[bracketed] fields and confirm it matches how the live service actually handles data.Kaleido Club (“Kaleido Club,” “we,” “us”) is a family learning-and-play app operated by [LEGAL ENTITY]. We built it to be ad-free, and we do not sell children’s personal information. This policy explains what we collect, why, and the choices parents have. It is written to align with the U.S. Children’s Online Privacy Protection Act (COPPA) and similar rules.
Kaleido Club has no open sign-up. A parent or legal guardian requests access (joins the waitlist and agrees to this policy), we approve the family, and only then does the parent create profiles for their children. Children cannot create accounts themselves, and there is no public chat.
We do not knowingly collect precise geolocation, contacts, photos from the device, or use third-party advertising/behavioral-tracking networks. Optional character voices are generated by our own text-to-speech service from a fixed word set, not from anything a child records, unless a feature explicitly uses the microphone on-device (e.g., pitch practice) — audio for those features is processed in the browser and not stored by us. [Confirm this matches the shipped features.]
We share personal information only with service providers that help us run the app (for example, hosting and our text-to-speech generation), under obligations to protect it, or where required by law. [List sub-processors.]
Our parent-facing pages link to Kaleido’s other homes on the web — our YouTube channel (songs and videos) and our shop. We do not embed YouTube videos or any third-party players inside the child experience. Those services are operated by their own companies (Google/YouTube, Shopify) under their own privacy policies, and we encourage parents to supervise viewing there — for younger children, YouTube Kids may be a better fit for watching our songs.
As a parent/guardian you may review your child’s information, ask us to correct or delete it, and withdraw consent (which ends the child’s use of the app). To make a request, contact privacy@kaleidoslearningworld.com. We will verify you are the parent on the account before acting.
We keep profile and progress data while the family account is active. On a verified deletion request, or after 24 months of account inactivity, we delete or de-identify the child’s personal information. [Counsel: confirm the 24-month retention period.]
Passwords are salted and hashed, sessions are protected, traffic is served over HTTPS, and access to production data is limited. No system is perfectly secure, but we work to protect your family’s information.
If we make material changes we will update this page and, where appropriate, notify parents by email.
[LEGAL ENTITY] · privacy@kaleidoslearningworld.com · [MAILING ADDRESS]