COPPA Compliant
1. Introduction
ZobbyKids ("we", "our", or "us") is a family activity tracking app designed for parents to monitor and encourage positive behaviours in their children. We are committed to protecting your family's privacy and complying with the Children's Online Privacy Protection Act (COPPA).
This Privacy Policy explains how we collect, use, and protect information when you use the ZobbyKids app.
2. Information We Collect
Parent/Guardian Information:
- Name, email address, phone number
- City, state, country, and postal code
- Account credentials (encrypted)
Child Information (requires parental consent):
- Child's first name and date of birth
- Grade level and school name (optional)
- Activity logs recorded by parents
- Health notes added by parents (optional)
- Points and reward goals set by parents
Important: We never collect personal information directly from children. All child data is entered and controlled exclusively by parents or legal guardians.
3. How We Use Your Information
- To provide the ZobbyKids app functionality
- To display activity tracking and progress within your family account
- To send optional notifications you configure
- To generate reports visible only to your family
- To improve our services through anonymized usage analytics
4. Our Privacy Promises
- 🔒 Your data is never sold to third parties
- 🚫 No advertising or behavioural tracking on child data
- 👨👩👧 Child data is only visible to parents in your family account
- 🗑️ You can delete your child's data at any time in Settings
- 🔐 All data is encrypted in transit and at rest
5. COPPA Compliance
ZobbyKids complies with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent.
When you add a child profile, we record your parental consent with a timestamp and policy version number. You may withdraw consent at any time by deleting your child's profile in the app.
6. Data Security
We implement industry-standard security measures including:
- HTTPS encryption for all data transmission
- Encrypted password storage using bcrypt
- Secure PostgreSQL database hosted on Railway
- JWT-based authentication with token expiration
7. Data Retention & Deletion
You may request deletion of your account and all associated data by contacting us at privacy@zobbykids.com. We will process deletion requests within 30 days.
8. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@zobbykids.com
App: ZobbyKids
Version: 1.0