Kidfile Privacy Policy

Kidfile is operated by Design Develop Now, Inc. ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information — and your children's information — when you use the Kidfile mobile application (the "App"). Because Kidfile is designed to store and manage sensitive information about minors, we take privacy extremely seriously. Please read this policy carefully. By downloading or using Kidfile, you agree to the practices described below.

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly

When you create an account and use Kidfile, you may voluntarily provide the following categories of information:

• Account information: your name, email address, and password.
• Child profile information: your child's name, date of birth, gender, photo, and any nickname or identifying details you choose to add.
• Medical and health records: allergies, diagnoses, medications, immunization records, insurance policy details (carrier name, policy number, group ID), pediatrician and specialist contact information, and medical visit history.
• Emergency contacts: names, phone numbers, relationships, and any special instructions for caregivers.
• Educational records: school name, grade level, teacher names, report card grades, academic notes, and IEP or 504 plan details.
• Documents and images: any photos or scanned documents you upload or capture through the App, including insurance cards, medical forms, prescriptions, school records, and other files related to your child's care.

1.2 Information Collected Through Device Permissions

• Camera (android.permission.CAMERA): Kidfile requests access to your device's camera solely to allow you to scan and capture documents directly within the App — such as insurance cards, immunization records, prescription labels, school forms, and other child-related paperwork. The camera is activated only when you explicitly choose to scan or photograph a document within the App. We do not access your camera in the background, and we do not use your camera for facial recognition, surveillance, behavioral tracking, or any purpose other than document capture initiated by you.
• Photo Library / Storage Access: If you choose to upload an existing photo from your device's gallery rather than taking a new one, we request read access to your device storage for that specific interaction. We do not continuously scan, monitor, or index your photo library.
• Internet Access: Required to sync your data securely to our cloud servers so your information is backed up and accessible across devices, and to enable the Care Card sharing feature.

1.3 Information Collected Automatically

When you use the App, we may automatically collect limited technical data, including device type and operating system version, app version, crash logs and performance diagnostics, and anonymous usage analytics (such as which features are used most frequently). We do not collect your precise GPS location. We do not collect advertising identifiers or build advertising profiles. If you purchase a subscription, Apple or Stripe handles your payment; we do not see or store your full credit card details.

2. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

• To provide core App functionality — storing, organizing, and displaying your children's profiles, medical records, academic records, emergency contacts, and uploaded documents.
• To enable document scanning — processing images captured via your camera to extract text and auto-fill profile fields (such as reading an insurance card to populate policy details).
• To power Care Card sharing — generating secure, shareable summaries of your child's essential information that you can send to caregivers, family members, schools, or medical providers at your discretion.
• To sync and back up your data across your devices.
• To send you transactional notifications related to your account (such as share confirmations or security alerts).
• To improve App performance, fix bugs, and develop new features based on aggregated, anonymized usage patterns.
• To respond to your support requests.

AI Features: We use Artificial Intelligence (AI) and Optical Character Recognition (OCR) strictly as a tool to help you draft profiles and extract text from uploaded documents. We do NOT use your information or your children's information to serve advertisements, build marketing profiles, sell data to third parties, or train public artificial intelligence or machine learning models.

3. HOW WE SHARE YOUR INFORMATION

3.1 Sharing You Control

Kidfile's Care Card feature allows you to generate a secure link containing selected information about your child (such as allergies, medications, emergency contacts, and medical details) and share that link with people you choose — grandparents, babysitters, daycare providers, co-parents, coaches, or medical professionals. You control exactly what information is included in each Care Card and who receives the link. You may revoke or expire any shared Care Card link at any time.

3.2 Service Providers

We use trusted third-party services to run Kidfile safely. We may share limited information with service providers who assist us in operating the App, including Convex (secure database hosting and data syncing), Clerk (secure user authentication), Stripe / Apple (subscription billing and payment processing), and Sentry (crash reporting and bug fixing). All service providers are contractually obligated to protect your data, use it only for the services they provide to us, and not disclose or sell it to any other party.

