Legal

Privacy Policy

Last updated: August 2026. How KidCreato collects, uses, and protects your family's information.

01

Information We Collect

We collect information you provide when creating an account (name, email, role), kid or student profiles (name, birth month/year for age), optional kid login usernames, artwork uploads, contest entries and votes, transaction records processed by Stripe, and aggregated usage data (pages visited, features used) to improve the platform.

02

How We Use Your Data

Account data powers authentication and dashboards. Artwork images are displayed in galleries and the marketplace after approval. Transaction data supports purchase history and payouts. Contest data powers entries and voting. Usage analytics help us understand which features families use so we can improve KidCreato. We do not sell personal information to third parties.

03

Analytics

We use privacy-conscious analytics (such as Vercel Analytics on our hosting platform, and optionally Plausible when configured) to measure traffic and feature usage in aggregate. These tools do not use advertising cookies and are not used to profile children. You can limit non-essential cookies in your browser settings; essential session cookies are required to stay signed in.

04

Children's Privacy

KidCreato is designed for parent- and teacher-supervised use. Adults create and manage kid profiles on behalf of children. Kid logins (username + PIN) let children view their own progress without an email address. We follow COPPA principles: we do not knowingly collect personal information directly from children under 13 without verifiable parental consent, and we limit what kid accounts can do (no public posting, no contest voting on kid logins).

05

Data Security

We use Supabase for secure database storage with row-level security policies. Payments are handled by Stripe and card data never touches our servers. All connections use HTTPS encryption.

06

Data Retention & Deletion

We retain account and artwork data while your account is active. You may request access to, correction of, or deletion of your account and associated kid profiles by emailing privacy@kidcreato.com. We will respond within 30 days. Some transaction records may be retained as required for tax or legal compliance.

07

Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export your data. Contact privacy@kidcreato.com to exercise these rights.

08

Contact

Privacy questions: privacy@kidcreato.com. KidCreato, San Francisco, CA.