Privacy Policy

Parent information. When a parent creates an account, we collect your email address, name, and — if you subscribe to a paid plan — payment information. Payment processing is handled by our third-party payment processor; we do not store full credit card numbers on our servers.

Child information. We collect only the minimum information necessary to provide the Service. For child profiles, we collect a display name (chosen by the parent) and usage data such as games created, features used, and session duration. We do not collect children’s real names, email addresses, photos, or any other personally identifiable information.

Automatic information. When you use the Service, we automatically collect certain technical information, including device type, browser type, operating system, and general analytics data (such as pages visited and time spent). We use this data to improve the Service and ensure compatibility. We do not use tracking technologies to build advertising profiles.

Provide and maintain the Service. We use your information to operate the platform, manage accounts, process payments, and deliver the features you expect.

Improve the Service. We analyze aggregated, anonymized usage data to understand how families use Kychai, identify areas for improvement, and develop new features.

Communicate with you. We use your email address to send account-related notifications, respond to support requests, and — with your consent — share product updates and educational content. You can opt out of non-essential communications at any time.

Security and safety. We use information to detect and prevent fraud, abuse, and security threats, and to enforce our Terms of Service and Community Guidelines.

We do not sell your data. Kychai will never sell, rent, or trade your personal information or your child’s data to third parties for advertising or marketing purposes.

Service providers. We may share limited information with trusted third-party service providers who assist us in operating the Service (such as hosting, payment processing, and analytics). These providers are contractually obligated to protect your information and may only use it for the specific services they provide to us.

Legal requirements. We may disclose information if required to do so by law or in response to valid legal process, such as a subpoena, court order, or government request.

COPPA compliance. Kychai is designed from the ground up to comply with COPPA. We require verifiable parental consent before any child under 13 can use the Service.

Parent control. Parents have full control over their child’s account and data. Through the Parent Dashboard, you can view your child’s activity, manage sharing settings, set usage limits, and request deletion of your child’s data at any time.

No child PII. We do not collect personally identifiable information from children. Child profiles use parent-chosen display names only. There is no open chat, social networking, or any feature that would allow a child to disclose personal information to other users.

For more details, see our dedicated COPPA Compliance page.

Encryption. All data transmitted between your device and our servers is encrypted using industry-standard TLS encryption. Data at rest is encrypted using AES-256 encryption.

Security audits. We conduct regular security reviews and vulnerability assessments to identify and address potential risks. We follow industry-standard practices for access control, monitoring, and incident response.

Minimal collection. We follow the principle of data minimization — we collect only the information we need to provide and improve the Service, and we retain it only for as long as necessary.

You have the following rights regarding your information and your child’s information:

• Access. You may request a copy of the personal information we hold about you or your child.
• Delete. You may request that we delete your account and all associated data, including your child’s data. We will process deletion requests within 30 days.
• Export. You may request an export of your data in a commonly used, machine-readable format.
• Opt out. You may opt out of non-essential communications at any time by using the unsubscribe link in our emails or adjusting your account settings.

To exercise any of these rights, contact us at privacy@kychai.com.

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes (such as billing records, which we may retain for up to 7 years as required by law).

Anonymized, aggregated data that cannot be used to identify you or your child may be retained indefinitely for analytical and product improvement purposes.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and post a notice on the Service at least 30 days before the changes take effect. We encourage you to review this page periodically.