Kids Remote Privacy Policy

Last updated 3 November 2026. Kids Remote is operated from Queensland, Australia. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and we build the app with children's privacy laws such as the US Children's Online Privacy Protection Act (COPPA) in mind.

The short version

If you link family phones, our server keeps the shared household so those phones match: names, birthdays, jobs, points, rewards and house settings. PINs stay on the phone that set them. They are not copied to our server, not even as a hash. Photos stay on the phone too. If you add an xAI or NextDNS key, an encrypted copy is kept on our server for the parent phones (see below).
Banjo is an AI. AI chat and voice are optional and off for kids until a parent says yes. They run on your family's own xAI key: xAI (SpaceXAI LLC) processes the chat, and xAI bills you directly.
Setting up with Banjo sends your kids' names and birthdays to xAI. If you set up your household by talking or typing to Banjo, what you say, including your kids' names and dates of birth, goes to xAI under your key so Banjo can fill in your crew. Without Zero Data Retention, xAI keeps it for up to 30 days. You can skip that and type your crew on the form instead.
In typed Banjo chats, family first names are swapped for placeholders before a message leaves the phone. Voice is different: the sound of someone talking can't have names taken out, so xAI hears whatever is said, names included.
Kids' replies get an automatic word check. Banjo's typed replies to kids are checked before they're shown, and Banjo's spoken replies to kids are checked a sentence at a time before they're heard. It's an automatic filter, so it can miss things.
Kids can only use Banjo chat and voice, on every phone including the main Big Boss phone, once your own xAI account has Zero Data Retention (ZDR) switched on. If the app can't confirm ZDR is on (for example, xAI doesn't say), it treats ZDR as off and switches kids' Banjo off until a check shows it is on.
Banjo has a family memory on our server. Short snippets of what the grown-ups type to Banjo, and Banjo's replies, are kept so Banjo can remember your house. Nothing a child says or types to Banjo is kept. Each line is deleted after 180 days, and you can wipe it any time. See Banjo's family memory.
Problem reports are on unless you switch them off. If someone reports something Banjo said, Banjo's words, the reason they picked and a line or reply ID go to Kids Remote with your family's names removed, and we keep them 90 days. What your child said or asked is never sent. See Problem reports.
Merch orders (when the shop opens): Stripe takes the payment and Printful prints and posts it, using the name and address you type at checkout. We keep the print file and the ages used to draw it, never names or birthdays, and delete them 30 days after delivery. See Merch orders.
No ads. No selling data. No tracking across other apps or websites.
You can delete everything. See Deleting data.

Who we are

Kids Remote is a household organisation app (the Parent Command app and the Kids Remote Kid app for children). Contact for privacy questions, access, correction or deletion: hello@kidsremote.app. Our privacy officer is Monique Cook, Queensland, Australia (same email).

What stays only on your phones

Some information stays only on the device and is not sent to us:

Profile PINs. A PIN is checked on that phone. It is not sent to our server, in plain text or as a hash. Each phone keeps the PINs that were set on it.
Any Banjo chat history a parent chooses to keep on that phone, and a copy of "Report this answer" reports. Reports also go to us unless a parent has switched that off (see Problem reports).

The phone also keeps a local copy of the household so it still works with no signal. That copy syncs back. The server copy is the one that counts for names, birthdays, jobs, points, rewards and settings. A PIN does not: the copy on the phone that set it is the one that phone checks, and it is not uploaded.

