Privacy Policy of the mykid.tips service (“Privacy Policy”)

This Privacy Policy defines how the personal data of Users, necessary for providing services electronically through the Service, are collected, processed, and stored.

  1. Definitions

    1. Service, mykid.tips, we - the website located at mykid.tips.
    2. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
    3. Regulations - Terms and Conditions for providing electronic services within the use of the Service.
    4. User (You, Your) - an adult natural person who has registered in the Service and uses the Subscription.
    5. Subscription - a service involving the provision of permanent access to the Service, which allows the User to ask questions about child upbringing, followed by analysis based on artificial intelligence (AI), based on which we generate a KIDplan – a response to the User's question related to the broadly understood upbringing of a child, and provide the ability for the User to track progress in implementing the KIDplan. Under the Subscription, the User agrees to make the Payment.
    6. Payment - the fee that the User commits to make in the amount specified in the Service for using the Subscription.
    7. Account - a collection of settings that enables the User to manage the Subscription.
    8. EEA - European Economic Area.
  2. Personal Data Administrator

    The administrator of your personal data processed for the purpose of providing the Subscription is mykid. If you have any questions regarding the processing of your personal data or wish to exercise the rights indicated in point 5 below, you can contact us by sending an email to: [email protected].

  3. Purposes, Scope of Personal Data, and Legal Grounds for Processing

    Purpose of processing Scope of personal data Legal grounds for processing
    Creating an Account and the Login Process email address, password, first name, and last name. If you register through a third-party service such as Facebook, Google, or Apple, we will collect authorized information from them, such as your first name, last name, email address, and profile picture. Article 6(1)(b) of the GDPR - necessity for the performance of a contract for the provision of the Subscription service or for taking steps at your request prior to entering into a contract.
    Provision of the Subscription service - conclusion, execution, and settlement of the service. email address, all content comprising questions, information, answers to questions entered, transmitted, or generated in any other way while using our services, data regarding progress in implementing the KIDplan, payment information, transaction history. Article 6(1)(b) of the GDPR - necessity for the performance of a contract for the provision of the Subscription service or for taking steps at your request prior to entering into a contract.
    Making Payments email address, payment confirmation information, payment transaction history (the administrator of the other data related to the payment is Stripe, Inc.). Article 6(1)(c) of the GDPR - compliance with legal obligations, including tax and accounting regulations;
    Analysis of usage statistics for the Service and newsletter. data regarding activity in the Service (including user behavior analysis on the site, IP address, browser data, and operating system information). Article 6(1)(f) of the GDPR - legitimate interest of the administrator consisting of monitoring and improving the performance and usability of the Service.
    Pursuit and defense against claims. mail address, data related to the use of the Subscription. Article 6(1)(f) of the GDPR - legitimate interest of the administrator consisting of establishing, pursuing, and defending against claims.
    Communication (responses to inquiries, handling complaints). contact details included in correspondence or complaints, content of the correspondence, data related to the use of the Service relevant to the complaint. Article 6(1)(f) of the GDPR - legitimate interest of the administrator consisting of improving the performance of the Service and fostering positive relationships with Users.
    Use of Social Media when using our social media (Facebook, Instagram, LinkedIn), we may process data obtained through these platforms, including but not limited to: first and last name, username, avatar (profile picture), information contained in posts and comments. Article 6(1)(f) of the GDPR - legitimate interest of the administrator consisting of building relationships with Users and marketing our products and services.
    Sending the Newsletter email address, and you provide the necessary data to receive it, as specified in the subscription form: your IP address, which was used when subscribing to the newsletter, indicates your approximate location, the email client you use to manage your email, and tracks your actions related to the messages sent to you. Therefore, we also have information about which messages you opened, which messages you clicked on links in, etc. Regarding the processing of information that does not come from you but has been collected automatically for the purpose of optimizing marketing activities. You can unsubscribe from receiving the newsletter at any time by clicking the dedicated link included in each message sent within the newsletter, or simply by contacting me. Unsubscribing from the newsletter moves your Data to an archive for the purpose of possible establishment, pursuit, or defense against claims related to the newsletter, as well as to ensure the possibility of demonstrating that the newsletter activities were conducted in accordance with the law. Article 6(1)(f) of the GDPR - legitimate interest of the administrator consisting of promoting services (if you give consent to receive the newsletter).

    Using information for these purposes, we employ both automated and manual processing techniques. Our automated methods include artificial intelligence (AI), which is a set of technologies that enables computers to perform tasks that typically require human knowledge and intelligence. Our manual methods often work in conjunction with and support automated methods.

  4. Recipients of Personal Data

    We may share your personal data with service providers we use, such as:

    1. Hosting services and "no-code" platforms:
      • Google LLC (headquartered: EEA and outside EEA, Belgium, United States);
    2. Email services:
      • Twilio Inc. (headquartered: outside EEA, United States);
    3. Payment services:
      • Stripe, Inc. (headquartered: outside EEA, United States);
    4. IP geolocation:
      • IDB LLC. (headquartered: outside EEA, United States);
    5. Artificial intelligence (Chat GPT):
      • OpenAI Ireland Limited (headquartered: EEA, Ireland);
    6. Traffic measurement in the Service:
      • New Relic Inc. (headquartered: outside EEA, United States).

