Privacy Policy
KiddoTurn is an app for families: parents set up routines and tasks, and selected apps on a child's phone stay paused until those tasks are done. This policy explains what information the app handles, why, and the choices you have. We wrote it to be read, not skimmed past.
The short version
- We collect only what the app needs to work: your sign-in details, the family set-up you create, and the status of your child's tasks and device.
- We do not show ads, sell data, use advertising identifiers, or run third-party analytics or tracking.
- We never collect your child's location, contacts, photos, messages, browsing history or screen content.
- The list of apps installed on your child's phone, and the apps you choose to pause, stay on that phone. They are never sent to us.
- You can ask us to delete everything at any time.
Who we are
KiddoTurn is developed and operated by Grigory Frolov, a private individual, who is the data controller for the information described here. Contact: hello@kiddoturn.com.
Information we collect
Parent and caregiver accounts
- Your email address, and if you use Sign in with Apple or Google, the account identifier those services provide. If you choose Apple's "Hide My Email", we only receive the relay address.
- An optional display name.
- Your family: its name, time zone, and which adults belong to it and in which role (owner, parent or caregiver).
Information about children
Children do not create accounts and do not give us an email address or any other contact details. A parent adds a child profile and provides:
- a first name or nickname, an avatar picked from the app's built-in set, an optional age range (for example "9–12") and a time zone;
- the routines and tasks the parent creates for the child;
- what happens to those tasks: when a task was ticked off, sent for a parent's check, approved, sent back or skipped, and when a parent allowed or paused apps.
The child's device
When a parent pairs a child's phone, the phone receives its own device credential (not tied to any personal account) and reports:
- platform, device model, operating system version, app version and time zone;
- protection status — for example whether Screen Time or the accessibility permission is granted and how many apps, app categories and websites are chosen (counts only, never which ones) — so the parent can see that protection is working;
- when the device last checked in and which version of the family's set-up it applied.
On iPhone, apps are chosen with Apple's Screen Time picker. Apple gives KiddoTurn only opaque tokens, not app names, and those tokens are stored on the device. On Android, the app reads the list of installed apps and watches which app is in the foreground solely to pause the apps the parent selected. That list and that activity are processed on the phone only and are never sent to us or anyone else.
Notifications
If you allow notifications, we store the push token your phone's operating system issues, so we can tell a parent's phone that a task is waiting for their check or that protection on a child's phone needs attention, and tell a child's phone that the family set-up has changed. Notifications to parents include the child's first name or nickname (for example "Alex asks you to check a task") and are delivered through Apple or Google; they never include task text.
Technical data
Our servers keep short-lived records needed to protect the service: rate-limit counters for sign-in, pairing and invitation codes (which can include an IP address and are deleted after one day) and standard request logs kept by our hosting provider. We do not use these to build profiles.
The parent web app
Parents can also manage their family at kiddoturn.com/app. The web app stores your sign-in session in your browser's local storage for kiddoturn.com, so you stay signed in until you sign out; signing out removes it. It sets no tracking cookies and loads no third-party scripts except Google's sign-in button.
How we use information
- To provide the app: show routines and tasks, work out when apps should be paused, and keep parents' and children's devices in sync.
- To keep accounts and families secure: sign-in, pairing confirmation, permissions between family members and abuse prevention.
- To answer you when you contact us.
We do not use information for advertising, do not sell or rent it, and do not use children's information for any purpose other than running the family's own set-up.
For users in the EU/EEA and UK, we process data because it is necessary to provide the service you asked for (contract), for our legitimate interest in keeping the service secure, and on the basis of your consent for notifications, which you can withdraw in your phone's settings.
Who we share it with
We use a small number of service providers that process data on our behalf, under their own data processing terms:
| Provider | Purpose |
|---|---|
| Supabase (servers in the EU, Ireland) | Database, sign-in and server functions; sign-in code emails |
| Apple | Sign in with Apple; push notifications to iPhones |
| Google (Firebase Cloud Messaging, Google Sign-In) | Push notifications to Android phones; Sign in with Google in the apps and on the web |
| Cloudflare | This website and the parent web app, and forwarding of email sent to hello@kiddoturn.com |
Inside a family, adults who belong to the family can see the family's children, routines, task history and device status. Caregivers have fewer permissions than parents; for example, they cannot pause or allow apps or manage family members. We may disclose information if required by law.
How long we keep it
We keep account and family information while the account is in use. When a parent removes a child's device, its credential stops working immediately. When you ask us to delete your account or family, we delete the associated data within 30 days. Backups held by our hosting provider expire on their own schedule, at most a few weeks later.
Your choices and rights
- See and edit your family, children, routines and history in the app.
- Remove a child's device or archive a child profile in the app at any time.
- Turn off notifications in your phone's settings.
- Ask us for a copy of your data, to correct it, or to delete your account and family, by emailing hello@kiddoturn.com from the address you sign in with.
Depending on where you live, you may have further rights, such as to object to or restrict processing, or to complain to your local data protection authority. We will respond to requests within 30 days.
Children's privacy
KiddoTurn is designed to be set up and controlled by a parent or legal guardian. The child's part of the app shows only the tasks their parent created and does not ask the child for personal information. Information about a child is provided by, and visible to, the adults of that child's family. A parent can review it, stop further collection by removing the child's device, and ask us to delete it at any time. If you believe a child's information was added without a parent's involvement, contact us and we will delete it.
Security
Data is encrypted in transit. Sign-in credentials on phones are kept in the iOS Keychain or Android Keystore-backed storage; in the web app, in your browser's storage for kiddoturn.com, protected by a strict content security policy. Access on our servers is enforced per family, so one family can never read another family's data. Pairing a child's phone requires a short-lived code and confirmation by a parent.
Changes
If we change this policy, we will update the date above, and for significant changes we will let you know in the app before they apply.
Contact
Grigory Frolov · hello@kiddoturn.com