Privacy Policy

Version 1.0 — Last updated: April 4, 2026

1. Who We Are

KidiBank is operated by Dor Yaakov Bar. If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@kidibank.com.

2. Data We Collect

We collect only the data necessary to provide the KidiBank service:

• Parents: name and email address (provided via Apple Sign-In or Google Sign-In), and OAuth tokens for authentication.
• Children: first name only (entered by a parent — not collected from the child directly), balance figures, and transaction history.
• Devices: device tokens used for child device linking via QR code or activation link.

We do not collect: location data, payment card data, advertising identifiers, or any data through third-party analytics SDKs.

3. How We Use Your Data

We use the data we collect to:

• Authenticate parents via Apple Sign-In or Google Sign-In.
• Display family balance and transaction history within the app.
• Link child devices to the family account.

4. Data We Do Not Collect

KidiBank does not engage in advertising or behavioral tracking. We do not sell data to third parties. We do not use any third-party analytics SDK (no Firebase Analytics, Mixpanel, Amplitude, or similar services).

5. Children's Data (COPPA)

All children's data (name, balance, transaction history) is entered and controlled by a parent. No data is collected directly from children. Parents can delete all of their children's data at any time via Settings → Delete Account within the app.

6. Data Retention

Your data is retained for as long as your account is active. All data is permanently deleted upon an account deletion request, which can be initiated from Settings → Delete Account within the app.

7. Your Rights

You may access, correct, or delete your data at any time via Settings → Delete Account within the app. For any other data-related requests, please contact privacy@kidibank.com.

8. Third-Party Services

KidiBank uses the following third-party services:

• Apple Sign-In — governed by Apple's Privacy Policy.
• Google Sign-In — governed by Google's Privacy Policy.
• Expo / EAS — used for app delivery only; no access to user data.

9. Changes to This Policy

The date of last update is displayed at the top of this page. Material changes will be communicated to users via an in-app notification.

---