KidsTube Privacy Policy

KidsTube (“the app”) is a video app for children operated by Groei B.V. (“we”, “us”). It lets parents curate a safe, allowlisted selection of YouTube channels for their kids, with age filters and screen-time limits.

This policy is written to satisfy the App Store requirements for apps made for kids, the U.S. Children’s Online Privacy Protection Act (COPPA), and the EU GDPR (including its rules on children’s data).

The short version

We collect nothing about you. KidsTube has no accounts, no sign-up, no ads, no analytics, and no tracking of any kind.
Everything stays on your device. Child profiles, watch history, filters and settings are stored only in the app’s local database on your iPad/iPhone. Watch history is automatically deleted after 30 days.
Video data comes from YouTube. To show and play videos the app uses YouTube API Services and the embedded YouTube player; Google’s own privacy policy applies to that traffic, and the player may use cookies or similar technologies on your device (details below).

What information KidsTube accesses, collects, stores and uses

KidsTube accesses, collects, stores and uses the following information, including API Data obtained from YouTube API Services:

1. Information you (the parent) provide, stored only on your device:

Data	Where it lives	Retention	Why
Child profile (first name or nickname, avatar, age, mode)	Local app database	Until you delete the profile or the app	Per-child filtering and limits
Approved / blocked channels, filter keywords	Local app database	Until you remove them	Parental content controls
Watch history and screen-time log	Local app database	Auto-deleted after 30 days	Parent dashboard and daily limits
Parent PIN	Device Keychain, stored as a salted cryptographic hash — the PIN itself is never stored	Until app deletion / reset	Locks the parent area
Recent kid searches, app preferences	Local app storage	Until you clear them or delete the app	Convenience

2. API Data from YouTube API Services, stored only on your device:

Channel metadata (channel IDs, names, thumbnails) for the channels you approve or block.
Video metadata (video IDs, titles, descriptions, thumbnails, durations, view counts, category and topic labels, “made for kids” status) for videos on approved channels and in search results.
A cached copy of each approved channel’s video list is kept on your device for at most 7 days (refreshed roughly every 6 hours) to reduce network use. Watch-history entries containing video metadata are deleted automatically after 30 days. Stored channel and video IDs are kept until you remove the channel or delete the app.

3. Information collected when the app makes network requests:

Your IP address and standard network metadata, received transiently by our proxy service and by Google when the app looks up channels/videos or plays a video. Our proxy keeps no database of requests and builds no profile; our hosting provider retains short-lived operational request logs (such as the requested URL and response status) for reliability and abuse prevention only.
A random per-install identifier used only for rate limiting. It is generated on your device, is not linked to you or your child, and resets if you reinstall the app.

None of the on-device data listed above ever leaves your device — we have no access to any of it. Deleting a child profile deletes its data; deleting the app deletes everything (the PIN hash is removed from the Keychain on reset).

We recommend using only a first name or nickname for child profiles.

How we use, process and share your information

We use and process the information above solely to provide the app’s features: showing the allowlisted video feed, playing videos, enforcing age filters and screen-time limits, and displaying the parent dashboard. We do not use it for advertising, analytics, profiling, or any other purpose, and we never sell it.

We share information only as follows:

Internally (Groei B.V.): nothing. All profile, history and settings data stays on your device; we have no servers that receive, store or can read it.
Google / YouTube (external): search and lookup queries and video playback requests are sent to YouTube API Services and YouTube’s video servers, together with your IP address and standard request metadata, in order to return results and stream video. This traffic is governed by the Google Privacy Policy.
Cloudflare (external infrastructure): API lookups are relayed through our proxy hosted on Cloudflare so that API credentials never ship on your device. Cloudflare processes the request traffic (including IP addresses) as our infrastructure provider, and retains short-lived operational request logs on our behalf; the proxy keeps no database of requests and builds no profile of you or your child.
Apple (external): processes subscription purchases (see “Purchases” below).

No other internal or external party receives any information from KidsTube.

Information stored on your device, cookies and similar technologies

KidsTube stores information directly on your device: the local app database, the video-list cache, app preferences, and the PIN hash in the device Keychain, as described above. The app itself does not place, access or recognize cookies.

When a video plays, the embedded YouTube player runs inside the app as web content served by Google. Like any embedded YouTube player, it may store, access or collect information on your device, including by placing, accessing or recognizing cookies or similar technologies (such as browser local storage) within the player’s web view — for example to remember playback quality or caption settings. We load the player from the privacy-enhanced youtube-nocookie.com domain, which limits the use of such technologies for tracking, and its data is confined to the app’s web-view storage and removed when you delete the app. Google’s use of these technologies is described in the Google Privacy Policy and How Google uses cookies.

Data processed by YouTube / Google

KidsTube uses YouTube API Services to look up channels and video metadata, and plays videos through YouTube’s embedded player (loaded from the cookie-reduced youtube-nocookie.com domain). This means:

Search and lookup requests (e.g. a channel name, a search phrase) are relayed through our proxy service (hosted on Cloudflare) to Google’s servers, together with standard network information such as your IP address. The proxy exists to keep API credentials off your device and to prevent abuse; it keeps no database of requests and builds no profile of you or your child, beyond the short-lived operational logs described above.
These requests include a random per-install identifier used only for rate limiting (preventing abuse of our service). It is generated on your device, is not linked to you or your child in any way, and resets if you reinstall the app.
When a video plays, your device communicates directly with YouTube’s servers the same way it would for any embedded YouTube video — playback does not go through our proxy.

Beyond the rate-limiting identifier described above we add nothing to these requests, and we receive nothing back from Google about you or your child.

By using KidsTube you are also agreeing to be bound by the YouTube Terms of Service. Google’s handling of the traffic described above is governed by the Google Privacy Policy.

Purchases

KidsTube offers a 3-day free trial and optional auto-renewable subscriptions. All payments are processed by Apple through the App Store; we never see your name, payment details, or Apple Account. The only purchase-related information on your device is the trial start date and Apple’s own purchase records, which the app reads locally to unlock features. Apple’s handling of purchase data is described in the Apple Privacy Policy. Purchases are protected by the parent PIN gate.

Children’s privacy (COPPA / GDPR-K)

KidsTube is designed for children to use under parental supervision, but it is configured and controlled by a parent or guardian:

We do not collect, store or share any personal information from children (or from anyone else).
The app shows no third-party advertising. The only purchase is the optional parent subscription, which is reachable exclusively through the PIN parental gate — a child cannot start or complete a purchase.
All parental settings and purchases are protected by a PIN gate.
The app contains no social features, no chat, and no way for a child to share or publish anything.

Your rights

Because we hold no data about you, requests for access, correction or deletion can be fulfilled entirely on your device (delete a profile, or delete the app). If you have any privacy question or concern, contact us and we will respond within 30 days.

Changes to this policy

If we ever change what the app does with data, we will update this policy, change the effective date above, and describe the change in the App Store release notes before it takes effect.

Contact

Groei B.V. · Wielewaal 56, Nieuwegein, the Netherlands · KVK 99753030
Email: a@groei.dev