3.3 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request, or if we believe in good faith that disclosure is necessary to protect the safety of any person, prevent fraud, or protect our legal rights.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via the App or email before your information becomes subject to a different privacy policy.

3.5 We Never Sell Your Data

We do not sell, rent, lease, or trade your personal information or your children's personal information to any third party for any reason, including for advertising or marketing purposes.

4. CHILDREN'S PRIVACY (COPPA AND INTERNATIONAL COMPLIANCE)

Kidfile is a tool for parents and legal guardians to manage their own children's information. The App is not directed at children and is not intended to be used by anyone under the age of 13 (or the applicable age of digital consent in your jurisdiction). Children do not create accounts or interact with the App directly.

All child-related data entered into Kidfile is provided by, and controlled by, the parent or legal guardian who holds the account. As the account holder, you represent that you have legal authority to provide your child's personal information and to share it via Care Card links at your discretion.

If we learn that we have inadvertently collected personal information directly from a child under 13 without verified parental consent, we will delete that information promptly. If you believe this has occurred, please contact us immediately at the address listed in Section 11.

5. DATA SECURITY

We implement industry-standard technical and organizational measures to protect your data, including encryption of data in transit (TLS/SSL) and at rest (AES-256), secure authentication and password hashing, access controls limiting employee access to user data on a strict need-to-know basis, regular security audits and vulnerability assessments, and secure cloud infrastructure hosted by reputable providers with SOC 2 compliance.

While no system can guarantee absolute security, we are committed to protecting your family's information with the highest practical standard of care. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

6. DATA RETENTION

We retain your information for as long as your account is active or as needed to provide you with the App's services. If you delete your account, we will delete or anonymize your personal data and all associated child profile data within 30 days, except where retention is required by law or necessary for legitimate business purposes (such as resolving disputes or enforcing our terms).

Shared Care Card links that have already been accessed by recipients prior to account deletion may remain cached in the recipient's browser temporarily, but no new access will be granted after deletion, and cached data will expire.

7. YOUR RIGHTS AND CHOICES

Depending on your jurisdiction, you may have the following rights:

• Access: You can view all data stored in your Kidfile account at any time directly within the App.
• Correction: You can edit or update any information in your child's profile or your account at any time.
• Deletion: You can instantly delete your account and all associated child data directly from within the Kidfile app via the Settings menu. You may also email us to request deletion.
• Data Export: You can request a portable copy of your data by contacting us.
• Withdraw Consent: You can revoke camera or storage permissions at any time through your device's system settings. This may limit certain features (such as document scanning) but will not affect the rest of the App.
• Revoke Sharing: You can deactivate any Care Card share link at any time, immediately cutting off access for all recipients.
• Opt Out of Analytics: You can disable anonymous usage analytics in the App's settings.

If you are a resident of California, you have additional rights under the CCPA/CPRA, including the right to know what personal information we collect and how it is used, and the right to request deletion. We do not sell personal information as defined under the CCPA.

If you are located in the European Economic Area or United Kingdom, you have rights under the GDPR, including the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the information in Section 11.

8. DEVICE PERMISSIONS SUMMARY

No permissions are used in the background without your knowledge. You can revoke any permission at any time in your device settings.

9. THIRD-PARTY LINKS AND SERVICES

The App may contain links to third-party websites or services (for example, a link to a medical provider's website). We are not responsible for the privacy practices of any third party. We encourage you to review the privacy policy of any external site you visit.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy within the App with a new effective date, and, where appropriate, by sending you a push notification or email. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

11. CONTACT US

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us at:

We will respond to all privacy-related inquiries within 30 days.

12. CONSENT

By creating an account and using the Kidfile App, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described herein. You further represent that any child-related information you enter into the App is provided by you as the child's parent or legal guardian with full legal authority to do so.

© 2026 Kidfile. All rights reserved.