    Some service providers to whom we transfer personal data are located outside the EEA. Therefore, we have ensured that these providers guarantee a high level of personal data protection. The transfer of personal data outside the EEA may occur based on:

    • The obligation to use standard contractual clauses adopted by the EU Commission;
    • Decisions affirming an adequate level of personal data protection issued by the Commission (EU) (e.g., the Privacy Framework for the transfer of personal data to the United States).

    We may also share your personal data upon request from authorized state authorities such as: Prosecutor's Office, Police, President of the Personal Data Protection Office, etc.

  5. Retention Period for Personal Data

    We process your personal data for as long as you hold an Account, and thereafter until the expiration of the statute of limitations for claims related to our binding agreement (generally a three-year statute of limitations). In the case of processing personal data for marketing purposes, we will process your data until you object to such processing or withdraw your consent to receive marketing information. If the processing of your personal data is based on your consent, we will process it until you withdraw that consent. For the purpose of sending the newsletter, we will process your personal data until you unsubscribe from receiving the newsletter. In certain cases dictated by law, we may process your data longer. For tax and accounting obligations, we process your personal data for 5 years from the end of the tax year in which the tax obligation payment deadline has expired.

  6. Rights of the Data Subject

    In connection with the processing of your personal data, you have the following rights:

    • Right of access to personal data and obtaining a copy of that data
    • Right to rectification and erasure of personal data
    • Right to restrict the processing of personal data. You have the right to request the restriction of the use of your personal data when:
      1. You contest the accuracy of the data – then we will restrict its use for the time necessary to verify the accuracy of your data;
      2. The processing of your data is unlawful, and instead of erasing the data, you request a restriction on its use;
      3. The personal data are no longer necessary for the purposes for which they were collected or used, but are needed by you for the establishment, pursuit, or defense of claims;
      4. You have raised an objection to the use of your data – then the restriction occurs for the time necessary to consider whether your interests, rights, and freedoms outweigh our interests in processing your personal data.
    • Right to object to the use of personal data.

      You have the right to object to the use of your personal data, including profiling, if we process your data based on our legitimate interest, e.g., in connection with analyzing the usage statistics of the Service. If we process your personal data for direct marketing purposes, you have the right to object to the processing of personal data for such marketing, including profiling, at any time, to the extent that the processing is related to such direct marketing. If we do not have another legal basis for processing that personal data, we will delete your data for which you raised an objection.

    • Right to data portability.

      You have the right to receive your personal data that you provided to us in a structured, commonly used, machine-readable format, and you have the right to transmit such personal data to another administrator. You also have the right to request that personal data be transmitted by us directly to another administrator, where technically feasible.

    • Right to withdraw consent (if we process your personal data based on consent)
    • Right to lodge a complaint with the President of the Personal Data Protection Office
  7. How do we ensure the security of personal data?

    We take care of the security of Users' personal data by employing appropriate technical and organizational protective measures, such as data encryption (SSL).

  8. Does mykid collect personal data from children?

    mykid does not knowingly collect personal data from children under the age of 13. If we discover that we have collected personal data from a child under 13, we will take appropriate steps to remove that information from our systems. If you are under 13 years of age, please do not submit any personal data via our products. We encourage parents and legal guardians to monitor their children’s internet usage and to enforce this Privacy Policy to ensure that children do not disclose personal data through our products. Please note that in some jurisdictions, the age at which one can give digital consent is higher than 13. If you are in one of those jurisdictions, you must be at least that age to use our products.

  9. For what purposes do we use cookies or other similar technologies?

    Cookies and other similar technologies are used to ensure the proper functioning of our pages, such as remembering cart contents, maintaining sessions after logging in, properly submitting forms, embedding video or audio players, operating commenting systems, and social media plugins. Additionally, cookies and other similar technologies are used for statistical, analytical, and marketing purposes. Cookies also store information about the cookie settings you defined using the privacy mechanism available on our site. Some cookies and other similar technologies are associated with external tools we use. Providers of those tools may gain access to information collected through these cookies and similar technologies.

  10. Data deletion

    You can delete your Account at any time. To do this, please contact us at [email protected] and provide the email address associated with your Account. After receiving your request, we will delete your Account and all personal data associated with it. Please note that we may retain some information about you for a certain period of time to comply with legal obligations, to resolve disputes, to enforce agreements, to support business operations, and to continue to develop and improve our services.

  11. Changes to the Privacy Policy

    We may make changes or additions to the Privacy Policy at any time if there is a need to do so. Any changes to the privacy policy will be published on the mykid.tips website along with the date of entry into force.

Best regards,
The mykid.tips Team