Privacy Policy

kinderCare parent app (iOS and Android) · Last updated 5 August 2026 · Deutsche Fassung

Controller. kinderCare, Berlin and Hamburg, Germany. Questions about this policy, or a request about your data: tim@kindercare.ai.

kinderCare is an app for parents to handle everyday paediatric care with their child's practice: requesting repeat prescriptions, sick leave certificates and therapy prescriptions, keeping their children's records, and asking AI Buddy general questions about child health. This policy explains what personal data the app processes, why, who receives it, and the rights you have over it.

What we process

Data	Where it comes from	Why
Your account: first and last name, phone number, email address, date of birth, postal address, insurance number	You, during registration and in your profile	To create your account, identify you to your child's practice, and process requests
Your children's records: first and last name, date of birth, insurance number and any notes you add	You	So a request can name the child it is for, and the practice can identify them
Requests and their content: medication names, dates of illness, therapy details, delivery choice, postal stamp code, your notes, and the practice's decision and reasoning	You and the practice	To submit requests, show you their status, and keep a record of what was decided
AI Buddy conversations: the questions you type and any images you attach	You	To generate an answer and let you re-open the conversation later
Device and delivery data: platform, device name, OS version, app version, push notification token	Your device, at sign-in	To send you notifications about your requests and to support the device
Diagnostics: crash reports and technical error data	Your device (Firebase Crashlytics)	To find and fix crashes
Usage events: which screens and features are opened	Your device (Firebase Analytics)	To understand which parts of the app are used and improve them
App integrity signals: an attestation from Apple or Google that the request comes from a genuine copy of the app	Your device (Firebase App Check)	To keep the service from being abused by automated clients

Health data — the reason for a sick note, medication, therapy, notes about your child — is special category data. The app asks for your explicit consent to process it before you can use those features, and you can see and withdraw the consents you have given inside the app.

The app does not collect advertising identifiers, does not track you across other apps or websites, and does not sell personal data. Advertising signals in the analytics SDK are switched off in the app's configuration.

Legal bases (GDPR Art. 6 and 9)

Contract (Art. 6(1)(b)) — running your account and passing your requests to the practice.
Explicit consent (Art. 9(2)(a)) — processing health data about you and your children, given in the app and withdrawable there.
Legitimate interests (Art. 6(1)(f)) — keeping the service secure and stable, including crash diagnostics and app integrity checks.
Consent (Art. 6(1)(a)) — usage analytics and push notifications, which you can turn off in the app's preferences and in your device settings.

Who receives data

Your child's practice — the caregivers you are registered with see the requests you send and the records attached to them.
Google Cloud — the backend that stores your account, your children's records and your requests runs on Google Cloud in europe-west3 (Frankfurt, Germany).
Google Ireland Ltd / Google LLC — Firebase Cloud Messaging (notifications), Crashlytics (crash reports), Analytics (usage events) and App Check (integrity).
Google Vertex AI — the text and images you send to AI Buddy are processed by a model on Vertex AI in the EU region to produce an answer. No separate AI vendor receives them.

Processing takes place in the EU. Where Google acts as a processor and support access from outside the EU/EEA cannot be excluded, the transfer relies on the European Commission's standard contractual clauses in Google's data processing terms.

How long we keep it

Account data, children's records and requests are kept while your account exists, and afterwards only where a legal retention duty applies to medical documentation. Conversations stay until you delete them. Crash and usage data are retained according to Firebase's own retention settings.

Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to processing; you can withdraw any consent at any time; and you can complain to a supervisory authority. Two of these are built into the app:

Export my data — Profile → Privacy & data → Export my data produces a copy of what we hold about you and your children.
Delete account — Profile → Edit profile → Delete account removes your account and its data.

For anything else, write to tim@kindercare.ai.

Children

The app is for parents and legal guardians, not for children. Data about a child is entered by the adult who is responsible for them, and that adult can view, correct and delete it in the app.

Security

Traffic between the app and the backend is encrypted in transit (HTTPS). Sign-in is by one-time code sent to your phone number, and requests carry an app integrity attestation. Access to production data is limited to staff who need it.

AI Buddy is not medical advice

AI Buddy provides general educational information. It does not diagnose, does not replace a qualified healthcare professional, and is not for emergencies. In an emergency contact your local emergency number or a healthcare professional.

Changes

If this policy changes, the new version appears at this address with a new date. Material changes that require your consent will be presented in the app.