Legal documents

Rankids Privacy Policy

Last updated: September 26, 2026.

1. Summary

Rankids is a family app created so that an adult can organize household tasks, points, and non-monetary rewards. The account is created and managed by an adult. Child profiles are created by the adult, and the data requested for those profiles is limited: name or nickname, age, avatar/color, and activity generated inside Rankids, such as tasks, points, and rewards.

Rankids does not ask children for an email address, phone number, address, location, photos, contacts, school, payment details, or health data. Rankids does not sell personal data or show advertising targeted at minors. Optional campaign measurement, when an adult authorizes it, is limited to adult-account conversions and never includes child-profile data.

2. Scope

This Policy applies to:

• The Rankids mobile app for iOS and Android.
• The Rankids website and its legal pages.
• Contact, support, waitlist, or early access forms.
• Communications related to the account and service.

Apple and Google process certain data as independent controllers when they distribute the app or manage purchases. Their processing is also governed by their own policies.

3. Data we process

3.1 Adult account data

We may process:

• Email address.
• Internal user identifier.
• Credentials and authentication data. The password is handled by the authentication provider and is not stored in readable text by Rankids.
• Session, access recovery, and email verification data.
• Creation date, last access, and account status.

Purposes: create and protect the account, sign in, recover access, provide the service, and communicate about essential account matters.

3.2 Family data

We process:

• Family name.
• Family identifier.
• Family subscription status.
• Creation date.

Purpose: organize the family information and apply plan limits or features.

3.3 Adult profile data

We process:

• Name or nickname.
• Avatar.
• Adult role.
• Adult-area PIN, stored as a hash when configured.

Purpose: distinguish profiles, protect the adult area, and let authorized adults manage the family.

3.4 Child profile data

The adult creates child profiles. Rankids processes:

• Name or nickname.
• Age. Rankids does not need the full date of birth unless a future legal obligation requires it and prior notice is provided.
• Avatar.
• Assigned tasks and their status.
• Points, medals, achievements, and adjustments.
• Rewards and redemption requests.
• Activity history inside Rankids.

Purpose: show tasks and rewards to the child profile, calculate points, and let the adult supervise family progress.

Rankids recommends using a first name, nickname, or initials, and avoiding unnecessary information such as full surnames, school, address, phone number, or sensitive data.

3.5 Tasks, rewards, and history

We process:

• Tasks, descriptions, icons, points, and dates.
• Rewards, point costs, and redemption requests.
• Completed, approved, or rejected tasks.
• Manual point adjustments and reasons.
• Medals or achievements inside the app.

Purpose: provide the core Rankids functionality.

3.6 Support and suggestions

If you contact support, we process:

• Contact email.
• Type of request.
• Message.
• Account or family data needed to respond.

Purpose: answer questions, resolve issues, and improve Rankids.

3.7 Waitlist and website

When you join the waitlist or submit a web form, we process:

• Name, if provided.
• Email address.
• Form source.
• Registration date.

Purpose: manage early access and Rankids-related communications.

3.8 Optional usage analytics with PostHog

Only if you allow usage analytics, Rankids uses PostHog Cloud EU to measure onboarding journeys, screens visited, active time on each screen, sign-up and sign-in outcomes, paywall interactions, purchases and restorations, and selected management actions performed by adults. The purpose is to detect problems, understand drop-off and improve the app. This analytics is not used for behavioral advertising or to track you across other companies’ apps.

Events may include a random installation identifier, session and visit identifiers, timestamps, technical screen or event names, active duration, platform, app version, language, sign-in method and outcome, and limited plan or purchase-outcome information. The identifier links events; the data is pseudonymous, not completely anonymous. We do not send PostHog emails, names, passwords, PINs, account or family identifiers, children’s names or ages, avatars, task or reward text, receipts or payment details.

The current configuration does not use session recordings, screenshots or automatic capture of taps or fields. Analytics capture is suspended while a child profile is active. A generic adult-action event, such as creating a profile or approving a task, contains neither the content nor the child’s identity. IP geolocation is disabled; connecting to the provider involves technical processing of the IP address to transmit data, although we do not add it as an analytics property.

