Privacy Policy
Last updated: 12 August 2026
KidHub ("we", "us", "our") is currently operated by KidHub, based in the United Kingdom (company registration in progress — this policy will be updated with our registered company details once complete).
We are the data controller for the personal data described in this policy. If you have any questions, contact us at kidhubteam@gmail.com.
This policy explains what data we collect through kidhub.co.uk and app.kidhub.co.uk (the "Service"), why, and what rights you have.
1. Who KidHub is for
KidHub is a productivity tool for parents and guardians to keep track of their children's events, clubs, notes, and activities in one place. KidHub is intended to be used by adults (18+) — it is not directed at, or knowingly marketed to, children. Any information about a child that appears in the app is entered by the parent/guardian account holder for their own personal organisational use.
2. What data we collect
a) Account & profile data (when you register)
- Email address and password (managed securely via Supabase Auth)
- Full name, address (line 1, city, postcode, country), phone number
- Your child's name (as entered by you, for labelling entries within your own account)
b) Content you add to the app
- Calendar events, notes, club/activity details, and any other information you choose to enter about your child's schedule
c) Automatically collected data
- Basic technical data (IP address, browser type, device type) via our hosting and security providers (Render, Cloudflare)
- If you consent to analytics cookies: anonymised/aggregated usage data via Google Analytics (pages visited, time on site, general location at city/country level) — see our Cookie Policy
d) Data if you join our early-access waitlist
- Your email address, submitted via our landing page form (processed by Web3Forms and sent to kidhubteam@gmail.com)
e) Demo mode
If you use KidHub without an account, your data stays in your browser's local storage only — we never receive or store it.
3. Why we collect it & our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Creating and managing your account | Performance of a contract with you |
| Storing your calendar/notes/club data so the app works | Performance of a contract with you |
| Keeping the Service secure (e.g. Cloudflare bot protection) | Legitimate interests |
| Sending you early-access updates if you join the waitlist | Consent |
| Website analytics | Consent (cookie banner) |
| Complying with legal obligations (e.g. responding to a lawful request) | Legal obligation |
We do not sell your data, and we do not use your child's information for advertising or profiling.
4. Who we share data with
We use the following third-party processors to run KidHub. They only process data on our instructions and under their own data protection agreements:
| Processor | Role | Location |
|---|---|---|
| Supabase | Database (Postgres) and authentication | Hosted in the EU (Frankfurt/Ireland region) — no international transfer outside the UK/EEA. See supabase.com/privacy |
| Render | Application hosting | Hosted in the EU (Frankfurt region) — no international transfer outside the UK/EEA. See render.com/privacy |
| Cloudflare | DNS, security, performance | Global network — see cloudflare.com/privacypolicy |
| Google Analytics | Website analytics (only with consent) | May transfer data to the US — Google is certified under the EU-US Data Privacy Framework |
| Web3Forms | Processes the early-access signup form | See web3forms.com/privacy |
Your account and app data (via Supabase and Render) stays within the EU. Where other providers — such as Google Analytics or Cloudflare — may process data outside the UK/EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses or an adequacy decision) as required under UK GDPR.
We do not share your data with any other third party, and we never sell personal data.
5. How we protect your data
- Passwords are never stored in plain text (handled via Supabase Auth)
- Row-Level Security (RLS) is enabled on our database, meaning your data is isolated per account — other users cannot access your records
- Data is transmitted over HTTPS
- We limit access to production data to what's necessary to operate the Service
6. How long we keep your data
We retain your account and content data for as long as your account is active. If you delete your account, we will delete your personal data within a few days, except where we're required to retain it for legal reasons. Waitlist emails are kept until early access launches or you ask us to remove them.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Restrict or object to certain processing
- Data portability (receive your data in a portable format)
- Withdraw consent at any time (e.g. for analytics or waitlist emails)
To exercise any of these rights, email kidhubteam@gmail.com. We'll respond within one month.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO) — ico.org.uk.
8. Children's data
KidHub is designed for use by adults, on behalf of their children. We do not knowingly collect data directly from children, and the app is not intended for direct use by minors. If you believe a child has created an account directly or provided us data directly without a parent/guardian's involvement, contact us and we will delete it.
9. Cookies
See our separate Cookie Policy for full details on cookies and tracking technologies.
10. Changes to this policy
We may update this policy as KidHub grows. Material changes will be reflected in the "Last updated" date, and where appropriate, we'll notify registered users directly.
11. Contact us
Email: kidhubteam@gmail.com
Operator: KidHub (United Kingdom)