What our server keeps (only if you link family phones)

If a parent links other phones (a co-parent or a child), our server keeps the minimum needed to connect them:

Data	Why	How long
Family ID and the parent-consent record (which statements were accepted, the version and the time)	To show a parent agreed	While the family exists
Linked phones: role (Big Boss, co-parent or kid), a generic device name such as "iPhone", platform, and a hashed sign-in credential	So each phone can sign in, and a parent can remove it	Until the phone is removed
The household board: people (names and dates of birth for parents and kids), jobs, points, rewards and house settings, plus a small gag-state record (seen flags and a shuffled deck). Photos and PINs are not included.	So every linked phone shows the same household. A kid's phone is not sent birthdays. PINs are checked on each phone and are not stored here.	While the family exists; removed with that person or when the family is deleted
Linking codes (stored hashed)	To join a phone	Expire after 10 minutes
AI settings: on/off, monthly cap, the app's spend estimate, the family's chosen AI model, the last 4 characters of the key and whether Zero Data Retention is on	To run the family AI gate and spend cap	While the family exists; spend resets monthly
Per-child Banjo consent: chat and voice switches, daily limit, region, how the parent was verified, when consent was given or withdrawn, and which version of the consent wording the parent saw	To only let a child chat or talk when a parent agreed, and to show what was agreed and when	Until the child or the family is removed
Banjo minutes used per child today, and the family time zone	For the daily time limit	Only today's count is kept
Problem reports (only Banjo's reported words, with your family's names removed and emails and phone numbers stripped again, the reason picked, the ID of the Banjo line or reply, plus the filter type, region (Australia or US) and which app). Never the question or anything the child said or typed. No family ID, device, name, key or IP address. Kept whether or not you link phones.	So we can fix bad answers	90 days
Banjo's family memory: short lines (up to 160 characters each) taken from what the grown-ups (Big Boss and co-parents) type to Banjo and Banjo's replies (never a child's words), plus the first names of your crew and pets from the setup chat, and the Big Boss's own Banjo instructions if you write some. See Banjo's family memory.	So Banjo can remember your household from one chat to the next	Each memory line is deleted 180 days after it was saved (at most 8 "working" lines and 400 archive lines at a time). If nobody in the family uses Banjo for 180 days, the whole record is deleted. "Reset Banjo's memory" or deleting the family removes it straight away.
The family's xAI key and NextDNS key (and NextDNS profile ID), if you add them. Stored encrypted.	So Banjo works on every linked phone and web filtering works on every parent phone. All the family's linked phones use the same family xAI key: when a linked phone (including a kid's phone, once a parent has said yes for that child) talks to Banjo, our server uses the stored key to send that request to xAI under your family's own xAI account. The key itself is never sent to any phone other than the one that added it, never shown in plain text in our logs, and never sold or shared.	Until you remove the key, unlink the family, or delete the account
Reading progress (which stories or books each child has read and where they're up to)	So progress follows the child across family phones	Deleted 180 days after it was last used, or with the child's profile or the family
Setup-guide and help state (which setup steps and tips are done, and the Line setup ticks)	So you don't see the same steps on every phone	Deleted 180 days after it was last used, or with the family
Arun's notes: short help-desk notes about which screens and setup steps a parent asked about	So Arun, the help desk, doesn't ask the same thing twice on another parent phone	Deleted 180 days after it was last used, or with the family
Banjo line counts (daily totals, no IDs). See Help improve Banjo.	To improve Banjo's lines and filters	90 days

Apart from Banjo's family memory (below), we do not keep the content of Banjo chats or voice on our server. Linked phones' typed messages, including a kid's messages to Banjo on the kid's own phone, pass through our server to xAI under your family's own xAI account and back, with names removed, and are not otherwise stored. Live voice from every phone, including a kid's linked phone (when a parent has said yes to voice for that child) and the main Big Boss phone, also passes through our server (on Cloudflare) to reach xAI under your family's own xAI account. Voice can't have names removed. Voice isn't recorded or stored, and no voice turn is saved in Banjo's family memory. The household board above is the shared copy. Photos stay on the device that took them and are not uploaded: job proof photos, profile photos and children's drawings never leave that phone, and our server removes any image it is sent. The one exception is a merch order you choose to place: the family picture the app draws for the merch (cartoon cats, pets and the house, no names and no photos) goes to us and the printer as the print file. See Merch orders. Other phones show a note or initials instead. The xAI key and a NextDNS login key, if you add them, are stored encrypted on our server (see the table above).

