Your family’s data

Who handles your data

MyKid is a service of GildeSys. GildeSys is the trading name of Sérgio da Silva Lopes Rodrigues, sole trader, tax number (NIF) 228007224, of Rua Principal do Gilde, 115, 4550-669 Castelo de Paiva, Portugal. GildeSys decides how a family’s data is handled, and is who to ask about anything this page does not answer: 3700.sergio@gmail.com or +351 913 470 963.

What we keep

Only what the service needs to work, and almost all of it is written by the family itself:

• Grown-ups: name, email, their relation to the child (Dad, Mum, Grandma…) and their access level. The password itself is never stored, only a scrypt hash that cannot be turned back into it.
• The child: his name and, if the family adds them, his birthday and a photo. His calendar, routines, morning and bedtime lists, stars and the prizes he asks for, game and video time, messages with the family, call requests, games played with the grown-ups and any drawings the family chooses to keep.
• Photos of the grown-ups that the family uploads so he recognises them.
• Timetables sent through “Ler um horário” (Read a timetable), as a photo or PDF, and the suggestions made from them.
• Devices: an identifier for the paired tablet and, if notifications are on, each phone’s notification address.
• Payment: the subscription status and Stripe customer identifiers. Card numbers never reach us; only Stripe handles them.
• Technical logs: IP address and requests made to the server, kept for a limited time for security and troubleshooting.

Video calls travel directly between devices, encrypted. When the network does not allow that, they pass, still encrypted, through our relay server. They are never recorded, and the server cannot see what is in them.

Why we use it, and on what basis

• To provide the service you signed up for: showing the calendar, delivering requests and messages, calls and games. Basis: performance of a contract (GDPR article 6(1)(b)).
• To keep the service secure (sign-in attempt limits, technical logs). Basis: legitimate interest (6(1)(f)).
• To meet legal obligations such as invoicing. Basis: legal obligation (6(1)(c)).

There is no advertising, we do not sell data, we do not build profiles, and neither the site nor the apps use analytics or tracking tools.

The child

The child’s data is entered and managed by whoever has parental responsibility, or by an adult they invited. The kids app asks for no email and no password: the tablet joins the family with a single-use code. Nothing he does is public, and he only talks to the grown-ups in his own family.

Who else receives data

We work with few providers, and each gets only what it needs:

• DigitalOcean: hosting for the server and database.
• Stripe: subscription payments.
• Anthropic: only when you use “Ler um horário”. The image or PDF is sent to be read and comes back as suggestions, which only reach the calendar if you confirm them. Under Anthropic’s commercial terms, data sent this way is not used to train models.
• Apple, Google and Mozilla: the phone’s notification services deliver alerts. The content is encrypted.
• YouTube: videos the family picks are shown in privacy-enhanced mode (youtube-nocookie.com). When a video is watched, YouTube receives that device’s request.

Data outside the European Union

MyKid’s server is in the United States (DigitalOcean, San Francisco), as is Anthropic. These transfers are covered by the safeguards the GDPR provides for, namely the European Commission’s standard contractual clauses, which are part of these providers’ data processing agreements.

How long we keep it

• For as long as the family’s account exists. If the subscription ends, the data is kept so the family can come back, until they ask for it to be deleted.
• When you ask us to delete the family, everything is deleted within 30 days. Daily backups are overwritten after 14 days.
• Invoicing records are kept for as long as the law requires (10 years).

Your rights

You can ask to see your data, correct it, delete it, receive it in a format you can take to another service, or object to or restrict how it is used. Just write to 3700.sergio@gmail.com. We reply within one month.

If you think your data has been mishandled, you can complain to Portugal’s data protection authority, the CNPD, at www.cnpd.pt.

Cookies

We use only two cookies, both essential: the session of whoever signs in to GrownUps (renewed as it is used, it expires after 30 days without use) and the link to the child’s tablet (one year). The device also stores a few preferences, such as chosen colours. There are no advertising or analytics cookies, which is why we do not ask for consent to them.

Security

Everything travels encrypted (HTTPS). Passwords are stored only as scrypt hashes, cookies cannot be read by scripts, and on every request the server handles, each family’s data is kept apart from every other family’s.

Changes

If this policy changes in a meaningful way, we will say so in the GrownUps app before the change takes effect.