Privacy Policy

Last updated: October 22, 2026

In short: we collect the minimum needed for the planner to work, we do not sell data, we have no advertising or marketing trackers, and each family's data is visible only to that family. Children's data is entered only by their parents or guardians.

1. Who is the controller

The controller of the personal data processed in Kids Planner is GLDN Tecnologia LTDA, a company registered in Brazil under CNPJ 69.408.217/0001-31. The channel for any personal data matter, including the data protection officer (DPO), is contato@kidsplanner.com.br. This Policy follows the Brazilian General Data Protection Law (Law 13,709/2018, “LGPD”) and complements the Terms of Use.

2. What data we process

When	Data
Access request (website form)	Name, email, language and the optional message. The IP address is used only temporarily, to limit abuse.
Parent or guardian account	Name, email, password (stored only in encrypted form, never as readable text), language, time zone, date and version of the Terms acceptance, last access date and the preference for receiving the weekly summary.
Family	Family name, language, currency, time zone, first day of the week and plan data (trial period, subscribed plan).
Children	Name (we recommend just a first name or nickname), avatar emoji and theme, plus what guardians record about the routine: activities, chores checked off per day, values, closed weeks, allowance payments and notes, goals, balances and movements of the piggy bank jars, and achievements.
Feedback sent from the app	The type and text of the message, the screen you were on, your language, your plan and your browser. Your name and email stay linked to the message so we can reply, if you allow it. We never send your children's data along.
Security and operation	IP address and browser (user agent) of sessions, login and password-reset attempts (to block abuse) and audit records of important actions (such as invitations, payments and sign-ins).
Billing (paid plans)	Payment details (card and required documents) are given directly to Asaas, our payments partner, and do not pass through Kids Planner. We only keep what the subscription needs: identifiers of the customer, subscription and charges at Asaas, plan, amount, dates and payment status. The raw content of notices received from Asaas is deleted within 90 days.

We do not ask for and do not need ID numbers, addresses, photos, location, health data or documents of children. Please do not type them into free-text fields.

3. What we use it for and the legal basis

Creating and maintaining the account and providing the Service (planner, kid mode, piggy bank, recorded payments, alerts): performance of a contract or of preliminary procedures (LGPD art. 7, V).
Children's data: processed with the specific and prominent consent of one of the parents or the legal guardian, given when the child is added (art. 14, §1). We use it only for the family's own planner, in the child's best interest, and never for advertising, commercial profiling or sharing with third parties for other purposes.
Service emails (invitation, password reset, confirmations, plan notices and the weekly summary): performance of the contract. The weekly summary can be turned off at any time under Account in the app.
Security, fraud and abuse prevention (attempt limits, bot blocking, auditing): legitimate interest (art. 7, IX), always respecting your rights.
Answering your access request and support messages: preliminary procedures and legitimate interest.
Complying with legal obligations, such as keeping access logs (Brazilian Internet Civil Framework) and tax records: legal obligation (art. 7, II).
Improving the Service: we use information from how the app itself works and the feedback you give us, without marketing tracking tools.

4. Children and teenagers

Children do not create their own account or provide an email. Only a guardian adds the child and controls their data.
In kid mode, the device shows only the child's planner and leaves that mode only with a guardian's password.
Guardians can at any time correct, deactivate or ask for deletion of the child's data, and withdraw consent, by writing to the channel in section 1. Without the child's data it is not possible to keep their planner.

5. Who we share it with

We do not sell or rent personal data and do not use it for third-party advertising. We share it only with providers that help us run the Service (processors), as needed:

Hostinger: hosting of the website, the app and the database.
Email delivery provider (SMTP): delivery of service emails.
Cloudflare Turnstile: anti-bot check on the access request form, when enabled. It may receive the IP address and browser data.
Google Fonts: page fonts are loaded from Google's servers, which receive your IP address and browser in order to deliver them.
Asaas (Asaas Gestão Financeira Instituição de Pagamento S.A., CNPJ 19.540.550/0001-21), payments partner: processes subscriptions and payments for paid plans and receives the payment details you enter on its page. It is responsible for processing that data, under its own terms and privacy policy.
Authorities: where there is a legal obligation or court order, or to protect our rights and those of others.
In case of a merger, acquisition or sale of the business, data may be transferred while keeping the protections in this Policy, and you will be notified.

Within your family, data is visible to the guardians you invite. One family never sees another family's data.

6. International transfers

Some providers may store or process data on servers outside Brazil. In those cases we adopt the safeguards provided by the LGPD (arts. 33 and following), such as contracts with adequate guarantees and providers that maintain compatible protection standards.

7. How long we keep it

While the account exists: the family's and the children's data stay available for you to use.
Closure or deletion request: we delete or anonymize the family's and the children's data within 30 days, except what we are required by law to keep.
Access logs (IP and date/time of sessions): kept for at least 6 months, as the Brazilian Internet Civil Framework requires, and deleted up to 12 months after the session expires. Login attempts used for abuse control are stored in protected form (without the IP or email in readable text) and cleaned up periodically.
Feedback sent from the app: kept for up to 24 months and then deleted automatically.
Rejected or unanswered access requests: kept for up to 12 months and then deleted automatically.
Tax and billing data: for the period required by law.
Backups may keep data for an additional period until they are replaced.

8. Your rights

At any time and free of charge, you can request (LGPD art. 18): confirmation that we process your data; access and a copy; correction; anonymization, blocking or deletion of unnecessary data or data processed in violation of the law; portability; information about who we share it with; deletion of data processed with consent; information about the possibility of refusing consent and its consequences; and withdrawal of consent.

To exercise these rights, write to contato@kidsplanner.com.br from your registered email. We may ask for information to confirm who you are. We will answer within 15 days. If you are not satisfied, you can lodge a complaint with the Brazilian National Data Protection Authority (ANPD).

9. How we protect data

Encrypted connection (HTTPS) and passwords stored with one-way encryption.
Strict separation of data by family: every database query is restricted to the session's family.
Sessions through a protected cookie, with limits on login and password-reset attempts, and protection against forged requests.
Internal access restricted to what is needed to run and support the Service.

No system is completely immune to failures. If a security incident occurs that may cause relevant risk or harm, we will notify you and the ANPD as the law requires.

10. Cookies and browser storage

Essential cookies (kp_session and kp_kid): keep you, or the child in kid mode, signed in to the app. The Service does not work without them.
Browser local storage: keeps your language and theme preferences.
We do not use advertising or marketing analytics cookies. If that changes, we will update this Policy and ask for your consent where needed.

11. Changes to this Policy

We may update this Policy, for example when we turn on billing or add new providers. We will notify you of relevant changes by email or inside the app, and the date of the latest update is at the top of the page.

12. Contact

Data protection officer and privacy channel: contato@kidsplanner.com.br. Other matters: contato@kidsplanner.com.br.