Privacy Policy

Who we are

KindCoin is a behavior reward app designed to help families celebrate kindness and good habits. The app is operated by KindCoin ("we," "us," or "our"). You can reach us at hello@getkindcoin.com.

Children's privacy (COPPA)

KindCoin is designed for use by families. Children use the app under the direct supervision of a parent or guardian, who holds the account and controls all settings.

We comply with the Children's Online Privacy Protection Act (COPPA). Specifically:

• A parent or guardian must create an account before any child can use the app.
• The parent controls what information is entered for their child, including name, age group, and avatar.
• We do not collect more information from children than is necessary to operate the app.
• We do not show advertising to children.
• We do not share children's information with third parties for marketing purposes.
• Parents can review, export, or delete all of their child's data at any time (see "Your rights" below).

If you believe we have inadvertently collected personal information from a child without proper parental consent, please contact us immediately at hello@getkindcoin.com and we will delete it promptly.

What information we collect

Parent account information:

• Email address (used for login and account communications)
• First and last name
• Phone number (optional)
• Push notification token (to send you alerts about your child's activity)

Child profile information:

• First name
• Date of birth or age group
• Avatar (an emoji you choose)
• Behavior check-ins, reflections, and notes your child writes
• Points balance, streaks, badges, and reward history
• Push notification token (to send your child encouragement)

Usage information:

• App activity necessary to operate the service (check-ins, missions, redemptions)
• We do not use third-party analytics or advertising SDKs

How we use your information

• To operate and improve the KindCoin app
• To send push notifications about your family's activity (you can turn these off in settings)
• To send transactional emails (account confirmation, data exports)
• To respond to your support requests

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in "Service providers" below.

Service providers

We use a small number of trusted service providers to operate KindCoin:

• Supabase — database and authentication (servers located in the United States)
• Expo / Expo Push — mobile app platform and push notifications
• Resend — transactional email delivery

Each provider is contractually required to protect your data and may only use it to provide services to us.

Data retention

We retain your family's data for as long as your account is active. When you delete your account, all associated data — including all child profiles, check-ins, reflections, points history, badges, and rewards — is permanently deleted. This action cannot be undone.

You can delete your account at any time from the Settings screen in the app.

Your rights

As a parent or guardian, you have the right to:

• Access: Request a complete export of your family's data. Use the "Email me my family data" button in the app's Settings screen.
• Delete: Permanently delete your family's account and all associated data from the Settings screen.
• Correct: Update your family's information at any time from within the app.
• Withdraw consent: You may withdraw consent for your child's participation at any time by deleting their profile or your account.

To exercise any of these rights or if you have questions, contact us at hello@getkindcoin.com.

Security

We take security seriously. KindCoin uses industry-standard protections including encrypted data transmission (HTTPS/TLS), hashed PINs, short-lived authentication tokens, and server-side access controls. We conduct regular security reviews of our codebase.

Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or through the app before the changes take effect. The "last updated" date at the top of this page reflects the most recent revision.