A kid's phone only gets that child's own progress and kid-safe settings. It never gets parent notes, Banjo's family memory, birthdays, or keys.

Banjo's family memory

Added 9 October 2026.

Kids' words are never kept. Nothing a child types or says to Banjo is saved in this memory: not from a kid profile on a parent's phone, not from a kid's own phone, and not from voice. Lines saved before 9 October 2026 didn't record who said them, so we treat them all as possibly a child's: they are never used again, and they are deleted from our server the next time anyone in the family uses Banjo or the help mailbox (only the setup line listing your crew's first names is kept).
What is kept: after a grown-up's (Big Boss or co-parent) typed chat turn with Banjo, our server may save one short line: what they typed and Banjo's reply, cut to 160 characters. Greetings and very short turns aren't saved. Typed chats have family first names swapped for placeholders before they leave the phone. Voice turns aren't saved. Lines that look like something to remember (for example "remember", "likes", a pet, a birthday) also go into a short "working memory" of up to 8 lines. The setup chat saves one line listing the first names of your crew and pets. If the Big Boss writes their own instructions for Banjo, those are kept too (up to 4,000 characters).
Where: in your family's record in Cloudflare Workers KV (see Who else handles data), under your family ID only. It is not shared with other families.
How it's used: the working memory, and one archive line when it matches what someone just asked, are added to Banjo's instructions on later chats. That means they are sent to xAI under your key, like the rest of the chat (see AI). We don't use the memory for anything else, and we don't sell it or use it for ads.
How long: at most 8 working lines and 400 archive lines are kept; older ones drop off. Every memory line is deleted 180 days after it was saved. If nobody in the family uses Banjo for 180 days, the whole record is deleted automatically.
Deleting it: on the main Big Boss phone, Settings → "Reset Banjo's memory" deletes the working memory and the archive straight away. Deleting the family account deletes all of it. You can also email us.

AI: Banjo, xAI and your own key

Who processes the chat: when AI is on, what someone types or says to Banjo, plus minimal job context, is sent to xAI (SpaceXAI LLC, USA) to generate a reply. Voice is sent to xAI to be turned into text and speech.
Kid voice: when a parent has agreed to voice for a child, and only while the talk button is on, the sound of the child talking goes to xAI under your key, together with Banjo's kid-safe instructions for the child's age band (for example "6 to 8"), the names and times of that child's jobs, and any story, poem or joke Banjo is reading. The app doesn't add the child's name or date of birth, but voice can't have names taken out, so xAI hears any name the child says. Please remind your child not to say full names, addresses or school names. xAI turns the speech into text and makes Banjo's spoken reply. It passes through our server on Cloudflare, which doesn't record or store it. Kids' turns are never saved in Banjo's family memory.
Setup chat: if you set up your household by talking or typing to Banjo, the whole setup conversation, including your kids' names and dates of birth and any others you give, is sent to xAI under your key so Banjo can fill in your crew. Without ZDR, xAI keeps it for up to 30 days; with ZDR on, xAI doesn't store it. Some of it goes straight from your phone to xAI and some passes through our server; we don't store it. You can type your crew on the form instead.
Your key, your account: you attach your own xAI API key. Your family is xAI's customer, xAI's terms and privacy policy apply to that account, and xAI bills you directly. For business API customers, xAI's terms say it processes personal information as a processor under its Data Processing Addendum. Kids Remote never sees your card details.
Name redaction (typed chats only): in typed Banjo chats, first names known to the app are replaced with placeholders before a message leaves the phone. Our server does the same again as a safety net. This does not apply to the setup chat (names and birthdays are what it's for) or to voice (xAI hears whatever is said, names included). In kid chats, only a child's age band (for example "9 to 12") shapes Banjo's tone. Apart from the setup chat, we don't send dates of birth. We don't send addresses or postcodes.
Zero Data Retention (ZDR): You use your own xAI account and key, so xAI is your service provider and you pay for your own tokens. By default xAI keeps requests and replies for up to 30 days for abuse monitoring, then deletes them; with ZDR switched on in your xAI account, xAI doesn't store them. Kids Remote requires ZDR for kids' Banjo chat and voice on every phone, including the main Big Boss phone, because xAI's business terms say personal data should only be sent with ZDR on. Our setup steps tell you to switch ZDR on for your whole xAI team. If xAI doesn't confirm ZDR is on, the app treats it as off: kids' Banjo stays off, and the key entry, the kid consent panel and Banjo settings say "Zero Data Retention is OFF" with a link to xAI Team Settings and a Check again button. The app re-checks the setting when your key is used (at most every 10 minutes) and switches kids' Banjo back on by itself once a check shows ZDR is on.
Banjo is an AI, not a person. AI can be wrong. Kid chats use a kid-safe safety prompt. Typed replies to kids get an automatic word check before they're shown. Spoken replies to kids are checked by our server a sentence at a time before the sound is played, and a reply that fails is cut off and replaced with a safe line. These are automatic word filters, so they can miss things, and part of a spoken reply can play before a problem is caught. A parent can report any typed answer.