The detailed PostHog SDK remains disabled until you authorize this purpose. We do not reconstruct individual activity from before consent. We use PostHog’s European service, hosted in the EU. The app analytics described here does not imply that PostHog is installed on the website.

3.8.1 Basic onboarding statistics

A separate measurement channel can operate from the start of onboarding, before registration or an optional analytics choice. Its purpose is to count screen visits and measure approximate active time so that we can improve onboarding. The app sends only a predefined screen name, iOS or Android platform, metric type and numerical value to a Rankids endpoint hosted by Supabase. It does not send account, installation, session or advertising identifiers, names, ages or form contents through this channel. Network providers still process connection information, such as IP addresses and headers, to handle requests; this is not a claim of end-to-end anonymity.

The endpoint updates daily counters. Times are rounded to five seconds and capped at 300 seconds per active segment. Daily aggregates are exported to PostHog Cloud EU only for groups with at least 20 visits; time statistics also require at least 20 samples. These are visit counts, not unique people, and do not reconstruct individual journeys. This channel is not used for advertising and is disabled in child profiles.

Declining or withdrawing usage analytics stops this channel on that device as well as detailed analytics. You can manage the choice in Settings > Privacy and account > Permissions, or contact info@rankids.app for assistance. The local preference can be lost if you reinstall the app. Existing aggregate counters cannot be attributed to an account for individual deletion. The daily server cleanup removes source counters older than 90 days when it runs; this does not automatically delete aggregates already exported to PostHog, which are subject to the necessity criteria in section 10.

3.9 Purchases and subscriptions

If you start a trial, purchase, or restore a subscription, Rankids may process user identifiers, product identifiers, receipts, subscription status, renewal/expiration dates, store country or currency, and purchase-related events.

Purpose: manage subscription access, restore purchases, apply plan limits, resolve billing issues, and comply with Apple App Store or Google Play rules. Rankids does not receive or store full payment card details.

3.10 Optional app campaign measurement

With an adult's optional authorization, Rankids may use the Meta SDK and Meta App Events to measure whether adult-targeted ads lead to installs, completed registrations, subscription trials, or subscriptions. On iPhone and iPad, where applicable, we also request Apple's App Tracking Transparency authorization before enabling the advertising identifier.

Data sent for this purpose is limited to conversion events and minimal technical data, such as platform and app version. For a confirmed purchase, the subscription type and billing cycle may be included. We never send Meta emails, names, account identifiers, child profiles, ages, tasks, points, rewards, or family content.

The choice is voluntary and does not affect Rankids functionality. On iOS, ATT authorization is an independent Apple privacy control and is not replaced by this choice.

3.11 Your optional permissions

Detailed usage analytics and advertising measurement are separate choices, initially off. The separate basic statistics channel is described in section 3.8.1. You can use Rankids without accepting either; refusing or withdrawing permission does not change your plan’s features. Accepting the Terms of Use or reading this Policy does not authorize these purposes.

You can enable or withdraw each permission in Settings > Privacy and account > Permissions. In earlier versions, the switches may appear directly under Privacy and account. Your choice is stored for that account on that device; review permissions on other devices you use. You can also contact info@rankids.app for assistance or to exercise your rights.

Withdrawing analytics permission blocks new events, discards the pending local queue and removes the local analytics identifier. Events already sent are not automatically erased. Withdrawal does not affect the lawfulness of earlier processing; you may request erasure where applicable. When advertising measurement is withdrawn, Rankids stops sending new conversions through its integration. On iOS, ATT is an additional system permission managed in iOS Settings; it does not replace the usage analytics choice.

4. Data we do not process

Rankids does not collect:

• Precise or approximate location.
• Photos or videos.
• Camera data.
• Microphone data.
• Contacts or address book.
• External calendar data.
• Health data.
• Biometric data.
• Bank or payment card data.
• Postal address, phone number, or school of the minor.
• If a future version needs an additional category, we will update this Policy, the store privacy forms and, where appropriate, request authorization before collecting it.

