Rankids Privacy Policy
1. Summary
Rankids is a family app created so that an adult can organize household tasks, points, and non-monetary rewards. The account is created and managed by an adult. Child profiles are created by the adult, and the data requested for those profiles is limited: name or nickname, age, avatar/color, and activity generated inside Rankids, such as tasks, points, and rewards.
Rankids does not ask children for an email address, phone number, address, location, photos, contacts, school, payment details, or health data. Rankids does not sell personal data and does not use data for behavioral advertising or cross-app tracking.
2. Scope
This Policy applies to:
- The Rankids mobile app for iOS and Android.
- The Rankids website and its legal pages.
- Contact, support, waitlist, or early access forms.
- Communications related to the account and service.
Apple and Google process certain data as independent controllers when they distribute the app or manage purchases. Their processing is also governed by their own policies.
3. Data we process
3.1 Adult account data
We may process:
- Email address.
- Internal user identifier.
- Credentials and authentication data. The password is handled by the authentication provider and is not stored in readable text by Rankids.
- Session, access recovery, and email verification data.
- Creation date, last access, and account status.
Purposes: create and protect the account, sign in, recover access, provide the service, and communicate about essential account matters.
3.2 Family data
We process:
- Family name.
- Family identifier.
- Family plan: free, premium trial, or premium.
- Creation date.
Purpose: organize the family information and apply plan limits or features.
3.3 Adult profile data
We process:
- Name or nickname.
- Avatar.
- Adult role.
- Adult-area PIN, stored as a hash when configured.
Purpose: distinguish profiles, protect the adult area, and let authorized adults manage the family.
3.4 Child profile data
The adult creates child profiles. Rankids processes:
- Name or nickname.
- Age. Rankids does not need the full date of birth unless a future legal obligation requires it and prior notice is provided.
- Avatar.
- Assigned tasks and their status.
- Points, medals, achievements, and adjustments.
- Rewards and redemption requests.
- Activity history inside Rankids.
Purpose: show tasks and rewards to the child profile, calculate points, and let the adult supervise family progress.
Rankids recommends using a first name, nickname, or initials, and avoiding unnecessary information such as full surnames, school, address, phone number, or sensitive data.
3.5 Tasks, rewards, and history
We process:
- Tasks, descriptions, icons, points, and dates.
- Rewards, point costs, and redemption requests.
- Completed, approved, or rejected tasks.
- Manual point adjustments and reasons.
- Medals or achievements inside the app.
Purpose: provide the core Rankids functionality.
3.6 Support and suggestions
If you contact support, we process:
- Contact email.
- Type of request.
- Message.
- Account or family data needed to respond.
Purpose: answer questions, resolve issues, and improve Rankids.
3.7 Waitlist and website
When you join the waitlist or submit a web form, we process:
- Name, if provided.
- Email address.
- Form source.
- Registration date.
Purpose: manage early access and Rankids-related communications.
3.8 First-party product analytics
Rankids records internal product events, such as onboarding started or completed, first profile created, first task created, reward requested, paywall viewed, or trial started. These events include a session identifier, platform, date, and basic event properties.
Purpose: understand whether the app works, improve onboarding, identify product issues, and measure key features. This is first-party analytics and is not intended for behavioral advertising or cross-app tracking.
3.9 Purchases and subscriptions
If you start a trial, purchase, or restore a Premium subscription, Rankids may process user identifiers, product identifiers, receipts, subscription status, renewal/expiration dates, store country or currency, and purchase-related events.
Purpose: activate Premium, restore purchases, apply plan limits, resolve billing issues, and comply with Apple App Store or Google Play rules. Rankids does not receive or store full payment card details.
4. Data we do not process
Rankids does not collect:
- Precise or approximate location.
- Photos or videos.
- Camera data.
- Microphone data.
- Contacts or address book.
- External calendar data.
- Health data.
- Biometric data.
- Bank or payment card data.
- Postal address, phone number, or school of the minor.
- If a future version needs an additional category, we will update this Policy, the store privacy forms and, where appropriate, request authorization before collecting it.
5. Legal bases
Depending on the country, legal bases may vary. In general, we process data to:
- Provide the service contracted or requested by the adult.
- Comply with legal obligations.
- Keep the app secure.
- Respond to support.
- Improve the product through proportionate first-party analytics.
- Manage consent where needed, especially for voluntary communications or applicable privacy rules.
6. Child profiles and adult control
Rankids does not let a minor create an adult account. Child profiles are created and managed by the adult. The adult decides which name/nickname and age to enter, which tasks to assign, and which rewards to create.
Even when the data is limited, a child's name/nickname and age may be personal data relating to a minor. Rankids therefore handles it with proportionality, minimization, and adult control.
The adult can edit or delete child profiles in the app.
