers that help us run KudosNest, only as needed for that, and under contracts that require them to protect it:
- Anthropic (AI provider): homework page photos and questions, for grading and hints; missed questions, for practice problems; chore photos, chore titles and steps, for Roo's chore check when a parent turns it on; chore titles and a child's age, for step suggestions a parent asks for.
- [to be filled in before launch] (hosting): runs our servers and database.
- [to be filled in before launch] (storage): holds homework and chore photos until they are deleted, at most 24 hours, and parents' example chore photos until removed.
- Apple and Google: deliver the app and handle in-app purchases.
- Google (Firebase Cloud Messaging) and Apple (Push Notification service): deliver notifications. They receive the push token and the text of the notification. Notifications to parents leave out the child's name unless a parent turns names on. Chore reminders on a child's own device never name the chore; while an on-time bonus can still be earned, they add the time it ends and how many points it is worth. Notifications carry no other information about a child. We use Firebase for notifications only, with its analytics turned off.
- [to be filled in before launch] (email delivery): receives your email address and the emails we send you: links to confirm your email or reset your password, consent codes and the consent confirmation (these name what you agreed to, never a child) and, only if you turn on the weekly report email, the weekly summary, which includes your children's nicknames and their progress (chores done, homework pages checked, share of correct answers, a skill to practise). It never receives photos, homework answers or hints.
- RevenueCat (subscriptions): receives subscription status for the parent's account only, never children's information.
We may also disclose information if the law requires it, or to protect the safety of a child. We do not sell, rent or trade information, and we do not share it with advertisers or data brokers.
How long we keep information
| Information | Kept for |
|---|---|
| Homework page photos on our servers | At most 24 hours, then deleted automatically |
| Homework page photos on the parent's phone | Kept in the app on the phone that took them, until the parent deletes the photo, the child or the family, or removes the app. We cannot see this copy. On iPhone it is part of the phone's own backup (for example iCloud) if the parent uses one; on Android it is left out of backups. |
| Hint text | At most 24 hours, deleted with the page photo |
| Chore photos from a child's device | At most 24 hours, then deleted automatically |
| A parent's example chore photo | Until the parent replaces or removes it, or removes the chore |
| Homework results, chores (with Roo's suggestion and sentence), points, rewards, hint counts | While the family account exists |
| AI usage counts (no content) | 13 months; after that only monthly totals that are not linked to any family |
| Subscription history (purchases, renewals, cancellations and their dates and prices; no card details) | While the family account exists, at most 25 months |
| Consent codes (scrambled) | A code never used: 7 days. A used code's record (when and what you agreed to): while the family account exists |
| Everything, after a parent deletes a child or the family | Deleted at once; removed from backups within 30 days |
Parents' rights and choices
- Review: everything we keep about your child is visible to you in the app. You can also ask us for a copy at the email address above.
- Delete: in the app, open Family, then Your data, to delete one child's data or the whole family account. See Delete your data.
- Refuse further collection: you can withdraw consent at any time: turn it off in the app under Family, then Privacy; delete your child's data in the app; or email us. Turning consent off signs out child mode on every device at once, so nothing more is collected from your child's devices; what we already have stays until you delete it in Your data. You can still use parent mode for your children (for example, checking homework you photograph yourself) until you delete their data. We then stop collecting your child's information.
- You can consent to us collecting and using your child's information without consenting to any sharing beyond the service providers listed above; we do not do any other sharing.
We will not require a child to share more information than an activity needs.
Security
We keep a written information security program. Information is encrypted in transit; passwords and PINs are stored only as secure hashes; every request is checked so that a family can only reach its own data; access by our staff is limited to what is needed to run the service.
Changes to this policy
We will tell parents about any material change before it takes effect, and ask for new consent where the law requires it. The version and date at the top of this page change with every update.