Privacy

KiddoCue is operated by KiddoCue LLC, a Connecticut limited liability company (“KiddoCue”, “we”, “us”).

Short version: KiddoCue is for families who already know each other. Only the families you connect with see your kids, and you can delete everything at any time.

What we keep

Your account: first name, username, and a scrambled (hashed) password. We can’t read your password.
Your family: family name, kids’ first names, their avatars or photos, and birthdays if you add them.
Your email: every parent gives one when they sign up, so they can reset their password and we can reach them about their account. We never share or sell it.
If you add them (all optional): your phone number, up to two emergency contacts, and your kids’ allergies and medical notes, and their favorite foods and foods they won’t eat.
What you post: invites and RSVPs, asks for help, messages, and plans and photos from hangouts you already have.
Your settings: time zone (for reminders), quiet hours, and which alerts you want.
Notifications: if you turn them on, your phone’s push address (or, in the iPhone app, Apple’s device token) so we can send them.

We don’t read your phone’s contacts, and we don’t track your location.

Who can see what

Your kids, their photos and birthdays: your family, and only the families you’ve connected with.
Hangout photos: only the parents of the two families on that hangout. Only the family that added a photo can delete it.
Invites: the host (and any co-host family they add) and the families invited. Guests don’t see the guest list. Comments on an invite, the host’s 📣 messages and the 📸 group photo are seen by everyone invited, and by guests who RSVP’d from the party link.
📸 Group photos & 📣 announcements: photos added to a group’s album and announcements from its leaders are seen only by the families in that group. Leaders see how many families have seen an announcement (not which ones). A family can ask for no photos of their kids in a group’s album, and everyone in the group sees that request.
📅 Group meetings, 📝 to-dos, 🙋 sign-ups & ✅ attendance: seen only by the families in that group. On a to-do, each family sees only whether they’ve done it; leaders see which families have. Everyone in the group sees who took a sign-up spot (a parent’s first name and family name). Attendance is seen only by the group’s leaders.
📥 Email to calendar: an email you forward to your family’s KiddoCue address (or paste in) is sent to Anthropic’s Claude to find the dates, the same way as a schedule photo. We keep the dates it finds and the email’s subject so you can add them; we don’t keep the email itself. Emails that don’t come from a parent’s own email address are ignored and not read.
🏠🏠 Two homes: if you link a kid with their other home, the other parent sees only that kid’s schedule: whose day it is, handoff times and place, the name you gave your home, and the days you ask to swap (with your note). They don’t see your family name, calendar, messages, connected or trusted families, asks, address or anything else, and your two families aren’t connected. Either of you can unlink any time; the shared schedule is removed. With 🙋 Just me, nothing is shared with the other parent at all. If you turn on 👪 What families see, your connected families see only which days in the coming week your children are at their other home and the contact line you wrote; never the other home’s name or your schedule.
📸 Family moments: the lines and photos you (or your kids) add are seen only by your own family. If you make a 👵 grandparents’ link, anyone with that link and your 4-number family code sees your family name, your kids’ first names, only the moments and 📖 Memory Lane memories (with their photos) you mark 👵, and, if you turn it on, the kids’ activities and kid events for the next two weeks (title, time, place). Never anything else. After 10 wrong codes in an hour the link pauses for an hour. Making a new link or turning it off stops the old one working.
📺 TV: a TV you sign in with a code shows only what you pick: today’s plan and chores for each child, Memory Lane photos and the shows apps you allow. The TV can’t change anything. In the KiddoCue Fire TV app, the TV sends us the names of the apps installed on it so you can pick from them; we never see which show is on. If you turn on TV time, homework first or a child’s own list, the TV asks who’s watching, and we keep which app each child opened and for how long (for 30 days) so you can see it in 📊 TV history. You can sign a TV out from your phone at any time.
📊 Class trouble spots: if a class’s teacher or room parent turns it on, they see which skills the class as a whole is finding hard (like “Regrouping in subtraction · 4 of 9 families”), added up from parents’ homework checks over two weeks. It never shows a child’s or family’s name, answers or photos, needs at least 5 families, and a skill shows only once 3 or more families had trouble with it. Any family can leave theirs out in the class.
Party links: if a host shares a party link, anyone with it sees the invitation: its title, design and cover photo, date and time, the host family’s name, the birthday kid’s first name and avatar, and any gift note. Not the address. The address shows once you RSVP going or maybe (with or without an account), unless the host keeps it for KiddoCue families only. If you RSVP without an account, the host sees the name you typed and your answer, and your phone remembers your RSVP so you can change it, comment, and see the group photo.
