KudobeePrivacy Policy
This policy explains how Kudobee collects, uses, protects, and deletes information for parent-managed family task and reward tracking.
Who we are
Kudobee is a family task and reward app for parents or guardians and their children. It is operated by Volodymyr Pletnov, an individual (natural person) and the developer and publisher of Kudobee, who is the data controller. A parent or guardian sets up the family, creates child profiles, and manages tasks, rewards, and settings. For privacy questions, contact support@kudobee.com. The controller is established outside the EU/EEA (Ukraine); you can contact the controller directly using the details under Contact below.
Information we collect
Depending on how a family uses Kudobee, we may collect and process:
- Account information
- Email address, display name, authentication identifiers, sign-in provider details, and account settings.
- Family and child profiles
- Family membership, child display names or nicknames, avatars, the child's age in years as entered by the parent (an age group is derived from it for age-appropriate content), gender, parent or guardian relationship, and preferences. We ask for no more child information than the family features need.
- Tasks, rewards, and coins
- Chores, goals, schedules, completion status, coin balances and history, reward catalog items, claims, and approvals.
- Uploaded images
- Optional task-proof, reward, or support images that families choose to add. Photo proof for tasks is an optional feature: the parent or guardian decides whether a task asks for a photo, and reviews submitted photos when approving the task. Task-proof and reward images are accessible only to members of your family in the app. Please avoid uploading images that contain more personal information than needed. These files are stored in Firebase Storage and are covered by the deletion options described under Retention and deletion below.
- Purchases and subscriptions
- Subscription status and entitlements needed to provide premium features, prevent fraud, and support purchases. Payments are processed by Google Play under its own policies; we do not receive full payment card details.
- Notifications
- Push notification tokens and notification preferences used to send task, reward, account, and family activity reminders.
- Diagnostics
- Crash reports and diagnostics from Firebase Crashlytics (device model, app version, and crash data) to keep the app reliable. Optional product analytics stays disabled unless enabled for an app build and permitted by law and platform settings.
- Security signals
- Integrity and abuse-prevention signals from Firebase App Check and, on the web, reCAPTCHA or similar checks.
- Support communications
- Messages you send us and the information needed to investigate and resolve a request.
Sign-in providers
Kudobee may support Google Sign-In and other authentication providers for the parent account. When a parent signs in with a provider, we receive the information needed to authenticate the account, such as provider identifiers, email address, and basic profile details made available through the sign-in flow.
The Android and iOS apps include the Facebook Login SDK for optional parent sign-in. Its automatic app-event logging and advertiser-ID collection are disabled in Kudobee, and information is exchanged with Meta only when a parent actively chooses to sign in with Facebook, subject to Meta's Privacy Policy. Web builds do not load the Facebook SDK. Children never sign in with social providers.
How we use information
We use information to operate Kudobee: to create and manage family spaces, show tasks and rewards, sync data across devices, send requested or necessary notifications, maintain purchases and subscriptions, provide support, improve reliability, diagnose crashes, secure the service, prevent abuse, and comply with legal obligations.
Legal bases for processing (EEA/UK)
For users in the European Economic Area and the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:
- Contract — to create and run family accounts, show tasks and rewards, sync data across devices, and provide the premium features you subscribe to.
- Consent — for optional features such as photo proof, optional product analytics (where offered), and signing in with a social provider. You can withdraw consent at any time, without affecting processing already carried out.
- Legitimate interests — to keep the service secure, prevent abuse and fraud, diagnose crashes, and improve reliability, balanced against your rights and freedoms.
- Legal obligation — to keep purchase, tax, and accounting records and to respond to lawful requests.
Children's information is processed on the basis of the parent or guardian's consent and to perform the family service the parent sets up, as described under Children's privacy below.
Children's privacy and parent role
Kudobee is designed for parent-managed family use. A parent or guardian creates and manages the family account, supervises child use, configures tasks and rewards, and decides what child profile information is appropriate. Children should use the app only with a parent or guardian's permission and supervision, and are not asked to make privacy-sensitive choices on their own. Children do not provide an email address; a child profile is connected to a device through a parent-generated invite code.
Child profiles can be created only by the parent or guardian. When creating a child profile, the parent must explicitly confirm that they are the child's parent or legal guardian and that they consent to the processing of the child's information as described in this policy. This confirmation is recorded with a timestamp together with the child profile. The child data collected at that point is limited to: a name or nickname, an avatar choice, age in years (and the derived age group), and an optional gender; the child's later task, reward, and coin activity, and any optional photo proofs, are described above.
