Kimit Kids Privacy Policy

1. Who we are and how Kimit Kids works

• Kimit Kids is made by Kimit Academy, Cairo, Egypt, which is responsible for the information described here. [email protected].
• Children don't have accounts. A grown-up signs in with their Kimit account and adds each child as a profile. By adding a child, you confirm you are their parent or legal guardian, or have the guardian's permission.
• Each child has a 4-digit PIN, and settings for grown-ups sit behind a grown-ups' check (a parent PIN or a sum).

2. Using Kimit Kids without signing in

Chess against the computer, Kids Learning, languages and Quran work without a grown-up signed in, and nothing personal leaves the device. Quran recitations are streamed from EveryAyah.com, which sees the device's internet address, as any website does.

3. What we keep about a child

• Profile: a display name, one of six cartoon avatars (never a photo), date of birth (children are 3 to 15 years old when added), and the PIN, stored as a one-way hash that nobody, including Kimit, can read.
• Student details, only if a guardian adds them: first and last name, country and city, school, education system and grade, and a contact phone number (the guardian's own by default).
• Learning and play: level, language, points, progress, badges, chess games and their moves, and settings, including notes the child writes on book pages and names they give chess players.
• Usage: which parts of the app were opened and reached, recorded as codes and numbers, never names or typed text. With each record we store the child's age, the guardian's country and city, the platform and the app version. Records are anonymised after 24 months.
• We don't collect a child's gender, photos, exact location or contacts.

4. What we keep about grown-ups

Your Kimit account (name and mobile number), your role in each child's circle and how you are related, the name the child uses for you, the invites and connection requests you send and receive, the reports you make, and a notification token for the device you signed in on. Sign-in and password codes are sent to your phone by SMS.

5. Raise Your Hand voice notes

• A child can record a question of up to 60 seconds on a book page, and helpers can record answers of up to 5 minutes. The app uses the microphone only when someone taps Record.
• Notes are stored encrypted with Amazon Web Services. Only the child's family devices and the child's Help Team can listen. The Help Team is the child's guardians and, by default, every family member who joins the child's circle.
• Kimit's team cannot play voice notes, and we don't transcribe them or run them through AI.
• A deleted note can be restored for 30 days, and is then erased.

6. The family circle

Each child has a circle of grown-ups: guardians, co-guardians and family members such as grandparents or a caregiver. Everyone in the circle sees the child's full name, avatar, date of birth and age, and the child's mates and requests. Only guardians and co-guardians see the student details (school and phone).

7. Mates and other families

• Children never search for anyone and can't be found. Only grown-ups find each other, by exact mobile number or Kimit code, and a result shows a first name and last initial, with no photo.
• Two children become mates only when the grown-ups of both families confirm.
• Other families see a child's first name, an initial, avatar and level, and connected parents also see the child's age group. Whether a child is online shows only if a guardian turns it on; it is off by default.
• Leaderboards show children from the child's own family and their mates: first name, initial, avatar, rank and score. A guardian can turn leaderboards off for a child.
• There is no free-text chat between children. Mates can send stickers from a fixed set of 8, up to 20 a day, and stickers are kept for 30 days.
• Grown-ups can block silently and report a child or an adult. "Tell my grown-up" alerts only the child's own family. Kimit's team reviews reports and can pause a child's online play.

8. Notifications

Notifications go only to devices where a grown-up has signed in, which may be the child's tablet. Some include the child's first name, for example when the child needs help. They are delivered through Google Firebase Cloud Messaging. Invites and connection requests also arrive in your Kimit app inbox. Kimit may send announcements to families by school, city, grade or age group.

9. No ads and no tracking

Kimit Kids shows no ads and contains no advertising, analytics or crash-reporting tools from other companies. Firebase is used only to deliver notifications, with its analytics and advertising ID switched off. We never sell children's information or use it for advertising.

10. Who at Kimit can see children's information

Only Kimit's super administrators can open children's records in our admin console: name, date of birth, student details and contact phone, circles, mates, games and reports. They cannot listen to voice notes, and every staff action is logged. Our usage reports only show groups of at least 10 children.

11. Service providers

We share information only with the providers that run parts of Kimit Kids for us:

• Supabase (European Union): our database and servers, which hold the profiles, circles and progress.
• Amazon Web Services (United States): school books, learning packs and voice notes.
• Google Firebase Cloud Messaging: delivering notifications.
• Twilio: SMS codes to the grown-up's phone.
• EveryAyah.com: Quran audio, streamed to the device.
• When you share an invite from your phone by WhatsApp or SMS, the message includes your child's name. Your phone's app sends it, not Kimit.

12. Device permissions

• Microphone: only to record Raise Your Hand notes.
• Notifications: asked once, after the grown-ups' check.
• Kimit Kids does not use the camera, location, photos or contacts.

13. Keeping and deleting information

• Removing a child closes their profile at once: their circle, invites and mates end, their usage records are anonymised, and their voice notes are erased after 30 days. The closed profile keeps the child's name, date of birth, avatar, student details, points and settings.
• Deleting your Kimit account (in the Kimit app or at op.kimitacademy.com/delete-account) also closes the children you added: their names, student names, school, city and country, settings and progress are removed, and the PIN stops working. Their date of birth, avatar, grade, education system, points, badges, games and the contact phone number are kept without a name.
• Progress saved on a device stays there until a grown-up taps "Erase this device" or the app is removed.
• Notification tokens are switched off after 60 days without use and deleted 90 days later.

14. Your choices and rights

You can:

• See and change your child's profile and student details in the app
• Turn off leaderboards and the online status for a child
• Remove a child, or delete your Kimit account
• Ask for a copy of your family's information, or ask us to delete it, at [email protected]

15. Changes to this policy

When this policy changes, we update this page and its date.

16. Contact us

For any question about Kimit Kids and your child's information: Kimit Academy, [email protected], Cairo, Egypt. The Kimit app and website have their own Privacy Policy at kimitacademy.com/privacy-policy.