Privacy Policy

Kidopath (EduCoin) is an app for parents and children aged 5–18 to build daily habits and chores. This page explains what data the app collects, why, and how it is protected.

1. Data we collect

• Parent account: phone number, name, password (stored only as a hash), time zone and language.
• Child profile: name, birth year (optional) and profile photo (optional), entered by the parent. We do not ask for a child’s phone or email — the child signs in with a code from the parent.
• In-app activity: chores, the photo, voice recording or text that confirms a chore, coins, rewards, game scores and answers in the 10-day program.
• Technical data: a device identifier for sign-in sessions, device model, OS and app version (for support), a push notification token and IP address for security (rate limiting).
• App usage: which screen was opened and when (only the screen name and time — NOT the text on the screen, entered data or photos) and a random number created when the app is installed. Used to see where people struggle in the app and improve it; stored only on our own server, never shared with third parties and deleted after 90 days.
• Payments: plan, amount and status. Card details never reach us — payment happens on the Payme page.

2. How we use it

• To run the app: sign-in, showing chores and rewards, letting the parent review the child’s proof.
• Sending a code by SMS (password recovery).
• Providing Premium and confirming payment.
• Security and abuse prevention.

3. Ads, analytics and selling

• The app has NO ads. The advertising ID is not used.
• No third-party analytics or tracking services are used.
• Data is NOT sold and not shared for advertising.

4. Who we share it with

• Payme — to process payments (phone number and order number).
• Eskiz — to send SMS codes (phone number only).
• Google Firebase Cloud Messaging — to deliver notifications (push token and notification text only).
• A child’s photos and recordings are visible only to their parent. Game leaderboards show only the child’s first name (surname shortened).
• Teacher — ONLY with parental consent: the child enters a teacher code, and only after the parent approves can the teacher see the child’s name and age, task list and status, coins, streak, 10-day habit progress and game results. Photos, recordings and the parent’s phone number are NEVER shared with the teacher. The parent or child can disconnect at any time — after that the teacher sees nothing.
• Competent authorities where required by law.

5. Storage and security

• Data is stored on protected servers; app–server traffic is encrypted (HTTPS).
• Location and device data (EXIF) is removed from uploaded photos.
• Photos and recordings are opened only via temporary signed links.

6. Children’s privacy

• Child profiles are created and managed only by the parent, who can delete them at any time.
• We do not ask children for personal data without parental consent.

7. Deletion and your rights

• You can delete your account in the app: Settings → Delete account. Your children’s data is deleted with it.
• To access, correct or delete your data, contact us.

8. Contact

• Questions: +998 99 588-88-98 or “Help → Write to us” in the app.