Privacy policy

Who we are

The operator of the service, responsible for your personal data, is Alexey Washjurine. Contact: privacy@mykid.life.

The service is intended for families in Belarus. The English and Russian versions are interface languages.

What we process

We collect as little as the app needs to work.

• Family: the family name and time zone.
• Members: a display name, a role (owner, admin or member) and an optional avatar. We do not ask for a child’s e-mail, phone number, date of birth, gender or address.
• Adult sign-in: an e-mail address and a password (stored only as a hash by our authentication provider). Children’s devices join with a one-time invitation and a PIN, stored only as a hash.
• Family activity: tasks, submissions with optional notes and photos, points, rewards, requests and an activity feed.
• Devices: a push notification subscription, only if you turn notifications on.
• Security: throttling counters that use a one-way hash of the IP address and e-mail, so we can slow down guessing attempts. Our hosting providers also keep technical logs that include IP addresses.

Children

Children never create accounts themselves. A family owner, who must be an adult, creates the family and adds each child. By doing so the owner confirms they act as the child’s legal representative and agree to this processing on the child’s behalf.

A child’s data is visible only to that family. There is no public profile, no ranking across families, no advertising and no third-party behavioural tracking. Photos submitted as proof are private to the family. Please avoid photos that show faces, addresses or other identifying details.

Why we process it

To run the service you asked for (tasks, points, rewards, family feed), to keep it secure, and to send notifications you choose to receive. We do not sell data and do not use it for advertising.

Who receives it

We use these providers to run the service:

• Supabase: database, sign-in and file storage.
• Vercel: hosting and application servers.
• The push service of your browser or phone vendor: delivers notifications if you enable them. The message contains only a short title, text and a link.
• Telegram, only if a family owner connects a Telegram group: activity messages are posted to that group. They can include member display names and the titles of tasks and rewards. Everyone in that group can read them, and Telegram processes them under its own terms and outside the European Union. Connect only groups whose members you trust.

Where data is stored

Our database, file storage and servers are located in the European Union (Dublin, Ireland). Data therefore travels from Belarus to Ireland. Telegram messages are processed by Telegram wherever it operates.

How long we keep it

Family data is kept while the family exists. When the owner deletes the family, its records are deleted with it.

Deleting a family also deletes its proof photos and the sign-in accounts of its members. This runs right after the request and is retried automatically if it fails. Security counters are short-lived.

Your rights

You can ask us to give you access to your data, correct it, delete it, restrict its processing, or withdraw your consent. A family owner can edit or delete member data and delete the whole family in the app. Otherwise write to privacy@mykid.life; we will reply within the period set by applicable law. You may also complain to the personal data protection authority of your country.

Security

Every family’s data is isolated from every other family in the database. PINs and invitation codes are stored only as hashes. Access to photos uses short-lived private links. No system is perfectly secure; if we learn of a breach that affects you we will tell you as the law requires.

Changes

If we change this policy in a material way we will update the date above and notify family owners in the app.