Privacy Policy

Kidsney is a fitness game for children from age 4 to adults. A parent or legal guardian sets the app up and manages it; the child plays under adult supervision.

This policy explains in plain words what data the app uses, where it goes, why, and how to delete it.

1. The camera: video stays on this phone

• The camera is used only during a workout, to count your child's movements. The picture is analysed right on this device by a built-in pose-detection model.
• Video, photos and sound are never recorded and never sent anywhere — not to us and not to anyone else.
• The body points the model finds (positions of the joints) are not saved or sent either: they exist only in the phone's memory while the workout is running.
• Only the workout result leaves the device: which exercise, how long it lasted, when each repetition was counted, a form score (0–100) and how clearly the body was visible (0–1).
• Without the camera the child can count moves by tapping “+1” (manual mode).

2. What we store on our server

Our server runs on Supabase in the European Union (Ireland). The app connects to it over an encrypted connection (HTTPS). Database access rules let a parent see only their own family's data.

• Parent account: e-mail and password, or Sign in with Apple / Google, or a guest account without an e-mail. When you register with an e-mail — your year of birth (to confirm you are an adult). App language, time zone, reminder time and the parent PIN (stored only as a hash).
• Child profile: a nickname chosen by the parent (a real name is not needed), an avatar and the age group (4–5 or 6–8), stored as an approximate year of birth. Up to 4 profiles per family.
• Game progress: heroes, levels, experience points, energy, quests, streaks, rewards and outfits; fight results with the sequence of in-game button presses (our server replays the fight to confirm the result) and the age group, which sets how easy the fight is.
• Workout results — as described in section 1.
• Consent record: when you agreed, the version and language of the consent text and a fingerprint (hash) of that text.
• Subscription status: product, store, transaction number and validity dates, received from RevenueCat. We never see card details.
• Free-trial protection: a fingerprint (hash) of the e-mail address and a random installation ID, so that a free trial is given only once.
• Usage events: which screens and steps were used (for example “workout started”, “offer shown”), with a random installation ID, the selected child profile, the app version and the platform. No names, e-mail addresses, images or body points.
• Error reports: the technical error text and the app version. E-mail addresses and identifiers are removed from the text on the device before sending; reports are sent only when signed in.
• Push token: only if a parent turns on reminders in the Parent zone.
• Campaign labels: if the app was opened from our advertising link — the campaign labels (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and the domain of the referring site, saved once, without advertising identifiers.

3. Services that receive data

We do not sell personal data. The app shows no advertising, and children never see ads.

• Apple App Store and Google Play — purchases and payments, under their own privacy policies.
• RevenueCat — subscription status. It receives a random account ID (not the e-mail and not the child's nickname) and purchase information.
• Meta (Facebook) App Events — to measure our advertising aimed at parents. The Meta SDK starts only after an adult passes the parent check or makes a purchase; the child's screens send nothing to Meta. It receives: that the app was opened, the start of a trial or a subscription with plan, price and currency, Meta's anonymous app ID and technical device data (such as model, system version, language). The device advertising ID is not collected on Android or iPhone (IDFA), and the app does not ask for tracking permission. Automatic event logging is turned off. RevenueCat passes subscription events (trial conversion, renewal) to Meta.
• Apple Push Notification service and Firebase Cloud Messaging (Google) — deliver reminders, only if a parent turned them on. A reminder may contain the child's nickname.
• Firebase Crashlytics (Google) — crash reports, so we can fix errors. It receives a technical crash description, the app version, device model and system version, and a random installation ID; it never receives names, e-mails, video or camera data.
• Sign in with Apple / Google — only if you choose that way to sign in.
• Brevo (e-mail service) — sends account e-mails: address confirmation and password reset.

4. What stays only on this phone

• Video, sound and body points from the camera (section 1).
• Settings, language, the random installation ID, the signed-in session and the demo progress before registration.

5. Trying the app before registration

The demo works without an e-mail. Its progress is kept on the phone; only anonymous usage events with the random installation ID are sent. When you continue, the app creates a guest account without an e-mail (you can add an e-mail later in the Parent zone). A child profile is created only after a parent gives consent.

6. Consent and legal basis

A parent creates the child's profile after confirming that they are the parent or legal guardian and agree to the processing of the child's data. Legal basis: the parent's consent (GDPR Art. 6(1)(a) and Art. 8) and, for the subscription, the contract (Art. 6(1)(b)). Consent can be withdrawn at any time by deleting the child profile or the account (section 8).

7. How long we keep data

• Account, profile, progress and workout data — as long as the account exists.
• Anonymous sign-up and purchase statistics — up to 13 months; the reminder delivery log — 90 days.
• Usage events recorded without a child profile stay linked only to the random installation ID, not to the account.
• Purchase records at Apple, Google and RevenueCat and data received by Meta are kept under those companies' own policies.

8. How to delete data

• A child profile: on “Who's playing today?” tap “⚙️ Manage profiles”, pass the parent check and tap 🗑. The profile and all of the child's progress, workouts, rewards and events are deleted permanently.
• The whole account: Parents → Settings → “Delete account”, then type DELETE. The account and the data of all children are deleted permanently.
• Deleting the account does not cancel a store subscription — cancel it first in “Manage subscription”.
• You can also ask us by e-mail: support@kidsney-sport.com.

9. Your rights

You can ask what data we hold about your family, and have it corrected, exported or deleted; you can withdraw consent at any time. Write to support@kidsney-sport.com. You also have the right to lodge a complaint with your data protection authority.

10. Changes

When this policy changes, the new version appears here in the app with a new date.

11. Contact

Kidsney · support@kidsney-sport.com