Privacy Policy

This Privacy Policy applies to:

• the Kidaloop website
• the Kidaloop web application
• the future Kidaloop iOS application
• the future Kidaloop Android application
• Kidaloop support services
• Kidaloop Points and related digital services

Separate terms may apply to future paid services such as delivery, collection or Kidaloop+.

Kidaloop accounts are for adults aged 18 or over. Children do not create accounts. Parents or adult caregivers control any child-related profile information added to their account.

A. Account information

• first name and surname
• date of birth
• email address
• phone number
• account authentication information
• account preferences
• approximate location or selected area

Your date of birth is used to confirm that you are an adult. It is not displayed to other users.

B. Child profile information

A parent may optionally create a child profile containing a first name or nickname, age group, height, clothing size, shoe size and interests.

• Children do not create accounts.
• We do not ask for a child's email address or phone number.
• We do not ask for a child's precise location.
• We do not ask for photos of children.
• Child profile information is private to your account.

C. Item listing information

When you post an item we collect item photographs, title, category, size, condition, description, approximate area, listing status, requests, handover status and Item Journey (Loop) information. Published listing content may be visible to other Kidaloop users.

D. Photos and camera access

Kidaloop may ask for access to your camera or photo library. Access is used only when you choose to photograph or upload an item or a support attachment, and is requested only at that moment.

Item photographs are processed on your device before upload to resize and compress them and to remove embedded metadata, including GPS location. Kidaloop may also generate thumbnails and, in future, remove or replace image backgrounds to prepare a consistent listing image. If a third-party image-processing service is introduced, this policy will be updated.

E. Location information

Kidaloop uses two kinds of location:

• A manually selected area or town, which you choose yourself.
• Approximate device location, only when you grant permission and choose a feature such as "Near me".

Location is used to show nearby items, estimate distances, match Needs, find Kidaloop Points and show pickup or drop-off information. Coordinates are rounded before they are stored. Kidaloop does not use continuous background location and does not keep a location history. If you refuse permission, you can select an area manually. Exact home GPS coordinates are not displayed to other users.

F. Messages and community activity

Kidaloop processes item requests, conversations and messages, favourites, Needs, handover status, reports, blocks, notifications and Loop history.

Private messages are visible only to the participants of the conversation, and to authorised Kidaloop personnel where necessary for support, safety, moderation or legal obligations. Messages are protected in transit and at rest by our infrastructure but are not end-to-end encrypted.

G. Support information

When you contact Kidaloop Support we may process your name, email, support category, message, an optional phone number, an optional screenshot or attachment, the support ticket ID and correspondence history. This information is used to respond to and manage your request.

H. Device and technical information

Like most online services, our hosting infrastructure may process technical information such as browser or device type, operating system, app version, IP address, error information and security logs, to operate and protect the service. Kidaloop does not collect advertising identifiers.

Information may come from:

• information you provide directly
• your activity inside Kidaloop
• authentication providers you choose to sign in with
• device permissions you explicitly grant
• technical operation and security logs
• support requests
• future payment or service providers, where applicable

Kidaloop allows sign-in with an email address and password, with Google and with Apple. When you use Apple or Google, Kidaloop receives only the information made available through your settings and the provider's sign-in process, typically your name and email address. Kidaloop never receives your Apple or Google password.

If you use Apple's "Hide My Email", Kidaloop receives a private relay address and works normally with it.

Kidaloop may use information to:

• create and maintain accounts and confirm adult eligibility
• operate child profiles
• publish and manage listings
• match available items with active Needs and calculate approximate proximity
• enable requests, handovers and messaging
• maintain Item Journeys and "Another Loop"
• show your family's activity and history
• provide customer support
• send service notifications
• prevent abuse and fraud and moderate reports
• protect platform security and improve reliability
• fulfil legal obligations
• provide future optional paid services

Kidaloop does not use your information for advertising profiling.

Kidaloop initially operates in Cyprus and the European Union. Depending on the activity, we rely on one or more of the following legal bases under the GDPR:

• Performance of a contract: providing the service you have asked for, such as your account, listings, requests and messages.
• Legitimate interests: for example keeping the community safe, preventing fraud and improving reliability.
• Consent: for example optional device location, and agreeing to these terms when you join. You can withdraw consent at any time.
• Legal obligations: where the law requires us to keep or disclose information.

