1. Operator and contact
KidVeil is operated by Daolsoft Co., Ltd.
- Representative: In-oh Park
- Address: 82 Daehak-ro, Yuseong-gu, Daejeon, Republic of Korea
- Privacy contact: devsky@daolsoft.net
2. Data we process
The parent and child apps have different roles. We process the following data only when the related feature is used.
| Category | Data | When |
|---|---|---|
| Guardian account | Google account identifier, email address, and sign-in sessions | Sign-in and account management |
| Family and device | Family name and role, device alias and public key, Android, app and policy versions, time zone, protection state, and last connection | Family setup and child-device enrollment |
| Policies and commands | App launch and internet permissions, full block, temporary access, schedules, policy revision, and command result | When a guardian views or changes a rule |
| Installed apps | App name, package name, and signing identifier from the child device | Transferred and held temporarily in server memory while a guardian edits app permissions |
| Purchases | Product, subscription state, expiry, and a hashed purchase token | Purchase and subscription verification |
| Diagnostics and security | Parent-app crash logs, app and device information, installation identifiers, and infrastructure logs such as request time and IP address | Error diagnosis and abuse prevention |
3. Why we process data
- Sign in guardians and manage families, devices, and guardian roles.
- Deliver app and internet policies, report their status, and prevent forged or replayed commands.
- Verify Local licenses and Family access and restore purchases.
- Send guardian invitations and account-deletion confirmations.
- Investigate app crashes, service failures, and security events.
4. Data we do not collect
KidVeil does not create or retain the following as product data:
- Current location or location history
- Visited URLs, search terms, or browsing history
- Per-app usage time or screen content
- Message content, call history, or contacts
- Photos, files, camera recordings, or microphone recordings
- Wi-Fi names, passwords, or scan results
Some Android versions require location permission to scan for nearby Wi-Fi networks. KidVeil uses that permission only to show Wi-Fi choices on the device. It does not read or transmit coordinates.
5. Retention
- Account, family, device, and policy data: until the related account, family, or device is deleted
- Remote commands and acknowledgements: 30 days
- Operational audit events: 90 days
- Parent-app Crashlytics diagnostics: Google’s default 90-day retention
- Authentication challenges and enrollment tokens: removed after use or expiry
- Account-deletion confirmation links: 30 minutes
If a law requires separate retention, we keep only the required records for the required period.
6. Service providers and international processing
Data may be processed on the systems of the providers below. Transfers use encrypted connections, and each provider processes data under its contract and privacy terms.
| Provider | Purpose and data | Location and retention |
|---|---|---|
| Cloudflare, Inc. | Website, API, and database hosting. Account, family, device, policy, command, and access-security data | United States and other Cloudflare infrastructure regions. Retained under KidVeil’s periods or the provider’s security-log policy |
| Google LLC | Google Sign-In, Play purchase verification, and parent-app Crashlytics. Account identifiers, purchase data, crash and device information | United States and other Google infrastructure regions. Retained under the applicable product policy |
| Resend, Inc. | Guardian invitations and account-deletion confirmation email. Recipient address and message content | United States and other Resend infrastructure regions. Retained as needed for delivery and security |
These providers process data to deliver services on KidVeil’s behalf. KidVeil does not sell personal data.
7. Access, correction, and deletion
A guardian can delete the account and remote data in the parent app. If the app is unavailable, use the web deletion page to receive a confirmation link at the Google account email address.
If another OWNER remains, family ownership transfers to that guardian. Deleting the last OWNER also deletes that family’s remote data. This does not remotely remove Device Owner or the local policy from a child device. After its Family lease expires, the device keeps the last policy in Local mode.
Google Play subscriptions are separate from account deletion and must be cancelled in Google Play.
8. Child safety and managed-device notice
KidVeil is a parental-control tool for an Android device owned or legitimately managed by a guardian. Android’s managed-device notice and KidVeil’s persistent notification make the management state visible on the child device.
The service must not be used to monitor another adult secretly. It does not provide guardians with message content, call history, location, or browsing history.
9. Security
- Guardian and device authentication with expiring sessions and enrollment tokens
- Per-device public keys and signed commands with nonce and revision checks
- TLS encryption in transit and restricted access to stored data
- No plaintext storage of passwords, purchase tokens, or invitation codes
- Automatic expiry for command and audit records
10. Changes to this policy
If the data categories or purposes change, we will provide notice on this page and in the app before the change takes effect. Material changes will include the new effective date and a summary.
Contact: devsky@daolsoft.net