Privacy Policy

Each preschool decides what information it records about its children, families and staff, and is responsible for that information. We process it on the school’s behalf to run the service. For your own account details (for example your phone number or email used to sign in) we are responsible directly.

We handle personal data in line with the Personal Data Protection Act, No. 9 of 2022 (Sri Lanka).

• Account details: name, mobile number (parents), email (staff), role, school and profile photo.
• Family members a parent or school adds, such as people allowed to collect a child: name, relationship and contact details.
• Children’s records added by the school: name, date of birth, gender, class, photo, emergency contact, attendance and pick-up (including who collected the child), daily updates (activities, meals, naps, mood), homework, exam marks, timetable and fees.
• Staff records added by the school: contact details, date of birth, address, qualifications, experience, emergency contact, attendance and leave. Only the school can see these.
• Classroom photos and videos that teachers share with the parents of the children in that class.
• Messages, announcements and notifications between the school, teachers and parents.
• Payment records such as invoices, amounts and payment status. If online card payment is enabled, card details are entered with the payment provider and never stored by KiddyCubs.
• Technical data needed to keep the service working and secure, such as device type, app version, notification token, IP address, sign-in times and error logs.

• To let schools manage classes, attendance, updates, announcements and fees.
• To show parents information about their own children only.
• To send sign-in codes, important notices and messages by SMS, email or app notification.
• To keep accounts secure, prevent misuse and fix problems.
• To meet legal obligations.

We do not sell personal data, show advertising, or use children’s information for marketing.

• Parents see only their own children’s records, and class updates and announcements for their children’s classes.
• Teachers and school administrators see information for their own school only.
• Classroom photos and videos are stored privately and shared through short-lived links with the school’s staff and the relevant parents.

We use trusted service providers to run KiddyCubs. They process data only on our instructions and only for these purposes:

• cloud hosting, database, file storage and sign-in;
• delivering SMS sign-in codes and notices;
• delivering email;
• push notifications, through Apple and Google;
• card payments, only if a school enables online payment.

Some of these providers store data outside Sri Lanka. Where they do, we choose providers with strong security and contractual safeguards. We do not share personal data with anyone else unless the law requires it.

We keep information while the school uses KiddyCubs. When a school closes its account, or asks us to delete a child’s or family’s records, we delete them within 90 days, except where we must keep limited records (such as payment records) to meet legal or accounting requirements.

Data is encrypted in transit and at rest. Access is restricted by role and school, and private media is shared only through expiring links. No system is perfectly secure, so please keep your phone and sign-in codes private.

You can ask to see, correct or delete your information, or withdraw consent (for example for photo sharing). For children’s records, please contact your preschool first; they can update records directly. You can also contact us at support@kiddycubs.com. You can request account deletion at any time from the account deletion page.

KiddyCubs is used by adults: parents, guardians and school staff. Children do not have accounts. Children’s information is added by their preschool for the purposes described above.

If we make significant changes we will tell you in the app or by SMS or email before they take effect.

AIRIZ PVT LTD
Jaffna, Sri Lanka
support@kiddycubs.com