7. Providers
Rankids uses providers to operate the service:
- RevenueCat: technical subscription management, receipts, purchase restoration, and Premium status.
- Resend or another transactional email provider: sending support messages, suggestions, and technical communications.
- Namecheap Private Email or another corporate email provider: receiving and managing emails sent to Rankids mailboxes.
- Expo/EAS or other technical development and distribution services: build, delivery, or technical infrastructure where applicable.
- Supabase: authentication, database, and account/family data storage.
- Hosting or web form provider: landing page, waitlist, or legal pages.
- Apple App Store and Google Play: app distribution and purchase or subscription management.
These providers may process data under their own terms and applicable agreements.
8. Data sharing
We only provide access to data when necessary and under confidentiality, security, and purpose-limitation obligations:
1. Service providers: hosting, database, authentication, email, support, or infrastructure. 2. Apple and Google: distribution, purchase validation, subscription management, and compliance with their terms. 3. Authorities or advisers: when there is a legal obligation, a valid request, or it is necessary to exercise or defend rights. 4. Corporate operations: in a merger, acquisition, reorganization, or sale of assets, with the legally required safeguards and notices.
We do not allow a provider to use Rankids data for its own advertising purposes. We require equivalent or adequate protection and review the SDKs integrated into the app.
8.1 Advertising, sale, and tracking
Rankids:
- Does not sell personal data.
- Does not share personal data for cross-context behavioral advertising.
- Does not show advertising targeted at minors.
- Does not use advertising identifiers for tracking.
- Does not create commercial profiles of minors.
For purposes of U.S. state privacy laws that use the concepts of "sale" or "sharing", Rankids does not sell or share personal data for cross-context behavioral advertising. If this practice changed, we would provide notice and enable the legally required controls before the change.
9. Security
Rankids applies technical and organizational measures proportionate to the risk, including:
- Communication encryption through HTTPS/TLS.
- Authentication managed by a specialized provider.
- Access controls by user and family.
- Row-level security policies in the database where applicable.
- Non-reversible storage of the PIN when configured.
- Minimization of children's data.
- Restriction of administrative access and incident logging.
- Review of providers and SDKs.
- Backup, incident response, and deletion procedures.
No system is infallible. If a security breach must be notified, we will inform the authorities and affected persons within the legal deadlines.
10. Retention
We keep data while the family account is active or while needed to provide Rankids, respond to support, comply with legal obligations, resolve issues, or keep the service secure.
The retention criteria are:
- Subscriptions and purchases: while the account is active and as long as needed to resolve issues, refunds, purchase restoration, claims, or legal compliance.
- Legal acceptances: while the account is active and as long as needed to evidence acceptance of the applicable terms.
- Account and family: while the account is active.
- Profiles, tasks, rewards, and history: while the family is active.
- Support: as long as needed to respond and keep a reasonable issue record.
- Waitlist: until no longer needed for launch communications or until consent is withdrawn.
- First-party analytics: for a reasonable period to measure the product and improve the app.
As an operational rule, we delete or anonymize data when it is no longer needed for these purposes. After an account deletion request, we will delete or anonymize associated data within a reasonable period, except for information that we must temporarily retain for legal obligations, security, fraud prevention, support, claims, or backups.
11. Account and data deletion
You can initiate or request account and data deletion from:
- App: Settings > Account > Privacy and account > Delete account and data.
- Website: www.rankids.app.
- Email: account@rankids.app.
When deletion is completed, Rankids will delete or anonymize the family account, profiles, tasks, rewards, history, and associated data, except information we must keep for legal obligations, security, fraud prevention, support, or claims.
12. Privacy rights
Depending on your country or region, you may have the right to:
- Access your data.
- Correct inaccurate data.
- Request deletion.
- Request portability.
- Object to certain processing.
- Restrict certain processing.
- Withdraw consent where applicable.
- Lodge a complaint with a data protection authority.
12.1. How to exercise rights
Write to info@rankids.app indicating:
- The email address of the adult account.
- The right you wish to exercise.
- Whether the request affects the entire family or a specific profile.
We may ask for reasonable information to verify identity and parental authority. We will not request more data than necessary. In the EEA we will generally respond within one month; in other regions we will apply the corresponding legal deadline.
13. Cookies and website technologies
The website may use strictly necessary cookies for security, preferences, and operation. Non-essential or web analytics cookies will only be installed with consent when required by applicable law.
The app does not use browser cookies for behavioral advertising.
14. Changes to this Policy
Rankids may modify this Privacy Policy to reflect changes to the app, providers, legal requirements, stores, or features. The current version will be available in the app and on the Rankids website. When a change is material, Rankids will provide reasonable notice where appropriate.
15. Contact
Francisco Aguilera Zuheros
info@rankids.app
www.rankids.app