Privacy Policy

1. Scope

This Policy applies to the KidsBond mobile application and the center management console (collectively, the "Service"). The Service is used by childcare centers, home-based childcare providers, and other organizations or individuals that provide childcare services, as well as by parents: such a provider may register on its own to set up a center, and center staff join via an invitation code; parents may be linked to a child via an invitation code or may register on their own and then create their child's profile.

2. Personal Data We Collect

To provide the childcare contact book service, we collect the following data:

• Account data: name, email address, and password (stored as a hash).
• Children's data: name, date of birth, care records (feeding, sleep, diaper changes, temperature, etc.), growth measurements, developmental checklists, attendance, and pick-up/drop-off records.
• Photos and images: photos of children’s activities uploaded by center staff.
• Communications: parent-teacher messages, announcements, and reported items.
• Device information: push notification tokens (used to deliver notifications).

3. Purposes and Legal Basis

The data above is used only to: provide childcare records and parent-teacher communication, deliver service notifications, respond to evaluations and inspections by the competent authority, and maintain the security of the Service. Children's personal data is collected and processed with the consent of their legal representatives (parents) pursuant to Article 19 of the Personal Data Protection Act.

4. Data Storage and Security

Data is stored on access-controlled cloud infrastructure, and all transmission is encrypted with TLS. Care records and photos are accessible only to the child's authorized guardians and the staff of the affiliated center; access is revoked once a staff member leaves or a link is removed.

5. Data Retention

Childcare records are retained for at least two years from creation, or for a period otherwise agreed between the center and the parent; during the retention period, center staff may look back at records within the scope of their permissions. After a child leaves the center or an account is deleted, you lose access to the corresponding data, but childcare records still within the retention period remain stored in the center account.

6. Data Sharing

We do not sell, rent, or trade your personal data, and we do not serve third-party advertising. We disclose data only in the following cases: with your consent; as required by law or the competent authority; or to cloud infrastructure providers necessary to deliver the Service (who process data only on our instructions).

7. Your Rights

Under the Personal Data Protection Act, you may request access, review, supplementation, correction, cessation of collection/processing/use, and deletion of your data. Parents may unlink from a child at any time, and you may delete your account from the "Me" page in the app. To exercise your rights, contact us using the details below.

8. Children's Privacy

The users of the Service are adult parents and center staff; children do not use the Service themselves. Children's data is always provided by center staff or parents with the consent of the child's legal representative.

9. Changes to This Policy

When this Policy is revised, the changes will be published on this page with an updated effective date; material changes will also be notified in the app.

10. Contact Us

If you have any questions about this Policy or personal data protection, please email tonytony771111@gmail.com.