Kiddoh is intended to be set up and managed by an adult parent or legal guardian. A parent or guardian should create a child profile only for a child they are authorized to represent and should use a nickname if possible. The profile asks for a child’s display name or nickname, one of three age groups (3–5, 6–8 or 9–12), and a selected avatar. Kiddoh does not ask for a child’s exact date of birth, home address or school in the profile.

The parent or guardian is responsible for providing any consent required for the child’s information and for contacting Kiddoh if information should be corrected or removed.

Parent account information: email address, the grown-up name if provided, account and trial dates, and sign-in details. Passwords are stored as salted, one-way hashes; Kiddoh does not store them in readable form. If Google sign-in is used, Kiddoh receives the Google account details needed to sign in, including an account identifier, email address and available profile name.

Child profile information: the display name or nickname, age group and avatar selected by the parent or guardian.

Search and video information: a search phrase, selected age group, and public YouTube video details such as video IDs, titles, descriptions, thumbnails and duration. Search phrases and video results may be held temporarily in Kiddoh’s video cache to return results faster. Cache entries expire, typically after three hours for short-video feeds, six hours for general feeds and twelve hours for longer-video feeds; some empty results expire sooner.

Payment information: for M-Pesa, Kiddoh sends and stores the phone number used for the payment prompt, along with the payment reference, amount, provider, selected plan term, receipt where returned, and payment status. For card or bank checkout, the payment provider receives the details entered on its checkout page. Kiddoh’s current backend does not receive or store the full card number.

Device-stored information: saved video IDs, selected categories, daily viewing limit, sleep and wake times, today’s watch-time total, cached profile details, and a sign-in session. These controls and watch-time totals are stored on the device or browser and are not uploaded as a viewing-history record by the current app.

Voice search: when enabled, the device’s speech-recognition feature converts speech to a text search phrase. Kiddoh receives and uses the returned text to search; the device or speech-recognition provider may process audio under its own terms and privacy policy.

We use account information to create and secure family accounts, sign users in, provide the trial and subscription access, respond to support requests, and protect the service. We use a child’s age group and selected categories to request and filter video recommendations. We use search phrases to fetch matching video results. Payment records are used to confirm payments, activate paid access, resolve payment questions and maintain service records.

Kiddoh staff or administrators with authorized access may see account details, child profile details and payment status when managing accounts, support, safety or service settings.

Kiddoh uses YouTube API Services to find videos and uses YouTube’s embedded player for playback. Search phrases and video requests are sent to YouTube. When a video player is loaded or used, YouTube may receive device and usage information and may use cookies or similar technologies under its own policies. YouTube may also provide advertisements or related content through its player; Kiddoh does not control YouTube’s processing or advertising.

Google processes information when Google sign-in is selected. Paystack processes card or bank checkout information, and Safaricom processes M-Pesa payments. The device or browser may provide speech recognition. Kiddoh shares only the information needed for each provider to perform its service. Those providers handle information under their own terms and privacy policies.

Kiddoh’s backend and database are operated using third-party hosting and database services configured for the deployment. Depending on provider and deployment settings, information may be processed outside the country where you live. Where applicable, Kiddoh will use safeguards required by data protection law.

The mobile app stores family settings and cached profile details on the device. The web app stores a sign-in session and app settings in the browser’s local storage. Signing out removes the current sign-in token from the device; the server session is deleted when the sign-out request reaches Kiddoh. Signing out does not currently remove all saved settings or cached profile details from that device or browser. Those local items can be cleared by clearing the app’s data or the browser’s Kiddoh site data.

The YouTube player may use cookies or similar technologies when it loads or plays a video. See Google and YouTube’s privacy information for how they handle those technologies.

Kiddoh keeps account and subscription information while it is needed to provide the account, handle payments and disputes, maintain security, and meet legal obligations. Sign-in sessions expire after 30 days. Video-feed cache entries expire as described above. Payment and account records do not currently have an automatic deletion period in the app.

There is no self-service delete-account button at this time. A parent or guardian can request access, correction or deletion by emailing kiddohflix@gmail.com from the grown-up account email. We may retain limited records where needed for legal, accounting, payment or security obligations. Please do not send passwords or full payment-card details.

A parent or guardian may update the child profile in Kiddoh and may ask us to access, correct or delete personal information by contacting us. Depending on the law that applies, you may also have rights to object to or restrict processing, withdraw consent, request a copy of information, or complain to a data protection authority. In Kenya, the relevant authority is the Office of the Data Protection Commissioner.

You can remove local settings and cached profile details by clearing Kiddoh’s app data or the browser’s Kiddoh site data. You can also manage Google account permissions through your Google account settings.

Kiddoh uses account authentication, password hashing and access controls to help protect information. No internet service can guarantee perfect security. Please keep account credentials private and tell us promptly if you believe an account has been accessed without permission.

We may update this policy when Kiddoh’s features or legal requirements change. The effective date at the top identifies the current version. For privacy questions, email kiddohflix@gmail.com.