Privacy Policy

Who we are

Kidcation is an independent community project. For any privacy question, contact us at hello@kidcation.app.

What we collect and why

Account data: when you sign in with Google or a confirmed email, we store your authentication identity and a public profile (display name, email) so your tips can be attributed to you.

Age-check data: we ask for date of birth where needed to confirm that contributors are old enough to use the service and publish tips.

Contributions: the tips and comments you publish, and the structured family-fit signals extracted from them. Published tips and their signals are public by design.

Reports and moderation records: when content is reported or moderated, we keep the report, the target content, and the reason so we can handle notice-and-action obligations and explain decisions.

Essential cookies: needed to keep you signed in and to run the site securely. These do not require consent.

Non-essential services: analytics, error monitoring, and embedded maps are loaded only after you accept them in the consent banner.

Legal bases

We process account data and guest drafts to provide the service you ask to use. We process published tips and family-fit signals because you choose to contribute them and because Kidcation has a legitimate interest in operating a practical family-travel directory.

We process reports, moderation records, security logs, and abuse-prevention signals to comply with legal obligations, enforce our terms, and protect the service.

We load non-essential analytics, error monitoring, and embedded map services only with your consent. You can withdraw that consent by clearing the Kidcation consent cookie or rejecting non-essential services when asked again.

Who receives data

We use Vercel to host and operate the website. We use Supabase for our database and authentication.

We also use service providers for email delivery, AI extraction and summaries, analytics, error monitoring, and map tiles. They may process data only to help us run Kidcation.

Google may process data when you choose Google sign-in. Mapy.com may receive your IP address, browser information, and the map area requested when you load the map after consent.

We may disclose information to authorities, professional advisers, or others when required by law or needed to protect rights, safety, and the integrity of the service.

International transfers

Kidcation aims to keep core service data in EU-region infrastructure where practical. Some providers may process data outside the EEA or the UK.

When a transfer needs safeguards, we rely on appropriate measures such as adequacy decisions, standard contractual clauses, provider data-processing terms, or another lawful transfer mechanism.

Cookies and consent

Essential cookies run by default. Non-essential services (analytics, error monitoring, and any embedded maps) stay blocked until you accept them, and your choice is stored so we don't ask again.

See the Cookie Policy for the cookie categories, map-tile behaviour, and browser controls.

Your rights

Depending on where you live, you may have rights to access, export, correct, erase, restrict, or object to processing of your personal data. You may also withdraw consent for optional services.

When you erase your account, we remove your account and profile and detach your name from your contributions; the anonymised family-fit facts about a place are retained as non-personal data so the place's family-fit profile survives.

To exercise any right, use your account settings or email hello@kidcation.app. You may also complain to your local data-protection authority.

Children and family safety

Kidcation is for parents and guardians, not for children to publish content themselves. Contributors must be old enough to use the service under the laws that apply to them.

Do not include room numbers, contact details, health details, or other private information about children or other families in tips or reports.

Retention

Stale anonymous guest accounts with only unpublished drafts and no activity for 30 days are deleted automatically. Linked accounts are kept until you ask us to erase them.

Published tips, derived family-fit facts, and moderation records are kept while they are needed to run the public service, preserve safety decisions, or meet legal duties. Consent choices are stored for up to one year unless you clear cookies sooner.

Changes and contact

We may update this policy as Kidcation changes. We will update the date above and, for material changes, use a reasonable notice method.

Questions about privacy? Email hello@kidcation.app.