Privacy policy

1. Our core commitment

At ArtKiddo, protecting the privacy of families and children matters above all. The app is designed to work on your device first, with an account and cloud backup both completely optional.

2. No third-party ads, no advertising trackers

ArtKiddo contains no third-party advertising, no invasive advertising trackers, and no data resale. Your data and children's creations will never be used to feed external advertising networks.

3. Data stored locally on your device

By default, all drawing photos, optional voice notes told by the child, entered names, and your children's birth dates are stored exclusively on this device. Without an account, no data leaves your device.

4. Required system permissions

• Camera: used only to photograph and digitize your children's drawings, or to scan a family invitation code from another parent.
• Photo library: used only if you choose to import an existing drawing from your device, or to save an artwork to your photo library upon request.
• Microphone: used only if you choose to record an audio story told by your child about their drawing. Permission is only requested on your first tap of the record button and is never accessed without your direct action.
• Notifications: used to alert you when another family member adds an artwork (see section 5) and to show backup progress notifications for your drawings. This system permission is never requested automatically: it is only requested from the app's Settings, at your initiative, and you can withdraw it at any time in your system settings.

5. Cloud backup and family sharing (optional)

If, and only if, you decide to turn on backup or create a family web sharing link:

• Email and password: your email address and password are used to authenticate your secure parent account, link your family household, and manage your backups. Your email address may also be used to send you service notifications, product updates, and commercial or promotional communications regarding ArtKiddo offers and features. You can unsubscribe from these promotional emails at any time using the unsubscribe link included in each email or by contacting [email protected].
• Encryption and hosting: photos, audio files, and related metadata are encrypted in transit (HTTPS / TLS) and stored on secure infrastructure (Cloudflare R2 and Supabase database protected by strict Row Level Security).
• Shared household between parents: two parents in the same household can sync and manage their children's gallery together by linking via a secure invitation code.
• Secure access for family: a shared web gallery is only accessible to people holding the private link generated by the parent (no account or app needed for them). You can revoke this link at any time.
• Remote push notifications: without an account, nothing is sent to Google or Firebase: Firebase is not initialized and no token is created. Once you are signed in, the app initializes Firebase; if you have also allowed notifications in your system, Google's push service (Firebase Cloud Messaging, our processor for this delivery) creates a device token, which is registered on our servers so that other members of your family can be notified when an artwork is added. Google therefore receives the technical identifiers needed for delivery, only while you are signed in with notifications allowed. The data processed is: the device token (FCM token), the platform (Android or iOS), the app language (French or English), and the identifier of the account the token is linked to. The notification text contains the first name of the adult who added the artwork and that of the child concerned; it contains no image. When you sign out, the token is removed from our servers and deleted from the device, and notifications already displayed are cleared; if the device is offline at that moment, the removal is retried at the next app launch, the next sign-in, or when you return to the app. The token is also deleted when you delete your account. A maximum of 20 devices can be registered per account.
• Children's voice protection: voice stories are excluded by default from shared web links. They can only be heard by relatives if you explicitly enable the "Include child voice notes" option for that link.

6. Permanently deleting your account and data

You have full control over your data. In the app (Settings → Account), the "Delete my account and data" action permanently erases your account, profile, and all drawings stored online, as well as the device tokens used for notifications. You can also choose whether to keep or erase the drawings stored locally on your device.

You can also exercise your rights of access, correction, or deletion by email at[email protected].