🧺 What to bring: if an invite has a sign-up list, anyone with the link sees what’s on it and what’s covered. Who’s bringing what (the name you gave, or your first name and family name) shows only to the host, the families invited, and guests who RSVP’d.
“Email me updates”: if you RSVP from a party link and give your email, we use it only to tell you about that party (a new time or place, a message from the host, the group photo, or a cancellation). The host doesn’t see it, and it’s deleted with the party.
Emailed invites: if a host emails a party invite to a list of addresses, we use them only to send that email. We don’t keep the addresses, just a scrambled fingerprint so the same person isn’t emailed twice.
Classes you’re waiting to join: families in the class see your family name, parents’ first names and the kids you picked, so they can let you in. You see nothing of the class until then.
Messages: the families in that chat.
Classes and groups: members see the kids you put in the group (first name and avatar) and parents’ first names. Your phone number and kids’ birthdays are shared with a group only if you turn that on for that group. Allergies, photos and emergency contacts are never shared with a group.
Your email: nobody. It’s only used to send you a password reset link and, unless you turn it off, a link to each new hangout.
Your phone number: only the other family on a hangout with you, and the host or families coming to a party with you, as Call and Text buttons. You can turn this off in Settings.
Allergies and medical notes: only the family who has your kid, meaning the hangout host or party host, and a family deciding on your hangout request. Never shown to all your connected families, and never included in notifications, the calendar feed, or chats.
👀 Virtual tour on kiddocue.com: anyone can look around an example family on our website before signing up. Peeking is read-only, lasts a few hours, and never shows or reaches real families. We don’t ask for or keep anything about the person peeking.
⏳ Screen Time: if a parent turns it on, we keep each child’s limits and allowed hours, and for today only, how many minutes they’ve used and any extra time. We count time only while KiddoCue is open on screen; we don’t see other apps.
🎮 Game Room: we keep each child’s games, best scores and squishy collection, and the asks their parents answer. The games run on the device; there are no ads, no in-app purchases and no chat in them. (Songs a parent picked in our old 🎵 Music, which we no longer offer, stay with your account until you delete it.)
📷 Camera: photos and videos taken in KiddoCue are seen only by your family: the parents see every camera roll, and a child sees only their own. Kids can’t send them to anyone. Each camera roll keeps the newest 100 photos and 20 videos; older ones are deleted unless a parent saved them to Memory Lane. Parents can turn the camera off for each child.
📖 Memory Lane: seen only by the parents in your family, except memories you choose to mark 👵 for a grandparents’ link or to show on your own TV. It shows what you already saved (moments, play dates, parties, birthdays, test grades) plus the milestones, photos and letters you add, which we keep until you remove them or delete your account. A sealed letter can only be read by the parent who wrote it until the day it opens.
📚 Study guides: a study guide photo, PDF or typed topic is sent to Anthropic’s Claude to make the study guide, with your child’s grade (not their name). The photo isn’t saved. We keep the study guide (key ideas, flashcards, questions and answers), the test date, and how your child did on quizzes and practice tests; only your family’s parents see the scores and the answer key. If you share a study guide with a class, the families in that class see the study guide, the test date, and your first name and family name; never your child’s scores. Study guides are deleted after about 4 months.
Medicine reminders: the medicine, dose, times and who gave each dose are seen only by the parents in your family. Never shared with other families, groups, the calendar feed, or the admin page. Dose history is kept for about 45 days.
Why you canceled: the reason and note you pick when canceling are shown only to the families that plan involved.
Favorite foods: shared the same way as allergies (only with the family who has your kid), unless you turn sharing off for that kid. Then only your family sees them.
Emergency contacts: only the family who has your kid, from 3 hours before a hangout or party until 3 hours after.
Trusted families: only the two families in each pair. Nobody else, including your other trusted families, classes or groups, can see who you trust. Your labels for a family (like “Neighbor”) are only for you. An activity you choose to share with a trusted family shows them its name, your kid’s first name, the day, time and place. Removing a family is silent.
Rides, drop-offs and pickups: when you ask for help, the families you ask see who, where and when. The family who says yes also gets your phone number, those kids’ allergies and your emergency contacts.
Your to-do list and grocery list: only the parents in your family.
Your family calendar (things you add and after-school activities): only the parents in your family. No other family can ever open it.
Class half days and days off: only families in that class, with the name of the parent who added it.
“We can host kids”: only your trusted families and the classes you pick see that you’re home that day, until when, how many kids, and your note. You can take it back any time.
Kid mode: your kid’s asks go only to your own family.
Your calendar link: anyone who has it can read your hangouts, so keep it private. You can reset it in Settings.

