KiddReads ("KiddReads", "we", "us") is a children's book-discovery website. This policy explains what information we collect, how we use it, and the choices you have. We care especially about children's privacy — see the Children's Privacy section below.
Who this policy covers
KiddReads accounts are created and controlled by a parent or legal guardian. A parent may create profiles for their children. This policy applies to parents, children using a parent-created profile, and anyone who browses the site without an account.
Information we collect
- Parent accounts: email address, the name you provide, and a password (stored only as a salted, hashed value — never in plain text).
- Child profiles: a display name and username chosen by the parent, and a PIN/password (also stored only as a salted hash). We do not collect a child's email address, real name, photo, location, or contact information.
- Reviews: star ratings and short written reviews submitted from a profile. Written reviews are screened by an automated moderation filter.
- Activity for parental monitoring: books searched, viewed, or asked about, so that parents can review their child's activity and be alerted to anything concerning.
- Technical data: standard server logs and a login token stored in your browser's local storage to keep you signed in.
How we use information
- To operate KiddReads — sign-in, saved activity, reviews, and recommendations.
- To let a parent monitor and manage their child's use of the service.
- To keep the service safe and age-appropriate, including content moderation and alerting parents to flagged activity.
- To maintain, secure, and improve the site.
We do not sell personal information, and we do not show third-party behavioral or targeted advertising to children.
Children's Privacy
We collect from children only the limited information needed to run the service (a parent-chosen display name, username, hashed PIN, reviews, and activity for the parent's own monitoring). A parent may at any time:
- review the information associated with their child's profile;
- request that we correct or delete their child's profile and its data;
- refuse further collection by deleting the child's profile.
To make any of these requests, contact us at the address below. If you believe a child has provided us information without parental consent, contact us and we will delete it.
Service providers
We share information only with vendors that help us run KiddReads, under their obligations to protect it: Supabase (database and authentication), Vercel (website hosting), and an AI provider that powers the "Seb" librarian feature. These providers process data on our behalf and are not permitted to use it for their own purposes.
Data retention & security
We keep account information for as long as the account is active, and delete it on request. Passwords and PINs are protected with industry-standard salted hashing, and database access is restricted by row-level security so a parent can only ever see their own family's data. No system is perfectly secure, but we work to protect your information.
Your choices
You can sign out at any time, and your session automatically ends after a day of inactivity. Parents can delete child profiles from the dashboard, or contact us to delete the entire family account.
Changes to this policy
If we make material changes, we will update the date above and, where appropriate, notify account holders.
Contact us
Questions or requests about privacy: [email protected].