Privacy Policy

Data Controller

KidWatch, publisher of the KidWatch parental control application.

Contact: contact@kid-watch.com

Data Collected

We only collect data necessary for the operation of the service:

• Account data: email address, encrypted password
• Device data: unique identifier, model, OS version, app version
• DNS data: domains visited and blocked on children's devices, timestamps
• Usage data: online/offline status, filtering settings
• GPS location data: geographic position of the child's device, collected every 30 minutes, encrypted in transit and at rest, retained for 7 days then automatically deleted. Used solely to allow the parent to locate their child's device
• Installed apps list: names and identifiers of applications present on the child's device. Used to allow the parent to block access to specific applications
• App usage data: daily usage time per application on the child device, collected every 5 minutes. Used for time limit enforcement and weekly reports

Use of Data

Your data is used exclusively to:

• Provide the DNS filtering and parental control service
• Send alerts to the parent when a child device is offline
• Manage your account and subscriptions
• Ensure the security and proper functioning of the service
• Allow the parent to locate their children's devices via GPS
• Allow the parent to manage and block applications on children's devices
• Track app usage time and enforce time limits set by the parent

Legal Basis

Performance of contract for service provision. Parental consent for collecting data related to children's devices. Legitimate interest for the protection of minors online.

Data Sharing

We do not sell or share your personal data with third parties. Your data is only accessible to our hosting providers, under confidentiality agreements.

Storage and Security

Your data is stored on secure servers located in France. Communications are encrypted (TLS), passwords are hashed (bcrypt), and sensitive device data is encrypted (AES-256).

Retention

Account data: duration of subscription + 30 days after deletion. DNS data: 30 days then automatically deleted. Billing data: 10 years (legal requirement).

Children's Data

Data relating to children's devices is collected under the responsibility and with the consent of the parent or legal guardian. It is used for DNS filtering, connection monitoring, GPS location tracking, and installed apps management. No browsing content or behavioral data is collected. The parent can remove a child device at any time.

Your Rights (GDPR)

You have the right to access, rectify, erase, port, object to, and restrict the processing of your data. To exercise your rights: contact@kid-watch.com

Account and Data Deletion

You can request complete deletion of your account and all your data by sending an email to contact@kid-watch.com. Deletion will be completed within 30 days.

Changes

Any changes to this policy will be notified by email or through the application.