We do not knowingly collect more child information than is needed for the family task and reward features, and we do not sell children's data. Parents or guardians can request access, correction, export, or deletion using in-app controls where available or by contacting support@kudobee.com.
COPPA, children's data, and the parental consent we collect
Kudobee follows children's privacy laws, including the U.S. Children's Online Privacy Protection Act (COPPA) and the GDPR rules on children's data. Because the app is parent-managed, the parent or guardian — not the child — provides consent. Before any child profile is created, the account holder signs in with their own verified email and must affirmatively confirm that they are the child's parent or legal guardian and consent to the limited processing described in this policy; this confirmation is stored with a timestamp. We treat it as the parent's verifiable consent for the internal, family-only use of the data, which we never disclose to third parties for their own purposes and never use for advertising.
We do not knowingly let children create their own accounts or provide personal information directly. The digital age of consent varies by country (for example, 13 in the United States and the UK, and between 13 and 16 across EU member states); in every case a parent or guardian is responsible for the child's use of Kudobee. If you believe a child has provided information without the required parental consent, contact support@kudobee.com and we will delete it.
No ads or marketing trackers
Kudobee operates without third-party advertising networks or marketing trackers, and does not use the device advertising identifier. Children do not receive targeted advertising. If this ever changes, this policy will be updated before any such technology is used, and any ads would be limited to parent-facing areas.
International data transfers
Family data is stored in Google's europe-west1 (Belgium)
region within the EU. Some of our service providers (for example Google)
are global and may process limited data — such as crash diagnostics,
authentication, or security signals — outside the European Economic Area,
including in the United States. Where data leaves the EEA or the UK, the
transfer is protected by appropriate safeguards, primarily the European
Commission's Standard Contractual Clauses (with the UK Addendum where
relevant) and, where applicable, the EU–U.S. Data Privacy Framework. You
can request more information about these safeguards at
support@kudobee.com.
Retention and deletion
We keep account, family, task, reward, purchase, notification, image, diagnostic, and support information for as long as needed to provide the app, maintain security, resolve disputes, and comply with legal obligations. Typical retention periods:
- Task-proof photos — deleted from storage as soon as the parent approves or rejects the task; photos of submissions that are never reviewed are cleaned up after 14 days.
- Support reports and attached screenshots — up to 180 days.
- Child-connection invite codes — 24 hours.
- Rate-limit and abuse-prevention records — hours to days.
- Crash diagnostics (Firebase Crashlytics) — about 90 days.
- Purchase and billing records — as long as required for accounting, fraud prevention, and legal obligations.
- Account, family, and child profile data (including the parental consent record) — until the family deletes it or the account is deleted.
Backups may retain deleted data for a short additional period. Parents can delete their family or account data using in-app controls where available or by request. See the Data Deletion page for steps and details.
Security
We use technical and organizational safeguards appropriate for a family app, including authentication, authorization rules, Firebase security features, App Check, encryption in transit, and abuse-prevention controls. No service can guarantee perfect security, so keep account credentials private and report suspected unauthorized access promptly.
Your privacy rights
Depending on where you live, you have rights over your personal information. Under the GDPR and UK GDPR these include the right to access, correct, delete, restrict, or object to processing, the right to data portability, and the right to withdraw consent at any time. Parents and guardians can exercise these rights on behalf of their children.
You can exercise most rights using in-app controls (for example editing profiles, or deleting your account and family) or by contacting support@kudobee.com. We respond within the time required by law (generally within 30 days). See the Data Deletion page for deletion specifics.
If you are in the EEA or the UK and believe we have not handled your data properly, you may lodge a complaint with your local data protection authority (for UK users, the Information Commissioner's Office (ICO)). As the controller is established outside the EU (Ukraine), you can also contact the controller directly using the details under Contact below.
U.S. state privacy rights
If you live in California or another U.S. state with a privacy law, you may have the right to know what personal information we collect, to access or delete it, to correct it, and not to be discriminated against for exercising these rights. Kudobee does not sell your or your children's personal information and does not share it for cross-context behavioral advertising, as those terms are used under California law. We do not knowingly sell or share the personal information of anyone under 16. The categories of information we collect and the purposes are listed above under "Information we collect" and "How we use information." To exercise these rights, contact support@kudobee.com.
Changes to this policy
We may update this policy as the app changes or legal requirements evolve. Material updates are reflected by changing the "Last updated" date and, when appropriate, by notice in the app or by email.
Contact
- Privacy contact
- support@kudobee.com
- Data controller
- Volodymyr Pletnov, an individual (natural person), Ukraine
- Product
- Kudobee — kudobee.com