Privacy Policy

1. Who we are and what this policy covers

Kidzhood is operated by TheNextWay AI Inc. (“Kidzhood”, “we”, “us”, or “our”), incorporated in British Columbia, Canada. This Policy explains what personal information we collect, why, who we share it with, how long we keep it, and the rights you have over it. It covers the Kidzhood mobile app, the website at kidzhood.ca (including the business portal), and related services (the “Service”).

It is written to comply with Canada’s PIPEDA and BC PIPA, CASL, the U.S. COPPA, the CCPA/CPRA and comparable U.S. state privacy laws, the U.S. TCPA, and Québec’s Law 25 to the extent it applies.

We have designated a Privacy Officer accountable for our compliance: privacy@kidzhood.ca. If we make material changes to this Policy, we will notify you by in-app notice, email, or a prominent notice on kidzhood.ca before they take effect.

2. An adult-directed service — children’s privacy (COPPA / PIPEDA)

Kidzhood is designed for, directed to, and intended to be used only by adults — parents and legal guardians who have reached the age of majority in their jurisdiction (19 in British Columbia; 18 in most other provinces and U.S. states).

• We do not knowingly permit children to create accounts, and we do not knowingly collect personal information directly from any child under 13 (U.S.) or any minor (Canada). Account creation requires express confirmation that the user is of the age of majority and is a parent or guardian.
• All child-related profile information is entered by the parent or guardian, about their own child, for their own family’s use. We ask parents to use a nickname rather than a child’s full legal name.
• What we store per child is deliberately minimal: a nickname, birth month and year (no day of birth), and parent-selected activity interests. We do not collect children’s photographs, medical information, allergy information, precise birthdates, or contact information.
• If we learn a child has provided personal information directly to us, we delete it promptly — contact privacy@kidzhood.ca.
• Parents may review, correct, or delete their children’s profile information at any time in the app, or by deleting their account, which permanently removes all child profiles.

We do not sell children’s personal information and do not use it for advertising of any kind.

3. Information we collect

A. Information you provide

B. Collected automatically

• Location — with your permission, to show nearby activities, distances, and maps. Decline and the app uses a default city location or your postal-code prefix.
• Usage data — screens and listings viewed, taps, likes, website/direction clicks, searches. Guest browsing is recorded without an account identifier.
• Device and log data — device model, OS, app version, IP address, push token (if enabled), technical logs.
• Crash diagnostics — via Sentry.
• Web storage — the business portal stores an auth token in local storage and uses Google reCAPTCHA Enterprise on signup and login. We do not use third-party advertising cookies.

C. From third parties

Google Sign-In (your name and email, if you choose it), and venue and event data from Google Places and public sources — information about businesses and events, not about you.

4. How we use personal information

1. Providing the Service — showing nearby events, activities, camps, and venues; maintaining your account, favourites, and plans.
2. Personalization — using the ages and interests you enter to sort and recommend listings.
3. AI-assisted planning — generating Plan My Day itineraries (see Section 6).
4. Communications you control — push, text, and the weekly email digest, per your settings (Section 8).
5. Analytics and improvement — Firebase Analytics, our own event counters, and crash reporting.
6. Safety, security, and legal compliance — preventing fraud and abuse, enforcing our Terms, securing accounts.

We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not run third-party ad-network trackers in the app. We do not use personal information for automated decision-making producing legal or similarly significant effects.

5. Who we share personal information with

Only with service providers processing it on our behalf under contractual confidentiality and data-protection obligations:

We may also disclose information when required by law, court order, or lawful government request in Canada or the U.S.; to protect the rights, property, or safety of Kidzhood, our users, or the public; or to a successor entity in a merger, acquisition, financing, or sale of assets, subject to this Policy’s protections.

We do not sell, rent, or trade personal information to anyone. We do not share it with data brokers or advertisers.

6. AI processing disclosure

Many listing descriptions are generated or enhanced with AI from public information, are labelled in the app, and may contain errors — always verify details with the venue or organiser.

Plan My Day itineraries are generated by Google’s Gemini models. We transmit your request together with your children’s ages and interests (identified only as “Child 1”, “Child 2”, and so on) and your approximate area. Children’s names are not sent to the AI provider. Google processes this data as our service provider.