Kids’ own iPads and phones

A parent can set up their kid’s own iPad or phone with one tap while signed in on it, or from their phone with a one-time code. We don’t ask kids for an email, a phone number, a password, their age or anything else: the device is simply signed in as that kid, using the name and picture their parent already added. We keep only a label for the device (like “Ella’s iPad”), when it was set up and last used, and a secret sign-in key stored as a scrambled code.

A kid’s device can only see their friends from families their parents connected with, kid mode, games with their own family, and messages. It can’t search for people, and nobody can find or contact a kid who isn’t connected to their family.
Kids can message their own grown-ups and brothers and sisters, and kids in 🤝 trusted families when both families turned messages on. Messages are ready-made phrases unless a parent turns on “type their own messages”; with friends, both families must turn it on. Typed messages are short (200 characters), and we block phone numbers, addresses, emails, links, usernames for other apps and unkind words, so kids can’t share how to reach them. No photos. The grown-ups in both families can read every message. We keep them for 30 days.
There are no ads, and we don’t track kids or use their activity for anything but showing it in the app.
A shared kids’ iPad: a parent can make one device the kids’ iPad. It keeps only its own device key and shows the names of the kids the parent picked. A child taps their name, and nobody is signed in until a parent says yes on their own phone. We keep each ask (which child, which device, when, and the answer) for a day.
Parents can sign a kid’s device out at any time (👪 Family & people → 📱 Kids’ own iPads & phones), and deleting the family account deletes everything about the kids, including their devices and messages.

Games

Kids can play simple turn-by-turn games (tic-tac-toe, connect four, checkers, chess) with each other, a grown-up in their own family, or the KiddoCue Bot, when their parent turned games on. Games are only within your own family. Kids can’t type: they can only send ready-made reactions. We keep the board, the moves and the reactions for 30 days, and a parent can end a game.

Our Facebook Page

KiddoCue may post public local events (like a fair or library story time) to the KiddoCue Facebook Page. Those posts never include your family, your kids, or who’s interested in or recommends an activity.

Team and school calendars you follow

If you follow a team or school calendar link, our server reads that link every few hours to keep your calendar up to date. The link and its events are stored with your family’s calendar, and only your family sees them.

💡 Suggestion box

What you send in the 💡 Suggestion box goes to the KiddoCue team with your name and family name (and your email, if you added one, so we can write back). Other families never see it. You can see what you sent, where it stands and any answer in the same place.

📋 Caregiver notes

Caregiver notes you save (each child’s routine, your pets, your home, and who to call) are seen only by the parents in your family. Allergies, medicine and phone numbers you already saved are shown on them for you. A care sheet is made on your device: KiddoCue doesn’t send it to anyone. Door, alarm and spare key codes are kept separate and are only on a sheet when you tick them. If you make a 🔗 share link, anyone with that link can see that care sheet (your latest instructions) until it ends, 1 to 30 days later, or until you turn it off. The link isn’t listed anywhere or found by search engines.

📝 Homework

If you use 📝 Homework, the photo of your child’s homework is sent to Anthropic, whose Claude AI checks it, along with your child’s first name and grade. KiddoCue doesn’t keep the photo. We keep the list of problems, your child’s answers and the check (so you can look back at them) for 60 days, seen only by the parents in your family. To write 🧠 practice problems like the page, the list of problems and how each one went (not the photo or your child’s name) is sent to Claude once more. Your child only sees which problems to recheck, never the answers. Please photograph just the homework page.

