Privacy Policy
Last updated: April 13, 2026
1. Introduction
Kiddico is a product of New Life Federal HR Solutions LLC. Health tracking data has an authoritative copy on your iPhone and may be replicated to Supabase infrastructure in the United States for family sharing, account recovery, and cross-device access. Optional iCloud sync provides additional Apple-managed replication. We do not sell, rent, or share health data with advertisers, brokers, or marketers.
2. Information We Collect
Depending on the features you use, Kiddico stores information you enter—including child profiles, health records, appointments, insurance details, providers, notes, and preferences—plus limited authentication, subscription, family-sync, and security audit information. Account identifiers are used to operate authentication and sharing.
3. Device-First Storage
Kiddico uses Core Data, iOS Data Protection, and Keychain Services. Insurance member IDs are encrypted with AES-GCM before storage or sync. Other health fields are protected by TLS in transit, infrastructure encryption at rest, and row-level access policies rather than individual field encryption.
4. Optional Sync Features
iCloud sync and Family Sharing are disabled until you enable them. iCloud data is governed by Apple. Family Sharing uses Supabase so invited adults can view the shared family record. You can remove members and disable optional services through Settings.
5. Information We Do Not Collect
Kiddico does not collect location, contacts, advertising identifiers, or health information for advertising. Optional TelemetryDeck analytics are anonymous and can be disabled in Settings.
6. Processors
Kiddico uses Supabase for database and authentication services, Apple for iCloud and Sign in with Apple, RevenueCat for subscription entitlements, and optional TelemetryDeck analytics. These processors receive only the information needed for their stated role.
7. Children’s Privacy
Kiddico is designed for adults. Children do not create accounts or interact with the app directly. Parents or guardians enter and control child information, and Kiddico does not show targeted advertising.
8. Security
Protections include iOS device encryption, Keychain storage, TLS, infrastructure encryption, row-level security, optional biometric lock, and jailbreak warnings. No system is completely secure; protect your device with a passcode and current software.
9. Your Rights and Controls
You can access and correct information in the app, export available records, delete entries or profiles, disable optional services, revoke family access, and request account deletion. Contact us for server-side access requests.
10. Retention
Device data remains until you delete it. Account and synced data remain while the account is active. Account deletion starts a 14-day grace period before permanent server-side deletion. iCloud retention follows Apple’s policies.
11. International Transfers
Supabase account and sync data is processed in the United States. Users outside the United States acknowledge this transfer. Apple may process iCloud data in locations governed by its infrastructure and policies.
12. Policy Changes
Material changes may be communicated in the app, through this page, and by updating the date below. If you do not agree with a material change, stop using the service and delete your account.
13. California Rights
California residents may request access or deletion and may exercise applicable CCPA rights without discrimination. Kiddico does not sell personal information.
14. European Rights
EEA users may have rights of access, correction, erasure, portability, objection, and restriction. Optional services rely on consent, which can be withdrawn in Settings. New Life Federal HR Solutions LLC is the data controller.
15. Contact
For privacy questions or rights requests, email contact@kiddico.app. We aim to respond to privacy inquiries within 30 days.