Introduction
KidCanvas ("we," "our," or "us") is committed to protecting the privacy of our users, especially children's information. This Privacy Policy explains how we collect, use, and protect your data when you use our iOS app and web application.
Information We Collect
Account Information
- Email address (for account creation and login)
- Name (optional, for personalization)
- Password (securely hashed, never stored in plain text)
Family & Children Information
- Child names and birth dates (to organize artwork by age)
- Family group names
- Artwork images and metadata (titles, dates, tags)
Usage Information
- App usage analytics (anonymized)
- Device information for troubleshooting
How We Use Your Information
- To provide and improve our services
- To organize and display your family's artwork
- To enable sharing with family members
- To process payments for premium features
- To send important account notifications
Data Storage & Security
Your data is stored securely using industry-standard practices:
- Database: Supabase (PostgreSQL with Row Level Security)
- Image Storage: Cloudflare R2 (encrypted at rest)
- Payments: Stripe (PCI-compliant, we never see your full card number)
- Encryption: All data transmitted via HTTPS/TLS
Third-Party Services
We use the following third-party services:
- Supabase: Authentication and database
- Cloudflare: Image storage and delivery
- Stripe: Payment processing
- Vercel: Web hosting
Children's Privacy (COPPA)
KidCanvas is designed for parents and guardians to manage their children's artwork. We do not collect personal information directly from children. All child profiles are created and managed by adult account holders.
We collect only the minimum information necessary: child's name (or nickname) and birth date to calculate their age when artwork was created.
Data Sharing
We do not sell your data. We only share data:
- With family members you invite to your family group
- Via public share links you explicitly create
- With service providers necessary to operate our app
- When required by law
Your Rights
You have the right to:
- Access: Request a copy of your data
- Correct: Update inaccurate information
- Delete: Request deletion of your account and data
- Export: Download your artwork and data
- Opt-out: Unsubscribe from marketing emails
Data Retention
We retain your data as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required for legal or business purposes.
Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
Support: Visit our Support Page
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the app.