5. Legal bases

Depending on the country, legal bases may vary. In general, we process data to:

• Provide the service contracted or requested by the adult.
• Comply with legal obligations.
• Keep the app secure.
• Respond to support.
• Consent for optional usage analytics with PostHog and, separately, advertising measurement with Meta. These activities are not necessary to provide your plan’s features.
• Manage consent where needed, especially for voluntary communications or applicable privacy rules.

6. Child profiles and adult control

Rankids does not let a minor create an adult account. Child profiles are created and managed by the adult. The adult decides which name/nickname and age to enter, which tasks to assign, and which rewards to create.

Even when the data is limited, a child's name/nickname and age may be personal data relating to a minor. Rankids therefore handles it with proportionality, minimization, and adult control.

The adult can edit or delete child profiles in the app.

7. Providers

Rankids uses providers to operate the service:

• PostHog: optional usage analytics provider through PostHog Cloud EU. It receives the pseudonymous events described in section 3.8 for processing on behalf of Rankids. It also receives the daily aggregate counters described in section 3.8.1, without visitor identifiers.
• RevenueCat: technical subscription management, receipts, purchase restoration, and subscription status.
• Resend or another transactional email provider: sending support messages, suggestions, and technical communications.
• Namecheap Private Email or another corporate email provider: receiving and managing emails sent to Rankids mailboxes.
• Expo/EAS or other technical development and distribution services: build, delivery, or technical infrastructure where applicable.
• Supabase: authentication, database, and account/family data storage.
• Hosting or web form provider: landing page, waitlist, or legal pages.
• Apple App Store and Google Play: app distribution and purchase or subscription management.
• Meta: optional measurement of adult-targeted campaign conversions, only with the adult's authorization.

These providers may process data under their own terms and applicable agreements.

8. Data sharing

We only provide access to data when necessary and under confidentiality, security, and purpose-limitation obligations:

1. Service providers: hosting, database, authentication, email, support, or infrastructure. 2. Apple and Google: distribution, purchase validation, subscription management, and compliance with their terms. 3. Meta: only when the adult has authorized campaign measurement, with limited install, completed-registration, trial, or subscription events and minimal technical data; never with child data or family content. 4. Authorities or advisers: when there is a legal obligation, a valid request, or it is necessary to exercise or defend rights. 5. Corporate operations: in a merger, acquisition, reorganization, or sale of assets, with the legally required safeguards and notices.

We do not allow a provider to use Rankids data for its own advertising purposes. We require equivalent or adequate protection and review the SDKs integrated into the app.

8.1 Advertising, sale, and tracking

Rankids:

• Does not sell personal data.
• Does not show advertising targeted at minors.
• Does not create commercial profiles of minors.

When an adult authorizes it, Rankids may share conversion events with Meta and, depending on the platform and applicable system permissions, advertising identifiers from the adult device to measure the effectiveness of adult-targeted campaigns. This measurement does not use or share child-profile data. On iOS, use of the advertising identifier is enabled only where applicable after the adult's consent and Apple's ATT authorization. If applicable law treats this use as “sharing” for cross-context behavioral advertising, we will provide the notices and controls required by that law.

9. Security

Rankids applies technical and organizational measures proportionate to the risk, including:

• Communication encryption through HTTPS/TLS.
• Authentication managed by a specialized provider.
• Access controls by user and family.
• Row-level security policies in the database where applicable.
• Non-reversible storage of the PIN when configured.
• Minimization of children's data.
• Restriction of administrative access and incident logging.
• Review of providers and SDKs.
• Backup, incident response, and deletion procedures.

No system is infallible. If a security breach must be notified, we will inform the authorities and affected persons within the legal deadlines.

10. Retention

We keep data while the family account is active or while needed to provide Rankids, respond to support, comply with legal obligations, resolve issues, or keep the service secure.

