Where2Kid Privacy Policy

Last Updated: February 2026

Introduction

Where2Kid ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise handle your information when you use our mobile application and services (the "App").

Please read this Privacy Policy carefully. By downloading, installing, or using Where2Kid, you acknowledge that you have read and understood this policy and agree to its terms.

Information We Collect

Information You Provide Directly

• Email Address: Collected for account creation and authentication through Supabase Auth. Used to identify your account and enable login.
• Location Information: We collect the zip code you enter in the app to help find activities near you. Device location data is optional and only collected if you choose to enable location services.
• Search Queries: We collect information about the activities and categories you search for within the app.
• Favorites: We track which activities you mark as favorites to personalize your experience.

Information Collected Automatically

• Device Information: Basic device identifiers and app usage analytics to improve app functionality and performance.
• Usage Data: Basic app usage patterns such as screens viewed and features used, to help improve the experience.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Where2Kid service
• To authenticate your account and enable you to log in securely
• To find and display kid-friendly activities near your location
• To personalize your experience and remember your preferences
• To save and manage your favorite activities
• To analyze app usage and optimize performance
• To communicate with you about updates, new features, or important service announcements
• To comply with legal obligations and enforce our terms of service

Third-Party Services

Where2Kid uses the following third-party services to deliver our functionality:

Supabase

We use Supabase for data storage and user authentication. Your email address and account data are stored on Supabase servers. For more information about how Supabase handles your data, please review their privacy policy.

Google Places API

We use Google Places API to find and display information about kid-friendly activities near your location. When you search for activities, your location (zip code and/or device location) is sent to Google to retrieve relevant results. For more information, review Google's privacy policy and terms of service.

Data Retention

We retain your personal information for as long as your account is active or as long as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us.

Search history, favorite activities, and location data associated with your account will be retained for the duration of your account and may be used to improve your experience. You can delete individual items from your favorites or clear your search history within the app.

After account deletion, we will remove your personal information from our active systems within a reasonable timeframe, though backup copies may be retained for legal compliance and operational purposes.

Children's Privacy (COPPA Compliance)

Where2Kid is designed for parents and guardians—not for children. Our App is not intended for children under 13 years of age. We do not knowingly collect personal information directly from children.

Parents and guardians who use Where2Kid are responsible for any children who may use the device on which the App is installed. We do not collect, use, or share personal information from or about children under 13 in a way that violates the Children's Online Privacy Protection Act (COPPA).

If we discover that a child under 13 has directly provided us with personal information, we will take steps to delete such information and terminate the child's account.

Data Security

We implement appropriate technical, administrative, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Data Rights

Depending on your location, you may have the following rights:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can request that we update or correct inaccurate information.
• Deletion: You can request that we delete your personal information (subject to legal retention requirements).
• Opt-Out: You can opt out of marketing communications at any time.

To exercise any of these rights, please contact us using the information provided in the Contact Us section below.

Location Permissions

Where2Kid requests optional device location permissions to help find activities near you. Location sharing is optional and you can enable or disable it at any time through your device settings. Your zip code is the primary method we use to locate activities, and this does not require device location permissions.

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We only share your information with third-party service providers (Supabase, Google Places API) as necessary to provide the App's functionality. These service providers are contractually obligated to use your information only as necessary to provide their services to us.

We may disclose your information if required by law, court order, or governmental request, or to protect our legal rights and the safety of our users.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by updating the "Last Updated" date at the top of this policy. Your continued use of Where2Kid following any changes constitutes your acceptance of the updated Privacy Policy.