Legal

Privacy Policy

Last updated: 27 September 2026

KidsTop (“KidsTop”, “we”, “us”) is a mobile app that helps parents and guardians discover, review and plan visits to kid-friendly playgrounds, activities and lessons. KidsTop is operated by Alchematek sarl (Lebanon). This Privacy Policy explains what data we collect, how we use and share it, and the choices and rights you have.

By using the KidsTop app or this website, you agree to this Privacy Policy.

1. Information we collect

Account information. When you sign in with email, Google, or Apple, we receive your name and email address to create and secure your account.
Child profiles you create. As a parent/guardian you may add a child’s first name, age or birth year, interests, and optional access or medical notes. This information is provided by you, for your own use in the app, and is never sold. Any health-related details (allergies, access needs, medical notes) are treated as special-category data: we store them only with your explicit in-app consent, solely to help keep your child safe at venues, and you can withdraw consent at any time by deleting the information.
Location. With your permission, we use your device’s approximate or precise location to show venues near you and to enable venue check-in. You can decline or revoke this in your device settings.
Content you submit. Reviews, ratings, favorites, lists you create or join, visits you plan, and check-ins.
Visit records. To show only verified reviews, we record that you visited a place and how it was confirmed: scanning the venue’s KidsTop QR code, a booking, a location check-in, or contacting the venue through KidsTop (WhatsApp or call).
Notifications. If you allow notifications, we store your device’s push token and your notification settings, and keep a record of the notifications we send you.
Usage & device data. App interactions, device model and operating system, IP address, and diagnostic/crash data, used to operate and improve the service.

2. How we use your information

Provide the core service — nearby discovery, venue details, check-in, favorites and reviews.
Authenticate you and keep your account secure.
Rank places for your family — by age fit, distance, ratings, your children’s interests, and the places you saved or visited — and maintain content quality and safety (including moderation of reviews).
Send the notifications you allow: venue announcements, and after a visit one reminder asking how it was.
Communicate with you about the service, and respond to your requests.
Analyze usage to improve features and fix problems.
Comply with legal obligations and enforce our Terms.

3. How your information is shared

We do not sell your personal data. We share it only:

With service providers who process data on our behalf, only as needed to run KidsTop and under their own security and privacy commitments:
- Google Firebase / Google Cloud — account authentication, database, file storage, and hosting.
- Google Analytics for Firebase (GA4) — to measure app usage and improve features. GA4 receives events such as screens viewed and search terms, associated with a random analytics identifier rather than your name. In France (and wherever the law requires it) nothing is measured until you agree in the app, and you can change your choice anytime in Settings → Usage analytics.
- Expo (EAS Updates) — delivers over-the-air updates to the app; when the app checks for an update it sends your device type, app version, and IP address.
- Firebase Cloud Messaging — delivers push notifications to your device using its push token.
- Google Maps Platform — maps, and the weather shown in the app; for the weather we send an approximate location (rounded to about 5 km), never your name.
- OpenAI — for AI-assisted features, described below.
With venues only where necessary to complete an action you initiate (for example, a check-in or booking). When you message or call a venue from KidsTop you contact it directly; we record that you did, to count contacts and confirm visits.
With the people you share a list with — they see the list’s name and places. A shared link to a place shows only the place’s public details.
For legal reasons — to comply with the law, or to protect the rights, safety and security of our users, the public, or KidsTop.
In a business transfer — if KidsTop is involved in a merger, acquisition or sale of assets, subject to this Policy.

AI-assisted features. Some features use an AI model: short summaries of published reviews, weekend plan suggestions, and search in plain sentences. For these we send only what the feature needs — the text of published reviews; your children’s ages and interests (never their names); your approximate area; and the words you searched. This is processed on our behalf by OpenAI through its API, in the United States. OpenAI does not use it to train AI models and keeps it for at most 30 days, only to detect abuse. Anything written by AI is labelled as such in the app.

4. Sign in with Google & Apple

If you choose Google or Apple sign-in, we receive only your basic profile (name and email) to create your account. We request the minimum scopes needed to sign you in and do not access your other Google or Apple data. Your use of those services is also governed by Google’s and Apple’s respective privacy policies.

5. Data retention

We keep your information for as long as your account is active or as needed to provide the service, then delete or anonymize it, unless a longer period is required by law.

6. Your rights & choices — including deletion

Delete your account and data. In the app, go to Family → Settings (the gear) → Delete account to permanently delete your account and associated data (profile, child profiles, favorites, the lists you own, your plans, reviews, visits, notification settings and the record of notifications sent to you). You also leave any list another parent shared with you; that list stays with them. You can also request access, correction, or deletion at any time by emailing hello@kidstop.org, and we will respond within a reasonable time.

You can also control location permissions in your device settings and unsubscribe from non-essential communications.

7. Children’s privacy

KidsTop is intended for parents and guardians (adults 18+), not for use by children. Children do not create or control accounts. Any child profile is created and managed by a parent/guardian for planning purposes. We do not knowingly collect personal information directly from children. If you believe a child has provided us information, contact us and we will delete it.

8. Security

We use industry-standard measures (encryption in transit, access controls, and reputable cloud infrastructure) to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information and continuously improve our safeguards.

9. International data transfers

Your data is processed on Google Cloud infrastructure, primarily in the European Union (europe-west1). Data sent for AI-assisted features is processed by OpenAI in the United States, under OpenAI’s data processing terms. By using KidsTop you consent to this processing.

10. Changes to this policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, an in-app notice.

11. Contact us

Questions or requests? Email hello@kidstop.org (KidsTop, operated by Alchematek sarl, Lebanon).