Privacy Policy
Kidube is built so children can watch only what their parents choose — privately, with no ads and no tracking. Here is exactly what we collect, why, and the control you keep.
Last updated June 24, 2026
Draft — pending legal review. This page is placeholder content for the Kidube launch build. It is not yet final, does not constitute legal advice, and is not a binding agreement. The published version will be reviewed by qualified counsel before launch.
Our privacy-first approach
Kidube is an ad-free, parent-curated kids' video platform, and protecting children's privacy is the foundation of how it is built — not a setting bolted on afterwards. This policy explains what information we collect, why, and the choices you have.
We follow the U.S. Children's Online Privacy Protection Act (COPPA) and the children's-data provisions of the EU/UK General Data Protection Regulation (commonly called GDPR-K). Where this draft and the final reviewed policy ever differ, the final published version governs.
Children are not accounts
Children never create or hold their own Kidube account. A parent or guardian registers and authenticates, and each child simply selects a profile on a device the parent has already unlocked — Netflix-style. There is no kid login, password or email for a child to leak or be targeted through.
Because the parent is the account holder, the parent is always in control of the limited information associated with each child profile.
Information we collect
We practice data minimization: we collect only what is needed to run the service.
- Parent account data: name, email address and authentication credentials (passwords are hashed with argon2id — we never store them in the clear).
- Billing data: handled by our payment processor, Mollie. We never see or store full card numbers.
- Child profile data: a first name or nickname, an avatar and an age band — nothing more is required.
- Service data: the curation choices a parent makes and the minimal watch signals needed to sync the experience, enforce screen-time limits and pay creators fairly by watch-time.
- Technical data: basic, security-oriented logs (such as app version and coarse error diagnostics). We do not build advertising or behavioral profiles.
How we use information
- To provide the service: household setup, profile switching, curation and cross-device sync.
- To enforce the controls you set, such as screen-time limits and the parent gate.
- To operate the moderation gate so no video reaches a child without approval.
- To calculate creator payouts from the subscription pool by genuine watch-time.
- To keep accounts secure, prevent abuse and meet our legal obligations.
No advertising or third-party tracking
Kidube never serves its own ads and never loads third-party advertising or tracking SDKs in the kids' experience. Nothing is profiling your child to sell ads.
The one honest exception is the parent-curated external lane: if a parent chooses to add a video from an outside platform (such as YouTube), it plays inside that platform's official embedded player and shows that platform's own ads and is subject to that platform's data practices. Kidube never downloads, scrapes or re-hosts third-party video.
Legal bases for processing (GDPR)
Where GDPR applies, we rely on: performance of our contract with you (to provide the subscription and features); your consent (including verifiable parental consent for children's data); our legitimate interests (to keep the service secure and working); and compliance with legal obligations.
Service providers we work with
We share data only with vetted processors who help us run Kidube, under contracts that require them to protect it and use it only on our instructions.
- Mollie — payments and creator payouts (we never store card data).
- Bunny Stream — secure hosting, transcoding and delivery of Kidube-hosted video.
- Infrastructure, error-monitoring and email providers strictly needed to operate the service.
How long we keep data
We retain information only as long as needed for the purposes above or as required by law. You can delete a child profile, and the associated data, at any time, and you can close your household account — after which we delete or anonymize personal data on a defined schedule, except where we must retain limited records (for example, financial records).
Your rights and choices
Depending on where you live, you may have the right to access, correct, export or delete personal data, to object to or restrict certain processing, and to withdraw consent. You can exercise these rights from your account settings or by contacting us.
Parental rights (COPPA)
As a parent or guardian you can review the personal information associated with your child's profile, delete it, and refuse further collection or use of it. Because a child's experience lives inside your account, these controls are available to you directly — and our support team is here to help.
International data transfers
Kidube may process information in countries other than where you live. When we transfer personal data internationally we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect it.
How we protect your data
We use industry-standard safeguards including encryption in transit, hashed passwords (argon2id), least-privilege access, signed short-lived video URLs and audited moderation decisions. No system is perfectly secure, but security is a first-class part of how Kidube is engineered.
Changes to this policy
We will update this policy as Kidube evolves and will revise the “last updated” date above. For material changes affecting children's data, we will provide prominent notice and, where required, obtain renewed parental consent.
How to contact us
Questions or requests about your privacy can be sent to support@kidube.com. We read every message and aim to respond promptly.