🧠 Practice

Math and spelling practice is made by KiddoCue itself. When a spelling word is read aloud in our natural voice, just that word or its practice sentence is sent to OpenAI to turn it into speech (nothing about your child), and the recording is reused for everyone. When Hoot 🦉 talks in a natural voice, only his own words (a lesson line or his answer, never your child’s name or what they typed) are sent to ElevenLabs to turn them into speech, and the recording is reused. Grown-ups can pick his voice, or the device’s own voice instead. Reading, science and social studies sets are written by Claude (Anthropic) for each grade, once a day, and shared by everyone in that grade: nothing about your child is sent to make them. We keep your child’s practice scores and times, and the times from the ⏱️ Homework timer, for 60 days so you can see how they’re doing; only the parents in your family see them.

🎤 Talking to KiddoCue

When a child taps 🎤 to ask Hoot a question, or to read a page out loud, the words they say are turned into text by their own device’s speech recognition. Depending on the device, Apple or Google may process the audio to do this. KiddoCue does not record or keep audio. For reading, the text is used only on the screen to light up the words, and it is not saved.

Snap a schedule

If you use 📷 Snap a schedule, the photo or PDF you pick is sent to Anthropic, whose Claude AI reads it and sends back the list of dates. That’s the only thing it’s used for: KiddoCue doesn’t keep the photo, and nothing goes on your calendar until you check the list and tap Add. Please only snap the schedule itself.

🍎 School menu works the same way: the menu photo, PDF, pasted text, or the menu we download from a link you paste, is sent to Anthropic to read the days and dishes, and only that list is kept. Which foods your kids won’t eat, and which days they take a home lunch, are seen only by your family. If you share a menu with your kid’s class, the families in that class see the menu itself (the days and dishes) and your family name as the one who added it, nothing else.

Weather

If you use your location for the weather, your phone asks for your rough location. It stays on your phone. Only a rounded version (about 1 km) is sent to Open-Meteo to get the forecast. KiddoCue’s server never sees it. If you haven’t turned that on, the 3-day weather on Today uses your family’s zip code (if you type one in), rounded to about 10 km, sent from your phone to Open-Meteo the same way. The zip code is looked up on our own server, and other families never see it. You can turn the weather card off in Settings.

Address suggestions

When you type in an address box (like a party’s Address or a hangout’s “Where”), the letters you’ve typed are sent from our server to our address search provider (Google, or OpenStreetMap’s free search) to suggest matching places, near your town if you’ve set one. Your name and account aren’t sent with it. Nothing is saved until you save the form.

What we don’t do

We don’t sell your data, and we don’t share it with advertisers. A few features send only what they need to a service that does the work (like Anthropic reading a homework photo), as described above.
No tracking or analytics scripts.
Families you aren’t connected with can’t find or see you.

Blocking and reports

You can block any family. They aren’t told. If you report a family, message or photo, the report goes to the KiddoCue team with who sent it, so we can follow up. The other family doesn’t see it.

What the KiddoCue team sees

The person running KiddoCue has an admin page with counts (how many families, hangouts and so on), family names and usernames, when each family last used the app, and reports sent with the 🚩 button. It doesn’t show messages, photos, emails, phone numbers or allergies, except a message or photo someone reported.

To see which parts of the app are helpful, KiddoCue counts how many families used each part each day (for example “Calendar: 12 families, 30 times”). It counts uses, not what was in them, and not who: while the day is going on, a family is a scrambled code so they aren’t counted twice, and at the end of the day that code is thrown away and only the totals are kept. No outside analytics company is involved.

KiddoCue also counts website visits the same way: how many people opened kiddocue.com each day, and which site or link (like a flyer’s ?from= tag) brought them. A visitor is a scrambled code that changes every day and is never saved, so no one can be followed from day to day. No cookies are used for this.

Backups

We keep a daily copy of the app’s data for 14 days, on the same private server, so we can recover from a mistake. A family you delete disappears from those copies within 14 days.

Deleting your data

You can clear any contact or medical info at any time in the app. To delete everything, go to ⚙️ Settings → Delete account. You can delete just your login (if another parent stays), or your whole family: kids, photos, posts, invites, and messages. Hangouts you had with another family stay in their history, but your photos are removed from them. Deleting can’t be undone.

To get a copy of your data, go to ⚙️ Settings → Download our data.

Getting back in

You can get a reset link by email. You can also create a recovery code in Settings and keep it somewhere safe, or get a one-hour reset code from the other parent in your family.

Questions

See Help for how everything works and the Terms of Use, or email us.