Depending on the feature, other Kidaloop users may see:

• a privacy-safe display name, such as first name and surname initial
• your approximate area
• your public item listings and their condition and details
• Need information that does not reveal sensitive child information
• relevant community activity

They do not see your full surname, date of birth, email, phone number, exact home address, precise GPS location, private child profiles, private support requests, or conversations they are not part of.

• Camera: only when you choose to take an item or support photo.
• Photos / Photo library: only when you choose to upload an image.
• Location: for nearby discovery, approximate distance and Kidaloop Points, when you choose to allow it.
• Notifications: for service messages such as Need matches, requests, messages, handover updates, "Another Loop" and account or security notices.

Permissions are requested at the moment they are needed, and you can change them at any time in your device settings. Kidaloop does not request microphone, contacts, health, Bluetooth or tracking permissions.

You receive in-app notifications, and in the mobile apps you may choose to receive optional push notifications, for example when a matching item is available, an item is requested, a request is accepted, a message arrives, a handover is updated, an item goes on "Another Loop", Support replies, or for security reasons.

You can turn optional push notifications off in your device settings. Important account and security notifications may still be sent where necessary.

Kidaloop may use privacy-conscious product analytics to understand app performance, feature usage, crashes and errors, and to improve the product. We do not send message content, phone numbers, email addresses, dates of birth, precise home addresses or private child information to analytics. If an analytics provider is introduced, this policy will be updated.

Kidaloop uses trusted service providers for functions such as cloud hosting and database, authentication, email, push notifications, image processing, analytics, error monitoring, maps and, in future, payment processing.

Providers receive information only as necessary to perform their service and under appropriate contractual and privacy safeguards. This policy will be updated as specific providers are confirmed.

Kidaloop does not sell personal information in exchange for money. If Kidaloop ever introduces advertising or cross-service tracking, this policy and the app-store disclosures will be updated beforehand.

Kidaloop does not show third-party behavioural advertising and does not track you across other companies' apps or websites.

We keep information only for as long as necessary to operate your account, provide the service, keep the community safe, prevent fraud, resolve disputes and meet legal obligations. When information is no longer needed, it is deleted or anonymised.

You can delete your account yourself:

• In the app: Profile → Settings → Privacy & Data → Delete Account
• On the web: kidaloop.app/delete-account

When you delete your account, your private information is removed: your profile, date of birth, phone number, child profiles, Needs, saved items and notifications. Listings that are still available are removed and open requests are cancelled. Where an item has already been shared with another family, the shared history (such as the Item Journey and messages the other family is part of) is kept in anonymised form and shown as "Former member". Some limited records may be retained where reasonably required for legal or security reasons. Your sign-in is then removed and you cannot log back in to that account.

Where applicable under data protection law, you may:

• access your personal data
• correct your account information
• request a copy or export of your data
• request deletion
• withdraw consent where processing relies on consent
• object to or ask us to restrict processing

You can correct most information directly in your profile. For other requests, contact support@kidaloop.app or use Support and choose "Privacy & My Data". You also have the right to complain to your local data protection authority.

Kidaloop is designed for adult parents and caregivers. Children do not create Kidaloop accounts.

Child-related information should be limited to what is useful for family matching, such as size, age range and interests. Please do not include unnecessary personal information about children in listings, Needs or messages. Children's profiles are never displayed publicly.

Kidaloop uses reasonable technical and organisational measures to protect information, including authentication, access controls, database security policies, restricted private storage for photos and attachments, encryption provided by our infrastructure, role-based administration and security monitoring. No online service can guarantee absolute security, so please keep your sign-in details safe.

Some service providers may process data outside your country. Where required, Kidaloop will use appropriate legal safeguards for international transfers.

Kidaloop investigates suspected security incidents and takes appropriate action, including notifying affected users and authorities where legally required.

This policy may change as Kidaloop develops. We will update the "Last updated" date when material changes are made and, where appropriate, notify you of significant changes.

For privacy questions or requests, write to support@kidaloop.app or visit Support. See also our Terms of Use.