Privacy Policy

Who we are

Kidcation is an independent community project. For any privacy question, contact us at hello@kidcation.app.

What we collect and why

Account data: when you sign in with Google or a confirmed email, we store your authentication identity and a public profile (display name, email) so your tips can be attributed to you.

Age-check data: we ask for date of birth where needed to confirm that contributors are old enough to use the service and publish tips.

Contributions: the tips and comments you publish, and the structured family-fit signals extracted from them. Published tips and their signals are public by design.

Likes and wish lists: when you like a tip or save a place to your wish list, we store that link between your account and the tip or place. Your wish list is private to you; only anonymous totals (like counts and wish counts) are shown publicly. Both are included in your data export and are deleted with your account.

Reports and moderation records: when content is reported or moderated, we keep the report, the target content, and the reason so we can handle notice-and-action obligations and explain decisions.

Essential cookies: needed to keep you signed in and to run the site securely. These do not require consent.

Non-essential services: analytics and error monitoring load only after you accept them in the consent banner. Maps load after that consent or after you enable a map by itself.

Legal bases

We process account data and guest drafts to provide the service you ask to use. We process published tips and family-fit signals because you choose to contribute them and because Kidcation has a legitimate interest in operating a practical family-travel directory.

We process reports, moderation records, security logs, and abuse-prevention signals to comply with legal obligations, enforce our terms, and protect the service.

We load analytics and error monitoring only with site-wide consent. Maps load with that consent or a separate map-only choice. You can withdraw these choices by clearing the Kidcation consent cookies or rejecting optional services when asked again.

Who receives data

We use Vercel to host and operate the website. We use Supabase for our database and authentication.

We also use service providers for email delivery, AI extraction and summaries, analytics, error monitoring, and map tiles. They may process data only to help us run Kidcation.

Google may process data when you choose Google sign-in. Mapy.com or OpenStreetMap may receive your IP address, browser information, and the map area requested when you explicitly load a map.

We may disclose information to authorities, professional advisers, or others when required by law or needed to protect rights, safety, and the integrity of the service.

International transfers

Kidcation aims to keep core service data in EU-region infrastructure where practical. Some providers may process data outside the EEA or the UK.

When a transfer needs safeguards, we rely on appropriate measures such as adequacy decisions, standard contractual clauses, provider data-processing terms, or another lawful transfer mechanism.

Cookies and consent

Essential cookies run by default. Analytics and error monitoring stay blocked until you accept optional services. Embedded maps stay blocked until you accept all optional services or explicitly enable a map.

See the Cookie Policy for the cookie categories, map-tile behaviour, and browser controls.

Your rights

Depending on where you live, you may have rights to access, export, correct, erase, restrict, or object to processing of your personal data. You may also withdraw consent for optional services.

When you erase your account, we remove your account and profile and detach your name from your contributions; the anonymised family-fit facts about a place are retained as non-personal data so the place's family-fit profile survives.

To exercise any right, use your account settings or email hello@kidcation.app. You may also complain to your local data-protection authority.

Children and family safety

Kidcation is for parents and guardians, not for children to publish content themselves. Contributors must be old enough to use the service under the laws that apply to them.

Do not include room numbers, contact details, health details, or other private information about children or other families in tips or reports.

Retention

Stale anonymous guest accounts with only unpublished drafts and no activity for 30 days are deleted automatically. Linked accounts are kept until you ask us to erase them.

Published tips, derived family-fit facts, and moderation records are kept while they are needed to run the public service, preserve safety decisions, or meet legal duties. Consent choices are stored for up to one year unless you clear cookies sooner.

Changes and contact

We may update this policy as Kidcation changes. We will update the date above and, for material changes, use a reasonable notice method.

Questions about privacy? Email hello@kidcation.app.