Privacy notice

1. Information we maintain

A parent provides an adult email/password, family name, child nickname, grade and PIN. We store salted credential hashes, account/profile identifiers, necessary sessions, parental notices/consent/withdrawal records and subscription information. Participation produces chores/completions, books and quiz answers/results, household votes/rewards, and saved games/cards/pets/trades. Parents may add schedules and locations. A child's email, exact birth date, legal name, image or government ID is not required. Avoid personal or sensitive details in free text.

2. Internal use and access

We use family information internally to operate, save, personalize and secure requested features. Cloudflare hosts/stores it and delivers account email as our service provider. Family information stays behind family/role checks; parents can review their children's activity. We do not sell child information, use behavioral advertising, provide public child profiles or enable stranger messaging. The pre-login family entry does not list children. Helper access, external meal connections and ICS subscriptions have been removed. Old subscription links no longer provide a feed. A parent may intentionally save/share a schedule image from their device; we cannot recall recipients' copies.

3. Book processing, payments and separate accounts

Book entry stays in KidQuest by default. Parents can enable Open Library search in the kids sections; the typed title is then sent through our server to Open Library without a child name, account identifier or reading history. Parents do not need to enter every book in this mode. Parents can also extend the shared public catalog themselves. Submit only published book titles/authors. Manual entries without available questions go to a parent reading check-in without being sent to OpenAI. New AI quiz generation uses only server-controlled public catalog metadata and book research. OpenAI receives no child/family IDs, names, grades, answers, progress or household data; its safety identifier identifies the catalog application, not a person. Research may use web search. Provider retention/security controls can apply to that public-book processing even with stored responses disabled. Reusable questions are separate from private child quiz history.

Stripe/Link handles adult Checkout, payment methods and receipts; KidQuest holds the identifiers/entitlements needed to verify paid access. Adult email/password sign-in can also work in other products that maintain separate data; this does not enable child-data or meal/vote sharing. We may disclose information when legally required or to address a concrete security/safety threat; new optional disclosures require any applicable separate consent.

4. Parental notice and consent

An adult accepts the Terms and gives parental consent in KidQuest. We email the adult a direct parental notice with a single-use parental-consent link. Completing that link authorizes child participation. This authorization covers children for whom the adult has parental/legal-guardian authority and the described family features; it does not authorize sale, behavioral advertising or unrelated sharing. Every family, including an existing family, must complete the current process. Email-plus eligibility depends on maintaining the described internal-use practices and appropriate provider safeguards; these documents are not a compliance certification.

5. Necessary cookies and device storage

Necessary cookies keep parents/children signed in. Device storage can hold local game state/preferences; protect shared devices and sign out. Blocking essential storage can prevent requested features. No behavioral-advertising cookies are integrated. Hosting receives the technical request data needed to provide and secure the service.

6. Review, withdrawal and deletion

Sign in to parental-consent management to withdraw consent and stop child participation. Contact support@kidquest.win from your adult account email to request review, correction, deletion/account closure or a stop to further collection/use. Do not email passwords/PINs or unnecessary child details. We verify authority before releasing/deleting information. Removing a child only disables a profile; withdrawal, sign-out and subscription cancellation are not erasure. We administer verified requests across the KidQuest stores and relevant providers/backups under our control, explaining narrow legal exceptions. An adult identity used in other products and those products’ separate data require an explicit choice about which accounts to close.

7. Retention and deletion

We delete account data, including associated child profiles and their activity, after five consecutive years of account inactivity. Inactivity means no authenticated use by the adult or any child profile linked to the family. Shared-account sign-ins can count as account activity. This five-year rule is an inactivity limit, not a minimum retention period: we delete information sooner when it is no longer needed for its stated purpose or when a verified deletion request or applicable law requires it. Deletion covers account information in KidQuest systems and copies under our control, including relevant service-provider copies and backups. A narrow record required by law, such as a tax, payment or legal-dispute record, may be retained only for the legally required purpose and period; it is not retained for continued gameplay or profiling. We explain applicable exceptions when handling a deletion request. Other products using the same adult sign-in maintain separate records and data practices. Closing a shared adult identity requires coordinated account closure; KidQuest does not exchange child activity or meals with those products.

Cleanup and verified requests are operator-administered; these notices do not describe an automated purge that the app does not implement. Consent records are limited to the necessary evidence/purpose and lawful record requirements, not a usable child profile kept indefinitely.

8. Security and incidents

We use salted credentials, family/role access checks and revocable sessions. No security measure prevents every compromise. We investigate incidents and give required notices. Provider safeguards and written security/retention practices must match actual operations. Parent link/PIN responsibilities do not waive our duties.

9. Countries and legal rights

Home jurisdiction: Virginia, USA. Intended markets: the United States, the United Kingdom, Canada and Australia. Providers may process information elsewhere. Applicable regional rights/transfer safeguards still apply; this notice does not establish certification, a transfer mechanism or universal legal compliance. KidQuest is for households, not school-authorized student records. Schools/organizations need a separate arrangement.

10. Updates and contact

Prior notice releases and acceptance evidence remain preserved. Material changes receive required notice and fresh consent where required.

KidQuest LLC. Email: support@kidquest.win. Mailing address: 5219 Monticello Ave #5460, Williamsburg, VA 23188, USA. Phone: +1 757-325-9688.