1. Introduction
Kidstock ("we", "us", or "our") operates the Kidstock web application and mobile
app (the "Service"). This Privacy Policy describes what information we collect,
how we use it, and your choices regarding that information.
2. Information We Collect
We collect different information depending on your role:
-
Parents/Guardians (Mission Control): name, email address,
and payment preferences (Venmo/Cash App/Zelle usernames, not card numbers).
-
Gift Givers (Boosters): name and email address when giving a gift.
-
Children (Astronauts): name, date of birth, and optionally
an email address. See Section 6 for details about children's privacy.
3. How We Use Your Information
- To operate and maintain investment accounts and portfolios
- To send gift card emails and event invitations
- To provide account notifications (gift received, portfolio updates)
- To verify your identity for account access
- To improve our Service
We do not
sell your personal information. We do not
use children's data for advertising or behavioral targeting.
4. Information Sharing
We share personal information only in limited circumstances:
-
Between account participants: custodians can view their
astronaut's portfolio; boosters see the astronaut's name when giving a gift.
-
Service providers: we use Mailgun for email delivery,
Honeybadger for error monitoring, and Cloudflare for security. These
providers process data on our behalf under contract.
-
Legal requirements: we may disclose information if required by law.
5. Data Security
We use industry-standard security measures including encrypted connections
(HTTPS/TLS), hashed passwords, and secure cloud infrastructure (AWS). We limit
access to personal information to employees and contractors who need it to
operate the Service.
6. Children's Privacy (COPPA Compliance)
Kidstock takes children's privacy seriously. We comply with the Children's
Online Privacy Protection Act (COPPA) for users under 13 years of age.
What we collect from children
For astronauts (beneficiaries) under 13, we collect only: first name, last name,
and date of birth. An email address is optional and only collected with parental consent.
Parental consent
Before a child under 13 can log in or receive emails from Kidstock, a parent or
legal guardian must provide verifiable consent. This consent is recorded when the
parent creates the child's account and checks the parental consent acknowledgment.
Without parental consent
If a parent creates a child's account without providing consent, the child's
portfolio is still managed by the parent, but the child:
- Cannot log in to the Service
- Will not receive any emails from Kidstock
- Can only view their portfolio through their parent's account
Parental rights
As a parent or guardian, you have the right to:
- Review the personal information we have collected about your child
- Request deletion of your child's personal information
- Withdraw your consent at any time, which will revoke your child's login access
-
Refuse further collection of your child's information (the portfolio can
still be managed through your custodian account)
To exercise any of these rights, contact us at privacy@kidstock.app.
7. Your Choices
-
Email preferences: you can control gift card email delivery
(to you, to the astronaut, both, or none) in your beneficiary settings.
-
Account deletion:
contact us at
privacy@kidstock.app
to request deletion of your account and associated data.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of
material changes by email or through the Service. Your continued use of the
Service after changes constitutes acceptance.
9. Contact Us
If you have questions about this Privacy Policy or our data practices,
contact us at:
privacy@kidstock.app