Legal
Privacy Policy
Kiddypin handles information about children, so we keep this plain: what we collect, why we need it, and who can see it.
Last updated: [draft, not yet published]
Who we are
Kiddypin is a school pickup-verification service, a product of PuissantDev. Schools use it to confirm that each child is released only to someone authorized to collect them, and to keep a record of every pickup check.
[to confirm: registered company name and address, and whether Kiddypin acts as the data controller or as a processor on behalf of each school]
What we collect, and why
We only collect what pickup verification needs.
About parents
- Name, phone number and email address, so you can sign in (we send sign-in codes by SMS and email) and so your child’s school knows whose family account it is.
- An optional profile photo, if you add one.
About children
- First and last name, class and school, so gate staff can find the right child at pickup.
- Optional date of birth and photo, only if you or the school add them.
Children’s information is provided by their parent or school. We don’t collect it from children directly, and we use it only to verify pickups. We never use it for advertising, and we don’t sell it.
About people who collect children
- Registered guardians: name, relationship to the child, and a photo, plus which children they may collect. Gate staff match the person at the gate to this photo.
- One-time pickup codes: the name of the person the code is for, which children it covers, and when it expires. The code itself is stored hashed (scrambled one-way), so it can be checked but not read back by anyone, including the school.
- Restricted individuals: the name of anyone a parent has said must not collect their child, so a pickup by that person can be blocked.
The pickup record
Every pickup attempt is logged: the name the person collecting gave, which children, how they were verified, the outcome (approved, flagged, payment required or blocked), which staff member processed it, and when. This record is what lets a school answer “who collected this child, and how do we know?”
About school staff
Name, phone number, email address and role (admin or gate staff). Passwords are stored hashed, never in readable form.
Payments
When a school confirms that a family has paid for a term, the school’s admin records the term, year, amount, payment method and an optional note. Kiddypin does not currently take card or bank details itself.
Cookies and devices
We use cookies to keep you signed in and to remember devices you’ve already verified, so you aren’t asked for a code every time. These are needed for the service to work. [to confirm: no analytics or advertising cookies are used]
Who can see it
- You can see your own family’s information.
- Your child’s school admins can see the families at their school, their pickup records and payment records.
- Gate staff see only what they need at pickup: children’s names and class, and guardians’ names, relationships and photos. They don’t see payment details or pickup codes.
- Staff only see their own school. A school can’t see another school’s families.
- Service providers that run parts of Kiddypin for us: hosting and database, image storage, SMS delivery (Termii) and email delivery. [to confirm: name the hosting, database, image-storage and email providers, and where each stores data]
We share information with anyone else only if the law requires it. [to confirm with counsel]
How long we keep it
[to confirm: retention periods, e.g. how long pickup records are kept after a child leaves the school, and what happens to a family’s data when an account is closed]
Keeping it secure
Sign-in sessions use secure, HTTP-only cookies. Pickup codes and passwords are stored hashed. Access is limited by role and by school, as described above. No system is perfectly secure, and we’ll tell affected users and the regulator if a breach affects their data, as the law requires.
Your rights
You can ask to see the information we hold about you and your children, ask us to correct it, or ask us to delete it. Some pickup records may need to be kept for the school’s safeguarding obligations even after an account is closed. [to confirm: rights wording and response time under the Nigeria Data Protection Act 2023]
Contact
For anything about your data, contact us through the contact page.
Changes to this policy
If we change how we use your information, we’ll update this page and change the date at the top. For significant changes, we’ll let you know in the app.