Privacy Policy

Our privacy policy and how we use your data

Last updated: March 1, 2026

1. Introduction

KidsCheck Inc. ("we," "us," or "our") is committed to protecting the privacy of children and families who use our children's ministry check-in platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

2. COPPA Compliance

KidsCheck complies with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information directly from children under 13. All children's data is entered by authorized church administrators or parents/legal guardians.

Parental Consent

Churches and organizations using KidsCheck are responsible for obtaining verifiable parental consent before entering a child's information into the system. This includes the child's name, date of birth, medical information, and any photographs.

Parental Rights

Parents and legal guardians have the right to:

  • Review their child's personal information
  • Request deletion of their child's data
  • Refuse further collection of their child's data
  • Request that their child's data not be shared with third parties

3. Information We Collect

Church/Organization Data

  • Church name, address, phone number
  • Administrator names, email addresses, and account credentials
  • Billing and payment information (processed by Stripe)

Children's Data (Entered by Authorized Adults)

  • Child's first and last name
  • Date of birth and gender
  • Medical information (allergies, special needs, medical notes)
  • Classroom assignments
  • Check-in/check-out timestamps and security codes

Parent/Guardian Data

  • Name, email address, phone number
  • Relationship to child(ren)
  • Emergency contact information

Automatically Collected Data

  • IP address and browser type
  • Device information
  • Usage analytics (pages visited, features used)
  • Cookies and similar technologies (see Cookie Policy)

4. How We Use Your Information

We use collected information to:

  • Provide and maintain the check-in/check-out service
  • Ensure child safety through security codes and authorized pickup verification
  • Communicate medical alerts and allergies to classroom volunteers
  • Send notifications to parents about their child's status
  • Generate reports and analytics for church administrators
  • Process billing and subscription management
  • Improve and develop the Service
  • Comply with legal obligations

5. Data Sharing and Disclosure

We do not sell personal information. We may share data with:

  • Service Providers: Supabase (database hosting), Vercel (application hosting), Stripe (payment processing) — only as necessary to provide the Service
  • Within Your Organization: Church administrators, teachers, and volunteers see only the data relevant to their role
  • Legal Requirements: When required by law, court order, or governmental regulation
  • Safety: To protect the safety of a child or prevent imminent harm

6. Data Security

We implement industry-standard security measures including:

  • Encryption in transit (TLS/SSL) and at rest
  • Row-level security (RLS) ensuring data isolation between churches
  • Role-based access control with 7 permission levels
  • Secure authentication with multi-factor authentication support
  • Regular security audits and monitoring

7. Data Retention

  • Active Accounts: Data is retained as long as the account is active.
  • Deleted Accounts: Data is retained for 30 days after account deletion, then permanently removed.
  • Check-in Records: Historical check-in data is retained for the duration of the account for reporting purposes.
  • Billing Data: Payment records are retained as required by applicable tax and financial regulations.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access and receive a copy of your personal data
  • Correct inaccurate personal data
  • Request deletion of your personal data
  • Object to or restrict processing of your data
  • Data portability (export your data)

To exercise these rights, contact us at privacy@kidscheck.app.

9. International Data Transfers

Our servers are located in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. The "Last updated" date at the top indicates when the policy was last revised.

11. Contact Us

For privacy-related questions or concerns, contact our Privacy Officer at privacy@kidscheck.app.