Privacy policy
Your family’s information
Kidifly is made for children, so we keep this short, plain and strict. Last updated 12 October 2026.
Who runs Kidifly
Kidifly is operated by OneVault LLC, USA. Questions about this policy are answered in the support centre, which also explains how to exercise every right listed below.
What we store
About you, the parent: your name and email address as provided by your OneVault ID, the country recorded on that ID, when you signed in, and your membership status. We never see or store your OneVault password.
About each child profile you create: the first name or nickname you type, the avatar and narration voice you pick, the grade you choose, an optional four-digit PIN (stored only as a one-way hash), and the lessons played: which lesson, which level, how many stars, how many tries, how long it took and when. That is all. No surname, no date of birth, no photo, no location, no messages, no voice or camera recordings.
Technical: a session cookie so you stay signed in, a small cookie that tells our edge cache you are signed in, and standard server logs (IP address, page, time) kept for security and deleted after 30 days. Sound, music and voice preferences live only in your browser.
Why we store it
To sign you in, to let each child pick their own profile, to show the right grade of lessons, to remember stars and progress, and to show you how each child is doing. Nothing else.
What we never do
- No advertising of any kind, and no advertising trackers.
- We do not sell, rent or share your or your children’s information with anyone for marketing.
- No third-party analytics, fonts or scripts on pages children use.
- Children never have an account, a password, an email address or a public profile, and cannot contact anyone through Kidifly.
Who can see it
You, through your family area. Our staff, only when needed to support you or keep the service running, through an access-controlled control panel. Our hosting provider, Amazon Web Services, stores the data on our behalf in its Oregon region (us-west-2) and does not use it. OneVault, which provides your sign-in, receives only the fact that you signed in to Kidifly.
How long we keep it
For as long as your account exists. If you remove a child profile, that child’s information and progress are deleted immediately. If you delete your account, everything is deleted immediately, except what the law requires us to keep for accounting. Database backups are kept for 30 days and then overwritten.
Your rights as a parent
- See everything we hold: it is all shown in your family area and each child’s progress page.
- Change a child’s name, avatar, grade, voice or PIN at any time from the family area.
- Delete a child profile yourself from the family area, instantly.
- Delete your whole account yourself with the “Delete my account” button in the family area. It removes every child profile and all progress at once.
- Withdraw consent for a child to use Kidifly at any time by deleting their profile.
Only a parent or legal guardian may create child profiles. By creating one you confirm that you are that child’s parent or guardian and consent to the processing described here.
Security
All traffic is encrypted. PINs are hashed. Access to the control panel is limited to named staff and rate limited. Child-facing pages load nothing from third parties.
Changes
If this policy changes in a way that matters, we will show a notice in your family area before the change takes effect.
Questions or requests: the support centre. See also our terms of use.