The retention criteria are:

• Subscriptions and purchases: while the account is active and as long as needed to resolve issues, refunds, purchase restoration, claims, or legal compliance.
• Legal acceptances: while the account is active and as long as needed to evidence acceptance of the applicable terms.
• Account and family: while the account is active.
• Profiles, tasks, rewards, and history: while the family is active.
• Support: as long as needed to respond and keep a reasonable issue record.
• Waitlist: until no longer needed for launch communications or until consent is withdrawn.
• Optional analytics: while events are needed to analyze journeys, compare versions and resolve product issues; their necessity is reviewed so they can be deleted or anonymized when no longer needed. Withdrawal stops new capture but does not itself erase events already sent. The local queue is temporary and is not kept as an on-disk history.

As an operational rule, we delete or anonymize data when it is no longer needed for these purposes. After an account deletion request, we will delete or anonymize associated data within a reasonable period, except for information that we must temporarily retain for legal obligations, security, fraud prevention, support, claims, or backups.

11. Account and data deletion

You can initiate or request account and data deletion from:

• App: Settings > Account > Privacy and account > Delete account and data.
• Website: www.rankids.app.
• Email: account@rankids.app.

When deletion is completed, Rankids will delete or anonymize the family account, profiles, tasks, rewards, history, and associated data, except information we must keep for legal obligations, security, fraud prevention, support, or claims.

12. Privacy rights

Depending on your country or region, you may have the right to:

• Access your data.
• Correct inaccurate data.
• Request deletion.
• Request portability.
• Object to certain processing.
• Restrict certain processing.
• Withdraw consent where applicable.
• Lodge a complaint with a data protection authority.

12.1. How to exercise rights

Write to info@rankids.app indicating:

• The email address of the adult account.
• The right you wish to exercise.
• Whether the request affects the entire family or a specific profile.

We may ask for reasonable information to verify identity and parental authority. We will not request more data than necessary. In the EEA we will generally respond within one month; in other regions we will apply the corresponding legal deadline.

Analytics identifiers are not linked in PostHog to your email or account identifier. If you request erasure of analytics events, further information may be needed to locate the corresponding identifier. Do not send passwords or PINs. If you already uninstalled the app or withdrew permission, linking earlier events to your account may no longer be possible; we will explain the available options and limitations when handling your request.

13. Cookies and website technologies

On the public website, optional Google Analytics 4 measures page visits, traffic sources, approximate countries and clicks on App Store or Google Play links. It loads only after you choose “Accept analytics”. Rejecting or closing the notice does not prevent you from using the website. This choice is separate from permissions in the Rankids app.

Google receives a pseudonymous browser identifier, public page information, technical browser/device information and connection information needed to provide the service. IP addresses are used by Google to derive approximate location; we do not send account identifiers, names, email addresses, form contents or children’s profile data. We remove URL queries and fragments from measured page addresses and retain only pre-approved campaign labels and the origin of referring sites. Do not put personal data in campaign links. This does not make the service anonymous.

The first-party _ga and _ga_* cookies identify browsers and sessions, with a configured maximum lifetime of 180 days without automatic extension. The local preference rankids-web-analytics-v1 lasts 180 days, or until browser storage is cleared. If browser storage is unavailable, your choice may not persist. You can accept, reject or withdraw through “Analytics preferences” on each content page. Withdrawal blocks new collection, removes these accessible analytics cookies and reloads the page; it does not erase data already sent to Google.

This implementation disables Google Signals and advertising personalization and does not connect advertising services. Google acts as the analytics provider; processing may involve international transfers under the applicable Google contractual safeguards. See Google’s privacy policy (https://policies.google.com/privacy). Contact info@rankids.app about your rights or previously collected data. The property is configured to retain event data for 2 months and user data for 14 months, with the user-data retention period reset by new activity. These settings are separate from browser cookie lifetimes and do not mean that aggregate reports are automatically deleted after those periods.

The app does not use browser cookies for behavioral advertising.

14. Changes to this Policy

Rankids may modify this Privacy Policy to reflect changes to the app, providers, legal requirements, stores, or features. The current version will be available in the app and on the Rankids website. When a change is material, Rankids will provide reasonable notice where appropriate.

15. Contact

Francisco Aguilera Zuheros
info@rankids.app
www.rankids.app