Privacy Policy

Version 2026-10-02 · Effective October 2, 2026 · Kiddlewood is operated by Tosemum Holdings LLC, an Arizona limited liability company ("Kiddlewood," "we," "us").

1.Who uses Kiddlewood

Kiddlewood accounts are created and controlled by adults: parents, legal guardians, and representatives of local businesses. The app is 18+, and children do not use the Service themselves. All information about children in Kiddlewood is entered by, and remains under the control of, the parent or guardian who owns the account, with their consent recorded at the time it is added.

2.Information we collect

Account information

• Email address and password. Passwords are stored hashed by our authentication provider; we never see or store them in plain text.
• For parent accounts, your date of birth is asked at signup to confirm you are an adult. We keep only the year of birth, together with a record that you confirmed you are over 18 and the parent or guardian of any child you add.

Profile information you choose to add

• Your name, bio, interests, and an optional profile photo (of you, the adult).

Children's information entered by the parent

• A first name or nickname and an age for each child. Only you can see a child's name and age; other users see a count of children and their age ranges (Section 3). That is the extent of it: we do not collect children's photos, birth dates, contact information, or any information from a child directly.

Location

• Your exact position never leaves your phone. When you set or update your area, the app reads your device's position and, on the device, rounds it to a point on a grid about half a mile wide. That rounded point is sent to our server, which rounds it again before storing it, and from our server to Google to find the name of the surrounding area, such as a suburb or town. We store the rounded point and the area name, nothing more precise. If our server cannot be reached, the app asks your phone's own location service (Apple or Google) to name the rounded point instead.
• If you type a city, ZIP or postcode instead of using your device's position, that text is sent through our server to Google to find a matching area and a rounded point.
• Other families only ever see an area name and a distance range, such as "1 to 3 mi away", never a map or coordinates.
• Each time you open the app with location permission on, the app checks on your phone whether you are more than about 50 miles from your saved area, so that it can offer to update your area if you appear to have moved. Only a count of days away and the time of the last check are saved. If the app offers to update your area, the rounded point is named as described above; otherwise the position is not sent anywhere.
• Older Android versions of the app worked differently: they sent your device's exact position directly to Google to find the area name, without rounding it first. Updating to the latest version from Google Play stops this.

Content you create

• Introductions, playdates and activities you post, comments, neighbourhood alerts, messages you send (one-to-one and in your neighbourhood group), and reports you submit.

Business information (Business accounts)

• Business name, category, description, contact details, website, address, logo, listings, and subscription status. Business contact details and address are public-facing by design: that is the point of a listing.

Push notifications

• If you allow notifications, your phone gives the app a push token: a code issued by Expo's push service that identifies this app on this device, so that a notification can be delivered to it. We store the token with your account, along with whether the device is an iPhone or an Android phone. We do not store any other device identifier.
• We send a notification when someone sends you a message, asks to connect with your family, or accepts your connection request. A notification contains the other person's display name and a short fixed line such as "Sent you a message". It never contains the text of a message.
• The same items also appear in the in-app notifications list, together with a once-a-day summary of interest in activities you posted. That summary stays in the app and is never sent as a notification.

Technical information

• Session tokens that keep you signed in, and the routine server logs kept by our hosting provider. The app contains no analytics, crash-reporting or advertising software.

3.What other users can see

4.Children's information

Information about children in Kiddlewood is provided and controlled by the parent or guardian who owns the account, and we treat it with the highest care:

• We use it only to provide the app's features to that family, for example showing other families a count and age ranges so playdates can be matched by age.
• We never use children's information for advertising or marketing, never sell it, and never permit third parties to collect it from the app for their own purposes.
• Children's names and ages are visible only to the parent who entered them. Other users see only a count and age ranges.
• Parents can review, update, or delete their children's information at any time in the app, and can delete the entire account, which removes the family's information as described in Section 7.
• Parental consent is requested and recorded when a child's information is added. If you believe a child's information was provided or collected contrary to this policy, contact privacy@kiddlewood.com and we will delete it.

5.How we use information

• To run the Service: accounts, profiles, discovery of nearby families, playdates, messaging, alerts, and Business listings.
• For safety: operating report and block tools, reviewing reported content, moderating using manual and automated tools, enforcing our Terms, and meeting our legal reporting obligations (Section 8).
• To communicate with you: transactional email such as signup confirmation and password reset codes, and the push notifications described in Section 2. We do not send marketing email or marketing notifications to families.
• For billing: managing Business subscriptions through Stripe.

