Privacy Policy
This privacy notice informs you pursuant to GDPR about the processing of your personal data on the KIDO platform.
Data controller
KIDO UG (haftungsbeschränkt) i.G. [TODO: Address as in the Imprint] E-mail: [TODO: E-Mail] For full contact details please see the Imprint.
Which data we process
On registration: email address, password hash, IP address (logging). On school profile: school name, address, phone, logo / photos. On course creation: course data, schedules, prices. On bookings: child name & age, parent contact (provided by the school account).
Purpose of processing
Providing the SaaS service (contract performance Art. 6 (1) (b) GDPR), security logging (legitimate interest Art. 6 (1) (f)), accounting & tax (legal obligation Art. 6 (1) (c)).
Recipients / processors
We use the following processors (DPA pursuant to Art. 28 GDPR): • Supabase Inc., region eu-central-1 (Postgres + Auth hosting) • Vercel Inc., region Frankfurt (application hosting) • Stripe Payments Europe Ltd., Ireland (payment processing) • Resend, EU region (transactional emails) • PostHog, EU cloud (analytics — only after consent) • Sentry, EU region (error monitoring) • Google Maps (maps — only after consent)
Your rights
You have the right to information (Art. 15), correction (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You can lodge a complaint with the competent supervisory authority. Data export / deletion is available in your account under Settings.