Privacy Policy

KUDOZ is a family app. We collect as little as possible, we never sell data, and there are no ads or trackers in the app.

Updated November 3, 2026

Who we are

KUDOZ (kudoz.family) publishes the KUDOZ app and this website. For any privacy question or request: contact@kudoz.family.

Using the app without an account

You can use KUDOZ on a single device without creating an account. In that case, everything (children's profiles, quests, rewards, points, photo proofs) stays on that device and is never sent to us.

What we store when you create a family account

A parent creates the account and the children's profiles. Children never give an email address.

• Parent: email address, password (stored only as a secure hash), display name.
• Children: first name or nickname, age, the illustrated avatar they picked (never a photo of the child).
• Family activity: quests, rewards, XP and Kudoz (in-app coins), their history, and invitation codes used to link a second parent or a child's phone.
• Linked devices: a random identifier for each linked phone, so it can stay in sync, and, if you allow notifications, the phone's notification token.
• Country: the country the family connects from, worked out from the IP address when the app syncs. We keep only the country, never the address, to know which countries KUDOZ is used in.

The parent PIN that protects the parent area stays on each device and is never sent to us.

Photo proofs

A parent can ask for a photo when a child finishes a quest. The photo is resized and compressed on the phone before it is sent, and its metadata (such as location) is removed. It is visible only to the parents of that family. It is deleted from our server as soon as the parent approves or sends back the quest, and after 30 days at the latest. Photos are never used for advertising, never used to train AI, and never analyzed automatically.

Reward photos (Kudoz Premium): a parent can use their own photo as the picture of a reward. This photo is stored on our server, visible only to the family, and deleted when the reward or the account is deleted.

Early access form on this website

If you sign up for early access, we store your email address, first name (optional), your phone platform, the number of children (optional) and your language, only to tell you when KUDOZ is available.

What we do not do

• No advertising, no ad identifiers, no analytics or tracking tools in the app or on this website.
• We never sell or rent personal data.
• No automated profiling of children.

Who processes the data for us

• Hosting: our server is hosted by DigitalOcean, in a data center in New York, United States. If you live in the European Union or in Israel, your data is therefore transferred outside your country, under the contractual safeguards offered by the host (standard contractual clauses).
• App updates: the app checks for updates on Expo's servers (EAS Update). These requests include your IP address, the app version and the operating system, but no family data.
• Subscriptions: Kudoz Premium is sold through the App Store and Google Play, which handle payment. RevenueCat (United States) manages the subscription for us: it receives the family's random identifier and the purchase history, never your card details.
• Notifications: to send a notification (for example “Nova finished a quest”), our server sends the phone's notification token and the message to Expo's notification service, which passes it to Apple (APNs) or Google (Firebase Cloud Messaging).
• App stores: Google Play and the App Store handle downloads under their own privacy policies.

How long we keep data

• Account data: as long as the account exists. It is deleted within 30 days of a deletion request, including any backup copies.
• Photo proofs: until the parent reviews the quest, 30 days at most.
• Early access list: until launch, or until you ask to be removed.
• Technical server logs (IP address, date, requested page): 14 days, for security.

Security

All traffic is encrypted (HTTPS), passwords are stored as hashes, and access to family data is restricted to the family's own devices.

Your rights

You can ask us at any time to access, correct, export or delete your data, or object to its use, by writing to contact@kudoz.family from the email address of the account. To delete everything, see Delete my account. You can also complain to your data protection authority (in France, the CNIL; in Israel, the Privacy Protection Authority).

Children

KUDOZ is designed to be used by families under a parent's control. Children's profiles are created by a parent, and we do not knowingly collect personal information from a child without a parent's involvement. If you think this happened, contact us and we will delete it.

Changes

If we change this policy, we will update the date at the top of this page and, for important changes, tell you in the app.