6.Service providers

We share information only with the providers that run the Service, and only as needed to run it:

• Supabase: database, authentication, file storage, and the server functions that geocode locations, send notifications and delete accounts.
• Stripe: payment processing for Business subscriptions. Your card details go directly to Stripe; we never store card numbers.
• Resend: delivery of transactional email (confirmations, reset codes).
• Expo: app build and update infrastructure, and push notification delivery. Expo's push service receives your push token and the notification text and passes them to Apple or Google.
• Apple and Google: app distribution through their stores, and delivery of push notifications to your phone through Apple's and Google's notification services. Your phone's own location service (Apple or Google) may also be asked to name your rounded location point, as described in Section 2.
• Google Maps Platform: converting a rounded location point, or a place name you type, into an area name. Requests go through our server, which does not log the point or the text you typed.
• Content-safety screening: content you submit, including message text, is screened by our own systems (Section 8). We do not currently send it to any outside provider for screening. To help detect content that violates our Child Safety Standards or community rules, it may in future also be processed by trusted third-party safety providers acting on our behalf (such as OpenAI’s moderation service, or Microsoft Azure or Google content-safety services), which would process content only to provide the screening service and would not use it to train their models.

We use no advertising networks and no third-party analytics. We may also disclose information if required by law, legal process, or to protect the safety of a child or any person.

7.Retention and deletion

• We keep your information while your account is active.
• Deleting your account (Settings → Delete My Account) removes your profile, your family's information, your photos, your posted activities, comments and alerts, your messages and connections, your notifications, your push tokens, and your terms acceptance record from the live service. Deletion is immediate and permanent. See our Delete Your Account page.
• Some records are kept after deletion where the law requires or a legitimate need exists: billing records for Business subscriptions; the parental consent log, which records that consent was given for a child's information and when; and safety-report records as described in Section 8, with your account identifier removed. Residual copies in routine backups cycle out on a limited schedule.

8.Safety disclosures and legal reporting

Content you submit to Kiddlewood, including profile text, activity listings, alerts, comments and messages, is automatically screened by our own systems for content that may indicate a safety risk. Content that is flagged may be reviewed by a member of our safety team.

Kiddlewood has zero tolerance for child sexual abuse and exploitation. If content or conduct on the Service appears to involve child exploitation, we report it to the National Center for Missing & Exploited Children (NCMEC) and cooperate with law enforcement. Federal law (18 U.S.C. §2258A) requires us to preserve information related to such reports for an extended period, currently one year, and we do so even if the associated account is deleted. Reports you submit through the in-app Report tool, including a copy of the reported content, are retained so we can review them, act on them, and meet these obligations; the person you report is not told who reported them.

9.Security

Passwords are hashed. Database access is protected by row-level security so users can only reach the data the app intends for them. Profile photos and business logos are stored at unlisted web addresses; they are not private files, so do not upload a photo you would not want seen. Access to production systems is limited. No online service can promise perfect security, but Kiddlewood was designed privacy-first: the most important protections, children's names and ages hidden from other users and only rounded locations ever stored, are built into how the app works, not bolted on.

10.Your rights and choices

• You can access and correct your profile and family information in the app at any time, and delete your account in Settings.
• Depending on your state, you may have additional consumer-privacy rights, such as access, deletion, correction, and portability. You can exercise them in-app or by emailing us.
• We do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of on that front.
• Location permission is controlled by your device settings. If you do not grant it, you can type a city, ZIP or postcode instead, and the app's area features work from the area you have set.
• Push notifications can be turned off at any time in your phone's settings: on iPhone, Settings, Notifications, Kiddlewood; on Android, Settings, Apps, Kiddlewood, Notifications. Signing out of the app removes that device's push token from our servers, and deleting your account removes all of them.

11.California residents

If you are a California resident, you have the right to know what personal information we collect and how we use it (described above), to request access to or deletion of your information, to correct it, and to not be discriminated against for exercising these rights. We do not sell personal information and do not share it for cross-context behavioral advertising. To make a request, email privacy@kiddlewood.com; we will verify and respond as required by law.

12.Changes to this policy

If we make material changes to this policy, we will notify you in the app or by email before they take effect. The version and effective date at the top always reflect the current policy.

13.Previous versions

• Version 2026-07-28, effective July 28, 2026 to October 1, 2026.

14.Contact

Tosemum Holdings LLC · Arizona, USA
Privacy requests: privacy@kiddlewood.com
General & support: hello@kiddlewood.com
Child safety: safety@kiddlewood.com