Legal

Privacy Policy

Last updated: 15 September 2026

KidsTop (“KidsTop”, “we”, “us”) is a mobile app that helps parents and guardians discover, review and plan visits to kid-friendly playgrounds, activities and lessons. KidsTop is operated by Alchematek sarl (Lebanon). This Privacy Policy explains what data we collect, how we use and share it, and the choices and rights you have.

By using the KidsTop app or this website, you agree to this Privacy Policy.

1. Information we collect

Account information. When you sign in with email, Google, or Apple, we receive your name and email address to create and secure your account.
Child profiles you create. As a parent/guardian you may add a child’s first name, age or birth year, interests, and optional access or medical notes. This information is provided by you, for your own use in the app, and is never sold. Any health-related details (allergies, access needs, medical notes) are treated as special-category data: we store them only with your explicit in-app consent, solely to help keep your child safe at venues, and you can withdraw consent at any time by deleting the information.
Location. With your permission, we use your device’s approximate or precise location to show venues near you and to enable venue check-in. You can decline or revoke this in your device settings.
Content you submit. Reviews, ratings, favorites and check-ins.
Usage & device data. App interactions, device model and operating system, IP address, and diagnostic/crash data, used to operate and improve the service.

2. How we use your information

Provide the core service — nearby discovery, venue details, check-in, favorites and reviews.
Authenticate you and keep your account secure.
Personalize results and maintain content quality and safety (including moderation of reviews).
Communicate with you about the service, and respond to your requests.
Analyze usage to improve features and fix problems.
Comply with legal obligations and enforce our Terms.

3. How your information is shared

We do not sell your personal data. We share it only:

With service providers who process data on our behalf, only as needed to run KidsTop and under their own security and privacy commitments:
- Google Firebase / Google Cloud — account authentication, database, file storage, and hosting.
- Google Analytics for Firebase (GA4) — to measure app usage and improve features. GA4 receives events such as screens viewed and search terms, associated with a random analytics identifier rather than your name.
- Expo (EAS Updates) — delivers over-the-air updates to the app; when the app checks for an update it sends your device type, app version, and IP address.
With venues only where necessary to complete an action you initiate (for example, a check-in or booking).
For legal reasons — to comply with the law, or to protect the rights, safety and security of our users, the public, or KidsTop.
In a business transfer — if KidsTop is involved in a merger, acquisition or sale of assets, subject to this Policy.

4. Sign in with Google & Apple

If you choose Google or Apple sign-in, we receive only your basic profile (name and email) to create your account. We request the minimum scopes needed to sign you in and do not access your other Google or Apple data. Your use of those services is also governed by Google’s and Apple’s respective privacy policies.

5. Data retention

We keep your information for as long as your account is active or as needed to provide the service, then delete or anonymize it, unless a longer period is required by law.

6. Your rights & choices — including deletion

Delete your account and data. In the app, go to Profile → Delete account to permanently delete your account and associated data (profile, child profiles, favorites, reviews, visits). You can also request access, correction, or deletion at any time by emailing hello@kidstop.org, and we will respond within a reasonable time.

You can also control location permissions in your device settings and unsubscribe from non-essential communications.

7. Children’s privacy

KidsTop is intended for parents and guardians (adults 18+), not for use by children. Children do not create or control accounts. Any child profile is created and managed by a parent/guardian for planning purposes. We do not knowingly collect personal information directly from children. If you believe a child has provided us information, contact us and we will delete it.

8. Security

We use industry-standard measures (encryption in transit, access controls, and reputable cloud infrastructure) to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information and continuously improve our safeguards.

9. International data transfers

Your data is processed on Google Cloud infrastructure, primarily in the European Union (europe-west1). By using KidsTop you consent to this processing.

10. Changes to this policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, an in-app notice.

11. Contact us

Questions or requests? Email hello@kidstop.org (KidsTop, operated by Alchematek sarl, Lebanon).