Privacy Policy

1. Introduction

Kidstock ("we", "us", or "our") operates the Kidstock web application and mobile app (the "Service"). This Privacy Policy describes what information we collect, how we use it, and your choices regarding that information.

2. Information We Collect

We collect different information depending on your role:

• Parents/Guardians (Mission Control): name, email address, and payment preferences (Venmo/Cash App/Zelle usernames, not card numbers).
• Gift Givers (Boosters): name and email address when giving a gift.
• Children (Astronauts): name, date of birth, and optionally an email address. See Section 6 for details about children's privacy.

3. How We Use Your Information

• To operate and maintain investment accounts and portfolios
• To send gift card emails and event invitations
• To provide account notifications (gift received, portfolio updates)
• To verify your identity for account access
• To improve our Service

We do not sell your personal information. We do not use children's data for advertising or behavioral targeting.

4. Information Sharing

We share personal information only in limited circumstances:

• Between account participants: mission control members can view their astronaut's portfolio; boosters see the astronaut's name when giving a gift.
• Service providers: we use Mailgun for email delivery, Amazon Web Services for hosting, and Cloudflare for security. These providers process data on our behalf under contract.
• Legal requirements: we may disclose information if required by law.

5. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and secure cloud infrastructure (AWS). We limit access to personal information to employees and contractors who need it to operate the Service.

6. Children's Privacy (COPPA Compliance)

Kidstock takes children's privacy seriously. We comply with the Children's Online Privacy Protection Act (COPPA) for users under 13 years of age.

What we collect from children

For astronauts under 13, we collect only: first name, last name, and date of birth. An email address is optional and only collected with parental consent.

Parental consent

Before a child under 13 can log in or receive emails from Kidstock, a parent or legal guardian must consent. Mission Control users attest whether they are the parent or legal guardian. If they are not, we send a private, time-limited direct notice and consent link to the parent or guardian's email address.

Consent for Kidstock's internal use does not authorize disclosure of the child's personal information for optional third-party-dependent features. Those features require a separate opt-in and card verification. We may verify an existing paid Kidstock subscriber from their payment relationship or validate a card through a Stripe-hosted check with the issuing bank. No charge is made. Kidstock does not receive or store card details.

Without parental consent

If a parent creates a child's account without providing consent, the child's portfolio is still managed by the parent, but the child:

• Cannot log in to the Service
• Will not receive any emails from Kidstock
• Can only view their portfolio through their parent's account

Parental rights

As a parent or guardian, you have the right to:

• Review the personal information we have collected about your child
• Request deletion of your child's personal information
• Withdraw your consent at any time, which will revoke your child's login access
• Refuse further collection of your child's information (the portfolio can still be managed through your Mission Control account)

An inline consenting parent can withdraw from the Astronaut's Mission Control profile. A parent who consented by email can use the private link in the confirmation email. To review information or request deletion, contact us at privacy@kidstock.app.

7. Your Choices

• Email preferences: you can control gift card email delivery (to you, to the astronaut, both, or none) in your astronaut settings.
• Account deletion: contact us at support@kidstock.app to request deletion of your account and associated data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after changes constitutes acceptance.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

support@kidstock.app