Kudos Family Privacy Policy

Effective date: August 27, 2026
Policy version: 2026-08-27

Kudos Family ("Kudos," "we," "us," or "our") helps parents, guardians, teachers, and other authorized adults manage tasks, rewards, and progress for children or students. This policy explains the information processed by the Kudos Family mobile application, the Kudos Cloud service, and related support services.

We designed Kudos to collect only information needed to provide these features. We do not sell personal information, show third-party advertising, or track people across other companies' apps or websites.

Who should use Kudos

An adult should create and manage each family or classroom workspace. A child may use a limited child account only after an authorized adult creates a child profile and generates a temporary linking code. Child accounts do not require or request a child's email address.

Kudos is not submitted under Apple's Kids Category and is not intended for children to create independent accounts. This does not reduce our protections for children's information. Adults are responsible for having the authority and any consent required to create a child or student profile, assign activities, and upload a photo.

Information we process

Adult account and workspace information

When an adult creates a Kudos Cloud account, we process the adult's email address, optional display name, authentication identifiers, family or classroom name, workspace role, invitations, and the versions and time of the Terms of Service and Privacy Policy accepted during registration.

Child or student profile information

An authorized adult may provide a child's name or nickname, a built-in avatar or optional photo, appearance preferences, currency and storage-container preferences, and the anonymous account identifier used to link that profile to a child device. We encourage adults to use a nickname and built-in avatar when appropriate.

Tasks, rewards, and activity

We process task and reward titles, descriptions, schedules, assignments, values, completion requests, approvals or denials, completion history, balances, reward redemption and delivery history, and related timestamps. These records allow the app to prevent duplicate awards and show accurate progress across authorized devices.

Photos

Photos are optional. The mobile operating system's photo picker provides Kudos only the image an adult selects. If an adult takes a new photo, Kudos requests camera permission at that time. Selected profile, task, and reward images are uploaded to private cloud storage and displayed only to authorized members of the related workspace. Kudos does not scan a person's photo library or upload unselected images.

Notifications and device information

If notifications are enabled, we process an Expo push token, device platform, workspace identifier, and account identifier to deliver task approval and reward alerts. We do not use notification identifiers for advertising or tracking.

Support communications

If an adult contacts support, we process the contact information and message they submit so we can answer and resolve the request. Support requests should not contain passwords, child invite codes, or unnecessary information about a child.

How we use information

We use information to:

• authenticate adult and linked child accounts;
• operate and synchronize family or classroom workspaces;
• show tasks, rewards, balances, progress, approvals, and history;
• prevent duplicate completion awards and protect data integrity;
• deliver requested notifications and transactional emails;
• generate, verify, expire, and revoke adult or child invitation codes;
• reconnect a child profile to a replacement device when an adult requests it;
• provide support, investigate problems, and protect account security;
• comply with applicable law and enforce our Terms of Service.

The current release does not use third-party advertising, behavioral profiling, cross-app tracking, analytics SDKs, crash-reporting SDKs, payments, or subscriptions.

Children's information and adult controls

Kudos limits child accounts to the profile and workspace authorized by the adult-generated code. A linked child can view their own tasks, rewards, balance, and history; submit task completion requests; open rewards delivered to them; and change limited profile preferences. Database access controls prevent a child account from managing adults or accessing unrelated profiles.

An authorized adult can view, correct, export through ordinary app views, or delete a child profile and its associated information. An adult can revoke a lost child's anonymous login and issue a replacement code while preserving the profile's history. Parents or guardians may contact us to request access, correction, or deletion. We will take reasonable steps to verify the requester's authority before acting.

We do not knowingly ask a child for an email address, postal address, phone number, precise location, contacts, payment information, health information, or advertising identifier. If you believe a child provided personal information without appropriate adult authorization, contact us so we can review and delete it when required.

Teachers and schools must use Kudos consistently with their school's authorization, policies, and applicable student-privacy requirements. Schools should not use Kudos to store education records or sensitive information beyond the app's ordinary task and reward features unless they have confirmed they are permitted to do so.

Service providers

We use providers that process information on our behalf for app functionality:

• Supabase provides authentication, PostgreSQL database hosting, private file storage, realtime synchronization, and server-side Edge Functions.
• Expo provides the application runtime, build services, and Expo Push Service used to route notifications.
• Apple Push Notification service (APNs) delivers notifications to Apple devices.
• Resend delivers transactional messages such as adult-family invitations and support email.

These providers receive only information needed to provide their services and operate under their own contractual and security obligations. Information may also be disclosed when required by law, to protect users or the service, or as part of a business transfer subject to appropriate protections. We do not provide personal information to data brokers.

Local-only use

Kudos may be used in a local-only demo mode. Information in local-only mode remains on that device and is not synchronized to Kudos Cloud. It remains until removed through the app, the app is uninstalled, or the device's app storage is cleared. Operating-system backups may retain local app data according to the device owner's backup settings.

Retention and deletion

We retain cloud information while an account or workspace remains active and as reasonably needed to provide the service, maintain security, resolve disputes, or comply with law.

Adults can delete a child profile in the app. In Settings → Account, a family manager can permanently delete the family workspace, its profiles, tasks, rewards, history, private photos, and linked child accounts. A linked child can delete their own anonymous child account and linked profile. Account deletion removes active service data; limited records may remain temporarily in encrypted provider backups until those backups age out under the provider's normal retention cycle, or longer if law requires.

Transactional support communications may be retained as reasonably necessary to resolve the request and document the response. We do not retain invitation codes in readable form; codes are stored as one-way hashes and expire or are revoked.

Security

Kudos uses authenticated access, workspace membership rules, row-level database security, private storage, hashed invitation codes, rate limits, one-time codes, and server-side privileged operations. Replacing a linked child device revokes the former child login before a new code is issued. No service can guarantee absolute security, but we use safeguards designed for the nature of the information processed.

Choices and rights

Adults may decline camera, photo, and notification permissions and continue using core task and reward features with built-in images and without alerts. Account and profile information can be edited or deleted in the app.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection, or to appeal a privacy decision. A parent or guardian may exercise applicable rights for a child. Submit a request through our support page. We may ask for information needed to verify identity and authority. You may also contact the privacy or data-protection authority in your region.

International processing

Our providers may process information in countries other than the user's country. Where required, we and our providers use recognized safeguards for international transfers.

Changes to this policy

We may update this policy when features, providers, or legal requirements change. We will change the effective date and, when required, provide additional notice or request renewed acceptance. Materially different uses of children's information will not be applied without the authorization required by law.

Contact

Kudos Family is the operator responsible for this policy. Privacy questions, parental requests, and deletion requests can be submitted through our Support & Feedback page.