7. Location information — your choices

• The app asks permission before using device location and explains why. You may decline and still use everything, via a default city location or the postal-code prefix you provide.
• You can enable or revoke location permission at any time in your device’s settings.
• Coordinates are used transiently — for searches, distances, maps, and nearby content. We store your postal-code prefix with your family profile; we do not keep a history of your precise GPS movements.
• Under the CPRA, precise geolocation can be “sensitive personal information.” We use it only to provide the services you request, and we do not sell or share it.

8. Messages we send — and how to stop them (CASL / TCPA)

Every message category has a toggle in the app (Profile → Notifications): plan reminders, favourite-event reminders, trending suggestions, weekly email, weekend ideas, and setup tips. Quiet hours (default 9 PM–7 AM) hold non-urgent notifications.

• Push — requires device-level opt-in; disable anytime in system settings or per category in the app.
• Email — a weekly digest plus transactional emails. Every digest identifies Kidzhood as sender, includes our postal identification, and carries a one-click unsubscribe link (and a native unsubscribe control in supporting mail apps). We honour unsubscribe requests promptly, and in any event within 10 business days.
• Text messages — only to a number you added and verified with a one-time code, and only for categories you enabled. Message and data rates may apply. Reply STOP to stop all Kidzhood texts; reply HELP for help. Consent to texts is never a condition of using the Service.

9. Data retention

• Account, family, and child profiles — for the life of your account. On deletion, the account is deactivated immediately and permanently erased within 7 days (the brief window guards against accidental or malicious deletion).
• Unverified accounts — removed automatically after about 7 days if never verified and never used.
• Phone number and verification data — deleted when you remove the number or delete your account.
• Usage analytics — purged on a rolling basis by scheduled retention jobs. Technical logs — about 30 days.
• Legal acceptance records — retained while the account exists and for a reasonable period afterwards, as evidence of agreement.
• Backups — 30 days, then automatically deleted; deleted account data ages out within that window.

10. How we protect personal information

Safeguards appropriate to the sensitivity of the information, including: encryption in transit (TLS/HTTPS); passwords stored only as salted bcrypt hashes; credentials held in your device’s secure storage; account lockout after repeated failed logins; rate limiting; security headers; role-restricted administrative access; and durable security-event logging.

No system is perfectly secure. If a breach of security safeguards creates a real risk of significant harm, we will notify you and report to the appropriate privacy regulator(s) as required by PIPEDA and other applicable breach-notification laws.

11. Where data is stored — international transfers

We are a British Columbia company. Our providers store and process data on servers that may be in Canada and/or the United States. Where personal information is processed outside Canada, it may be accessible to that jurisdiction’s courts, law enforcement, and national-security authorities. We require providers to protect it to standards consistent with this Policy.

12. Your rights

You may access your information and ask how it has been used and disclosed; correct it; delete your account and personal information; withdraw consent to optional processing (location, notifications, SMS, email); and complain — to our Privacy Officer, and also to the Office of the Privacy Commissioner of Canada, the BC OIPC, or your state Attorney General or privacy agency.

Canada (PIPEDA / BC PIPA / Law 25). We respond to written access requests within 30 days and may ask you to verify your identity. Where we rely on consent you may withdraw it, subject to legal or contractual restrictions; we will explain the consequences.

U.S. state residents (CCPA/CPRA and similar). You have rights to know/access, correct, delete, portability, and non-discrimination. Because we do not sell or share personal information as those terms are defined, and use sensitive personal information only for permitted service purposes, no “Do Not Sell or Share” or “Limit” action is required — but you may contact us about these rights at any time. We honour verified authorized-agent requests. We do not currently respond to browser “Do Not Track” signals; regardless, we do not sell or share personal information. If we deny a request you may appeal by replying, and a different reviewer will assess it.

To exercise any right, email privacy@kidzhood.ca. We verify identity (normally by confirming control of your account email) and respond within 30 days, free of charge.

13. Third-party websites and services

Listings link out to venue and organiser websites, ticketing pages, and booking systems we do not control. The app warns you when you are leaving Kidzhood. Once you leave, the third party’s own privacy practices apply. Map data, venue ratings, and review counts are provided by Google and subject to Google’s terms and privacy policy.

14. Contact us

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376) or the BC OIPC (oipc.bc.ca).