Kid Achievements
Privacy Policy
1. Scope
This policy explains how the privately distributed Kid Achievements Android app handles family information. Vafrcor Studio designed the app to work offline and does not operate a synchronization server for it.
2. Data stored on the device
The app stores family profiles, authentication verifiers, activities, approvals, points, rewards, redemption requests, and settings in a local SQLite database. The registered parent email identifies the family inside the app. Passwords and PINs are stored as salted verifiers rather than readable secrets.
3. Optional Google Drive backup and synchronization
Connecting a Google account is optional and requires a user action. When enabled, the app uses the non-sensitive drive.appdata permission to place encrypted backup and synchronization artifacts in the account's hidden Google Drive app-data area. Cloud content is encrypted with family key material protected by the family's synchronization passphrase.
Hidden app-data files remain under the user's Google account. A person who can access that account and knows the family passphrase may be able to restore the family data. Vafrcor Studio does not receive or host these artifacts.
4. Google account information and authorization
The app displays the selected Google account email so the family can confirm the correct account. Google provides and manages authorization tokens through Android services. Use of Google services is also governed by the Google Privacy Policy.
5. Biometrics and notifications
Biometric authentication is handled by Android. The app receives only an authentication result and does not receive raw fingerprint or biometric templates. Notification permission and preferences are device-local. Notifications avoid showing sensitive family details on the lock screen.
6. Children's and family information
Kid profiles are created and controlled by a parent or guardian for private family use. Parents are responsible for deciding what profile names and activity information to enter and for supervising children's use of the app.
7. Data sharing and monetization
The app contains no advertising, no analytics, and no behavioral tracking. Vafrcor Studio does not sell personal or family information. Data is shared with Google only when a user chooses Google Drive features and only as needed to provide those features.
8. Retention and deletion
Local information remains until a user deletes it through the app, clears application storage, or uninstalls the app. Connected cloud data remains in the Google account until it is deleted through the app's cloud-account controls or the account's Google Drive application-data controls. Disconnecting an account alone may not delete existing cloud files.
9. Security and user responsibilities
The app uses encryption and Android-provided secure storage where appropriate, but no method is absolutely secure. Families should protect device access, Google account access, profile credentials, and the synchronization passphrase, and should verify backups before replacing a device. Recovery cannot be guaranteed after data, credentials, or passphrases are lost.
10. Changes to this policy
Material changes will be published at this same URL with an updated effective date.
11. Contact
Privacy questions may be sent through Contact support.