Privacy Policy
Kid Defense is built for parents. You install it, you control it, and you decide what your child's device can do. This policy explains what information the app handles, what stays on your phone, what leaves it, and the choices you have.
The short version
- Your PIN, app selections, and mode settings stay on your device. Your PIN is stored only as a one-way hash.
- To send notifications and keep your account working, we send a limited device identifier and a push token to our server.
- Subscriptions are handled by Apple and RevenueCat — we never see your card details.
- The location ping is part of the Family by Blood tier and only runs when you request it.
- We do not sell your data, and we do not run advertising.
- Kid Defense is a parent-facing app. It is not directed to children and has no child accounts.
1. Who this policy covers
This policy applies to the Kid Defense iOS app and the website at gokiddefense.com (together, the "Service"), operated by Kid Defense ("we," "us," "our"). The Service is intended for use by adults aged 18 and over — typically a parent or guardian who installs and manages the app.
Kid Defense is not a children's app. It does not create accounts for children, is not listed in the App Store Kids Category, and is not directed to children. A child may physically hold a device that has Kid Defense installed, but the app is owned and operated by the adult.
2. Information that stays only on your device
Some of the most sensitive information never leaves your iPhone. We do not transmit, store, or have access to the following:
- Your PIN. It is stored only as a SHA-256 hash in the iOS Keychain. We never store or receive your actual PIN, and a hash cannot be reversed back into it.
- Your app and category selections. The apps and categories you allow or block for each mode are managed on-device through Apple's Family Controls framework.
- Your mode and configuration settings. Which mode is active and how each mode is set up is kept on your device.
This matches what the app tells you in Settings → Legal: your PIN, app selections, and settings are stored only on this device.
3. Information that leaves your device
For the Service to function — to deliver notifications, keep you signed in, process payments, and power optional features — some limited information is sent to us or to trusted service providers.
Account and notifications (our server)
To register your installation and route push notifications (such as tamper alerts and timer warnings), our backend receives a device or installation identifier and an Apple push notification token. We may also process defense-state events — for example, that a session was locked, unlocked, or that a tamper attempt occurred — so we can send the right alert at the right time and, for Family by Blood subscribers, populate reports. We do not receive your app-selection lists or your PIN through this channel.
Subscriptions and billing
Purchases are processed by Apple's App Store and managed through RevenueCat, our subscription provider. They handle purchase and transaction records and assign an app-level user identifier so your subscription can be restored across your devices. We never receive or store your credit card number or full payment details.
Location ping (Family by Blood tier)
If you subscribe to Family by Blood and tap to locate a device, the app uses Apple's CoreLocation to determine the device's location at that moment. Location is accessed only on demand when you request it — Kid Defense does not track location continuously in the background.
4. Apple Screen Time & Family Controls
Kid Defense uses Apple's Family Controls, Managed Settings, and Device Activity frameworks to apply restrictions and run timed sessions. Information made available through these frameworks is governed by Apple's privacy protections. We use it solely to enforce the lockdown you configure. We do not sell it, and we do not use it for advertising or analytics profiling.
5. How we use information
- To operate the lockdown and apply the mode you select.
- To deliver notifications you've enabled, such as timer warnings and tamper alerts.
- To process and restore your subscription.
- To generate usage and attempt reports (Family by Blood tier).
- To locate a device when you request it (Family by Blood tier).
- To respond to your support requests.
- To maintain the security and reliability of the Service and to meet legal obligations.
We do not use your information for third-party advertising, and we do not sell or rent it.
6. Service providers we share with
We share limited information with the providers below strictly so they can perform their function for us. They are not permitted to use it for their own purposes.
| Provider | Purpose | What it handles |
|---|---|---|
| Apple | App distribution, Screen Time frameworks, payments, push delivery | Purchase records, push tokens, framework data |
| Railway | Backend hosting (registration, push routing, sync) | Device identifier, push token, defense-state events |
| RevenueCat | Subscription management | Purchase/transaction data, app user ID |
We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of our users.
7. Children's privacy (COPPA)
Kid Defense is operated by and for parents and guardians. We do not knowingly create accounts for children or collect personal information directly from children. The app does not ask a child to provide personal information.
If, as a parent, you enter a child's first name or nickname (for example, to label each child's profile), that information is provided by you, kept to a minimum, and used only to operate the features you've enabled. It is never used for advertising. If you would like us to delete information you've provided, contact us at the address below.
8. Your privacy rights
Depending on where you live, you may have the right to access, correct, or delete personal information we hold about you, and to ask us to stop certain processing. To exercise any of these rights, email us at support@gokiddefense.com and we will respond as required by law.
California residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law.
9. Data retention
We keep information only as long as needed to provide the Service and meet legal, accounting, or security obligations. On-device data is removed when you delete the app. Account and subscription records are retained for the life of your subscription and a reasonable period afterward. Defense events used for alerts and reports are processed to deliver those features and are not retained to build a profile of you or your child.
10. Security
We use industry-standard measures to protect your information, including hashing your PIN on-device, encrypting data in transit, and limiting access to our systems. No method of transmission or storage is perfectly secure, but we work to protect your information and to address any issues promptly.
11. Future features
We are developing additional features, including a per-user phone number capability (via Twilio) planned for a future version. This policy describes the Service as it functions today. If we introduce features that change how we handle your information, we will update this policy before those features become available to you.
12. Changes to this policy
We may update this policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.
13. Contact us
Questions about this policy or your information? Reach us at:
Kid Defense
Email: support@gokiddefense.com
Web: gokiddefense.com