KinderFlow Privacy Policy
Effective date of this policy: September 27, 2026
KinderFlow ("KinderFlow", "we", "our", or "us") is a private communication service that helps schools, family child care homes, daycare providers, preschools, early-learning programs, and other participating facilities communicate with authorized families.
This Privacy Policy explains how KinderFlow collects, uses, discloses, retains, and protects information when a parent, legal guardian, educator, administrator, or other authorized adult uses the KinderFlow mobile app, desktop app, website, or related services (collectively, the "Service").
KinderFlow is not a public social-media platform. We do not sell or rent personal information to advertisers or data brokers, and we do not use child records for behavioral advertising.
1. Authorized Adult Use
KinderFlow accounts are intended for authorized adults. A parent or family account may be created only by a person who is at least 18 years old and is the child's parent or legal guardian, or another adult expressly authorized by the participating facility to receive the child's information.
Children do not create KinderFlow accounts, independently complete registration, or directly submit personal information through the Service. This includes young children served by early-childhood programs, such as children approximately 18 months through five years of age.
A parent or invitation code helps connect an account to an existing child record. It is not, by itself, proof of identity or parental authority. Users must protect invitation codes, passwords, and other account credentials and must not permit a child or unauthorized person to use their account.
2. Information We Collect
A. Adult Account Information
- Parent, guardian, educator, administrator, or other authorized adult name
- Email address and telephone number
- Display name and mailing address, when provided
- Relationship to a child and facility or classroom affiliations
- Authentication and account identifiers
- Communication and notification preferences
- Privacy acknowledgments, permissions, and related records
B. Child and Care Information
A participating facility and its authorized staff may provide or create information such as:
- Child name, first name, nickname, and date of birth
- Facility, classroom, group, enrollment, and attendance information
- Daily reports, meals, naps, diapering, toileting, care notes, and classroom participation
- Learning, developmental, social, and emotional observations
- Allergies, health or safety alerts, special needs, and care instructions
- Emergency and physician contact information maintained by the facility
- Child profile images, classroom photographs, videos, artwork, and activity information
C. Communications and Technical Information
- Messages, announcements, reports, notifications, and read status
- App opens, session duration, and features used
- Device type, operating-system version, app version, and technical identifiers
- Crash reports, diagnostics, security logs, and general geographic region
KinderFlow does not require Social Security numbers, financial account information, genetic information, or precise real-time location for ordinary family registration.
3. Sources of Information
Information may come from:
- A parent, legal guardian, or other authorized adult
- A participating facility and its authorized educators, caregivers, or administrators
- Facility records used for enrollment, care, emergency, health, safety, or licensing purposes
- The device, app, authentication provider, and technical systems used to operate and secure KinderFlow
KinderFlow is not designed to collect information directly from a child.
4. How We Use Information
We may use information to:
- Create, authenticate, and administer authorized adult accounts
- Connect an authorized family member with the correct child, facility, and classroom
- Deliver classroom announcements, daily reports, reminders, emergency notices, and care information
- Support a child's care, health, safety, and educational development
- Display allergy, special-care, and safety alerts to authorized personnel
- Synchronize information between authorized facility and family applications
- Provide support and maintain, secure, diagnose, and improve the Service
- Meet applicable child-care licensing, recordkeeping, safety, court, and legal requirements
- Record privacy acknowledgments and optional media choices
5. What Authorized Families Can See
An authorized family member may see classroom-level information for the classroom connected to the account, including classroom announcements, general classroom updates, and shared daily information. Classroom media is available only when the family's classroom-media status is enabled as described below.
Child-specific records are limited to authorized adults connected to that child and authorized facility personnel with a legitimate need. A family cannot use KinderFlow to view another child's individual daily report, date of birth, attendance record, allergy or health information, special needs, care notes, developmental observations, family contact details, or other private child record.
Classroom photographs or videos may include more than one child. When a facility shares approved group media, authorized families in that classroom may see the children appearing in that media. This limited classroom visibility does not give families access to another child's private record.
6. Classroom Photographs and Videos
Classroom-media authorization is separate from acknowledging this Privacy Policy. When a participating facility has a valid, documented authorization from a child's parent or legal guardian for private classroom sharing, the facility may designate that child and family as Class Media Enabled. This status must be based on an affirmative authorization, such as a signed enrollment media release or a clear electronic choice; it is not created merely by silence, continued use of KinderFlow, or a preselected consent box. If the facility cannot verify an authorization, the status should remain Class Media Restricted until an authorized parent or legal guardian makes an affirmative choice.
A facility's separate permission for public, promotional, website, or social-media use does not by itself authorize sharing through KinderFlow. To mark Class Media Enabled, the facility must verify that the parent or legal guardian authorized private sharing with families in the relevant classroom, or the parent or guardian must make that choice through KinderFlow. KinderFlow does not inherit or exercise any broader public or social-media rights contained in a facility's separate paperwork.
When Class Media is Enabled, authorized educators may upload approved classroom photos or videos, including group media. Those items may be viewed by authorized facility personnel and authorized families connected to that classroom. Enabling private classroom media authorizes only this limited classroom use. It does not authorize KinderFlow or a participating facility to publish the media on social media, public websites, advertisements, fundraising materials, or other public or promotional channels. Any such use requires a separate, specific authorization.
When Class Media is Restricted, the child should not be intentionally included in new identifiable photos or videos shared with other families through KinderFlow, and the restricted family account should not receive or access classroom photos or videos, including individual photos of that child and group media. The restriction does not prevent account creation or access to necessary non-media communications, reports, or safety information. A parent or legal guardian may change the choice prospectively through the participating facility or KinderFlow support. A facility may need reasonable time to verify authority, update the status, and address already-published media.
