SoLea Kids

Privacy Policy

This Privacy Policy explains how SoLea Kids ("SoLea Kids", "we", "us") handles information in connection with the SoLea Kids mobile application (the "App") and the optional cloud features at soleakids.app, including account sync, shared status boards, comments and photo galleries (together, the "Service"). Please read it together with our Terms of Use.

1. Who we are

SoLea Kids is the data controller for the cloud Service described here. For information you keep only on your device, you are in control and we are not a controller of that data. For content posted to a board you own (comments, gallery photos), the board owner is the controller and we act as a processor providing the feature. You can reach us at info.soleahomes@gmail.com.

2. Information we handle

a) On your device (App)

Children's names, profile photos, point values, daily notes, rewards and settings are stored only on your device. With no account, none of this is transmitted to us. Photos you pick are copied into the App's private storage; the App requests photo-library access only when you tap "Change photo".

b) Optional cloud account (keyless)

There is no email and no password. An account is opened with a long random secret key stored on your device, optionally protected by a 6-digit PIN. If you enable sync/sharing, we store the family or classroom data you choose to put in the cloud (names, points, notes, settings and any optional photos) plus a one-way hash of your key/PIN to recognise it.

c) Shared boards (viewers)

When someone opens a board you shared, they may add comments and upload photos to that board's gallery, choosing a display name. We store that content, the chosen name and a timestamp. We do not require viewers to create an account and we do not collect their email.

d) Technical data

Like any web service, our servers process the IP address and basic request data needed to deliver pages and prevent abuse, held in transient logs. We do not use advertising or third-party analytics trackers.

3. How & why we use it

• To provide the App's tracking features (on your device).
• To sync your data across your devices when you use an account.
• To render protected status boards and to store the comments and photos viewers add to them.
• To keep the Service secure, prevent abuse and fix problems.
• To respond to your requests and support messages.

We do not sell personal data, share it with advertisers, or use it to build profiles.

4. Legal bases (GDPR)

Where the EU/UK GDPR applies, we rely on: consent (for enabling cloud sync and sharing, and for showing children's photos on a board); contract (to provide features you request); and our legitimate interests (to keep the Service secure and working), balanced against your rights. You may withdraw consent at any time by turning off sharing, revoking a link, or deleting your cloud account.

5. Children's data

SoLea Kids is designed for parents, guardians and educators, not for use by children directly. The adult account holder confirms they have authority to enter a child's information and to provide any consent required on the child's behalf. Where laws such as GDPR-K (EU) or COPPA (US) apply, the adult is responsible for that consent; schools and educators are responsible for obtaining consents required in their jurisdiction before entering or sharing pupil data. A child's profile photo is never shown on a shared board unless the owner explicitly opts in, and boards are never publicly indexed. If you believe a child's data has been provided without proper authority, contact us for prompt deletion.

6. Shared boards, comments & photos

• Access is protected. A board requires its link plus an access code (or sign-in). Links can be set to expire and can be revoked at any time. Pages carry a "noindex" instruction so search engines do not list them.
• Visibility. Comments and uploaded photos are visible to everyone who can open that board, and to the board owner.
• Responsibility. Only upload images you have the right to share. Do not upload images of other people's children without permission. Display names are shown next to contributions.
• Removal. Revoking a board's link removes access to all of its comments and photos. To remove specific content, contact the board owner or us.

7. Cookies & local storage

Board pages use a small amount of browser local storage to remember your access code, chosen display name and view preferences so you can return without re-entering them, and a single session cookie if a board requires sign-in. We do not use advertising or cross-site tracking cookies. Clearing your browser storage removes these.

8. Service providers

We use a small number of infrastructure providers strictly as processors acting on our behalf — hosting and database storage for cloud data. The optional in-app "Support" button opens PayPal, which processes any payment under its own privacy policy; we do not receive your payment-card details. We do not embed advertising or analytics SDKs.

9. International transfers

Cloud data is hosted on reputable infrastructure. Where data is processed outside your region, we rely on appropriate safeguards (such as the provider's standard contractual clauses) to protect it.

10. Retention

On-device data remains until you delete it or uninstall the App. Cloud account data is kept while your account exists and is deleted when you delete the account. Board comments and photos are kept until the board's link is revoked or deleted, or until you ask us to remove them. Transient server logs are kept only as long as needed for security and troubleshooting.

11. Security

Cloud data is encrypted in transit (HTTPS). Secret keys and PINs are stored only as one-way hashes. Profile photos shown on boards are served through short-lived signed links, and gallery access is gated by the board token. Access is restricted to your account and those you explicitly grant. No system is perfectly secure, so we cannot guarantee absolute security.

12. Your rights

Depending on your location, you may have the right to access, correct, export, delete or restrict your data, to object to certain processing, and to withdraw consent. For on-device data, you control it directly (edit in the App, or clear the App's data). For cloud data, contact us and we will action eligible requests. EU/UK users may also lodge a complaint with their local data-protection authority.

13. Data breaches

If a breach affecting personal data occurs, we will investigate, take remedial action, and notify affected users and, where required, the relevant authorities within the legally required time frames.

14. Changes to this policy

We may update this policy as the Service evolves. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Continued use after an update means you accept the revised policy.

15. Contact

Questions, requests or concerns: info.soleahomes@gmail.com.