Privacy Policy
Last updated: June 27, 2026
KidTask.ai (“KidTask,” “we,” “us”) helps kids break big tasks into small, doable steps, supervised by a parent. This policy explains what we collect, why, and the choices you have. We built KidTask to collect as little as possible.
The parent is the account holder
KidTask is designed around the Children's Online Privacy Protection Act (COPPA). A parent or legal guardian creates and owns the family account and is the legal account holder. Each child is a sub-profile managed by that parent. When a parent adds a child, they provide verifiable parental consent by confirming they are the parent/guardian, accepting this policy, and confirming via an emailed link. A child's sign-in is a convenience for the parent-managed profile, not an independent account.
What we collect
From the parent: email address, first name, and a hashed PIN (if set).
From the child: first name only (no last name and no birthdate — only an age band such as 7–9), an email address used for sign-in codes, and a chosen preset avatar.
From use of the app: tasks, comments, stars, and the inputs and outputs of the “Break It Down” AI feature (task titles, notes, and comments) so the feature can work and so a parent can review it.
What we do NOT collect
No location data, no contacts, no photos or video, and no stored audio. Voice input is transcribed by your browser and only the resulting text is sent to us. We do not use advertising identifiers or third-party trackers, and we do not build advertising profiles of children.
Service providers who process data
We share the minimum necessary data with a small set of providers:
Supabase stores the account data described above. Anthropic (Claude) receives task titles, notes, and comments to generate the step-by-step breakdowns; under Anthropic's commercial terms these prompts are not used to train their models. Resend delivers email (sign-in codes, invitations, and opt-in digests).
No advertising
KidTask shows no ads, and we never sell or rent personal information. This applies to the free service and to any future paid tier.
Data retention and deletion
A parent can delete a single child profile or the entire family at any time. Deletion is permanent (rows are removed, not merely hidden) after a 7-day grace period during which it can be undone. After the grace period, the associated records and sign-in accounts are deleted.
Parental rights
As the account holder, a parent can review the personal information associated with their child, ask us to delete it, and refuse further collection by deleting the child's profile. To make a request, email support@kidtask.ai.
Security
Access to family data is restricted by row-level security so a family can only ever see its own records. PINs are stored hashed. No system is perfectly secure, but we work to protect your family's information.
Changes and contact
If we make material changes to this policy we'll update the date above and, where appropriate, ask parents to re-confirm. Questions? Email support@kidtask.ai.