Families must not download, repost, forward, publish, or otherwise distribute information or media concerning another child outside the private classroom community without appropriate permission from that child's parent or legal guardian. KinderFlow and participating facilities do not authorize such redistribution, but no online service can guarantee that an authorized recipient will not take a screenshot, retain a prior download, or misuse information in violation of these rules. A later restriction cannot recall copies already lawfully downloaded or captured by recipients; requests concerning previously shared media will be reviewed in light of the facility's records, other families' rights, and applicable law.
7. AI-Assisted Features
Certain KinderFlow features may use artificial intelligence technologies to assist authorized educators in drafting or refining classroom reports and summaries. Information submitted through an AI-assisted feature may be processed by a technology service provider supporting that feature.
Educators remain responsible for reviewing, correcting, approving, and deciding whether to share the final content. AI-generated content is not an independent medical, psychological, developmental, or educational assessment and should not be treated as professional advice.
8. Limited Disclosure
We may disclose information only as reasonably necessary:
- To the authorized family members connected to the relevant child or classroom
- To authorized facility personnel who need the information to perform their duties
- To service providers that support authentication, cloud storage, hosting, notifications, analytics, crash reporting, support, or AI-assisted features, including Google Firebase where applicable
- To emergency, medical, child-protection, licensing, court, government, or law-enforcement recipients when required or permitted by law or reasonably necessary to protect safety
- To protect the rights, safety, and security of a child, family, facility, user, KinderFlow, or the Service
Service providers may process information only to perform services for KinderFlow and are expected to protect the information under applicable law and service arrangements. KinderFlow does not make child records publicly available and does not sell or rent user data to advertisers or data brokers.
9. Data Storage and Security
KinderFlow uses trusted cloud infrastructure, including Google Firebase services, to store and process data. We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, loss, alteration, or misuse. Safeguards may include authenticated accounts, role-based access controls, encrypted network transmission, restricted administrative access, and security logging.
No internet-based service or electronic storage system can guarantee absolute security.
10. Data Retention and Account Deletion
KinderFlow retains information only as long as reasonably necessary to provide and secure the Service, maintain facility records, meet applicable licensing or legal obligations, resolve disputes, and enforce agreements. Retention periods may vary according to the type of information, the facility's instructions, and applicable legal requirements.
A signed-in parent may permanently delete the parent account through Profile → Account Management → Delete Account. After identity verification, deletion removes the parent authentication account, profile, access and affiliation records, notification read history, parent-to-child access links, limited parent-app activity sessions, and KinderFlow preferences and cached media stored on that device.
Deleting a parent account does not automatically delete child records, daily reports, attendance records, emergency information, classroom notes, photos, or videos created or controlled by a participating facility. Those records may be retained for care, safety, licensing, legal, or record-integrity purposes. A parent seeking removal of a facility-controlled record should contact the facility or KinderFlow support.
Limited backup, security, fraud-prevention, dispute, and legal-compliance records may remain until securely deleted through normal processes. Aggregated or de-identified information that no longer identifies a user may also be retained.
11. Privacy Rights and Choices
Depending on applicable law and who controls the record, an authorized adult may request to:
- Access eligible information associated with the adult or child
- Correct inaccurate information
- Request deletion of eligible information
- Request a copy of eligible information
- Enable or restrict classroom media prospectively and request review of previously shared media
- Receive information about applicable data practices
We may verify the requester's identity and authority before acting. Some requests must be directed to the participating facility because it created or controls the child record. Information may be retained where required or permitted for care, licensing, safety, legal compliance, fraud prevention, dispute resolution, or the protection of another person's rights.
To the extent the California Consumer Privacy Act applies, California residents may have additional rights to know, correct, or delete personal information; opt out of a sale or sharing covered by that law; limit certain uses of sensitive personal information; and exercise applicable rights without unlawful discrimination. KinderFlow does not sell personal information.
A verified account or data-deletion request may be submitted through:
12. Children's Privacy
KinderFlow is designed for adult-operated facility and family accounts. We do not knowingly permit a child to create an account or independently submit personal information through the Service.
If KinderFlow learns that information was submitted directly by a child through an unauthorized account, we will take appropriate steps to investigate, restrict the account, and delete the information where required. If a future feature is designed to collect information directly from a child, KinderFlow will evaluate and implement any additional notice, verifiable-parental-consent, minimization, access, deletion, and security measures required before enabling that collection.
13. Analytics, Advertising, and Tracking Choices
KinderFlow may use Firebase Analytics, crash-reporting tools, and similar services to understand product usage, diagnose technical problems, protect the Service, and improve reliability. These tools may process device-level or technical information.
The parent app may also send a limited, account-linked activity trail, such as app foreground or background state, screens or features opened, event time, app and operating-system version, and broad success or failure status. This trail does not include message text, report content, child names or identifiers, photos, videos, or other classroom content. It is available only to authorized KinderFlow global administrators and authorized owners of the schools currently connected to the account for support, reliability, and product improvement; teachers cannot access it. Activity sessions are retained for up to 30 days and are removed earlier when the associated parent account is deleted.
KinderFlow does not use information collected through the Service for cross-context behavioral advertising and does not permit advertising networks to track users through the Service. Because KinderFlow does not engage in this form of tracking, a browser "Do Not Track" signal does not change our practices. Where a legally recognized opt-out preference signal applies, KinderFlow will process it as required by law.
14. Changes to This Policy
We may update this Privacy Policy when our practices, features, service providers, or legal obligations change. The current policy and its effective date will be posted in the application and on the KinderFlow website. If a material change affects the collection, use, or disclosure of personal information or user rights, we will provide additional notice or request a new acknowledgment or consent where required by law.
15. Contact KinderFlow
Privacy questions, requests, or concerns may be sent to KinderFlow: