Introduction
KidCanvas ("we," "our," or "us") is committed to protecting the privacy of our users, especially children's information. This Privacy Policy explains how we collect, use, and protect your data when you use our iOS app and web application.
Information We Collect
Account Information
- Email address (for account creation and login)
- Name (optional, for personalization)
- Password (securely hashed, never stored in plain text)
Family & Children Information
- Child names and birth dates (to organize artwork by age)
- Family group names
- Artwork images and metadata (titles, dates, tags)
Usage Information
- Aggregate page views, counted by Vercel Analytics. It sets no cookies, does not follow you to other sites, and never receives your artwork, your children's names, or your stories.
- The website also uses Google Analytics to understand how visitors find and use it. It sets first-party cookies and sends usage data (pages viewed, device type, approximate location) to Google. It never receives your artwork, your children's names, or your stories. The iOS app contains no analytics at all.
- Device information for troubleshooting
How We Use Your Information
- To provide and improve our services
- To organize and display your family's artwork
- To enable sharing with family members
- To process payments for premium features
- To send important account notifications
Data Storage & Security
Your data is stored securely using industry-standard practices:
- Database: Supabase (PostgreSQL with Row Level Security)
- Image Storage: Supabase Storage (encrypted at rest)
- Image addresses: each artwork image is served from its own address containing two random identifiers. The address cannot be listed or guessed, but anyone you send it to can open that image without signing in. Expiring signed links are in progress.
- Payments: Stripe (PCI-compliant, we never see your full card number)
- Encryption: All data transmitted via HTTPS/TLS
Third-Party Services
We use the following third-party services:
- Supabase: Authentication, database, and image storage
- Stripe: Payment processing
- Vercel: Web hosting
Children's Privacy (COPPA)
KidCanvas is designed for parents and guardians to manage their children's artwork. We do not collect personal information directly from children. All child profiles are created and managed by adult account holders.
We collect only the minimum information necessary: child's name (or nickname) and birth date to calculate their age when artwork was created.
Data Sharing
We do not sell your data. We only share data:
- With family members you invite to your family group
- Via public share links you explicitly create
- With service providers necessary to operate our app
- When required by law
Your Rights
You have the right to:
- Access: Request a copy of your data
- Correct: Update inaccurate information
- Delete: Request deletion of your account and data
- Export: Request a copy of your artwork and data
- Opt-out: Unsubscribe from marketing emails
Data Retention
We retain your data as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required for legal or business purposes.
Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
Support: Visit our Support Page
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the app.