Problem reports

What it is: under Banjo's replies, jokes, yarns, poems and other lines there's a "Report" button. The person picks a reason (for example "Wrong or made up" or "Scary or upsetting"). A report is always saved on that phone for a parent to see in Banjo settings → "Reports and chat history".
On by default: since 3 October 2026 a report also goes to Kids Remote so we can fix bad answers, unless a parent switches off "Also send reports to Kids Remote" in Banjo settings. Switching it off stops new reports leaving that phone. Reports made on a kid's own phone aren't sent to Kids Remote. They go to your family's household board on our server (the reason, the line or reply ID and Banjo's words only, newest 30 kept) so the grown-ups' phones can show them, and they're deleted with the family.
Families who set up before then: nothing is sent from your phone until a parent has seen a one-time notice in the app with the same switch, already on, and taps "Got it". You can switch it off right there.
What goes: only Banjo's reported words, the reason picked and the ID of that Banjo line or reply, with your family's first names already swapped for placeholders on the phone (other names in Banjo's words can still be there), and emails and phone numbers stripped again by our server. The question, and anything else your child said or typed, is never sent (since 9 October 2026; if an older version of the app still sends a question, our server throws it away). Reports we received before then can still include the question until they're deleted at 90 days. We also get the filter type, the region (Australia or US) and which app. No family ID, device ID, name, key or IP address is kept with a report.
Who reads them: only Kids Remote: the developer and our support assistant (an AI helper that can read reports but can't change anything). We don't sell them or use them for ads.
How long: we keep reports for 90 days, then they're deleted automatically.

Setup interview diagnostics

When the voice setup interview with Banjo ends, stalls, or a parent taps Export log, the parent phone sends a short technical log to Kids Remote so we can fix voice problems: event names, timings, microphone on/off reasons, app version and browser type. What anyone said, names and birthdays are replaced with a length placeholder (for example "[text:12]") before it leaves the phone. No audio, keys or IP address are kept. If the phone is linked, the household is stored only as a one-way code. Logs are deleted after 30 days.

Merch orders

The merch shop isn't open yet. This section says what will happen when it opens. Only a Big Boss (parent) can open the shop, behind the Big Boss PIN; it is never shown on a child's screen or a child's phone.

What we collect: what you order (product, colour, size, quantity, sky), the print file you approved (the family picture the app draws: cartoon cats, pets, the house, the Kids Remote wordmark and a QR code to the app; no names and no photos), the ages of the people in the picture (used to draw them at the right height), the kinds of pets drawn, an order number like KR-7Q4M2X, the amounts, and tracking numbers. We never send or keep anyone's name, pet names or birthdays with an order. The order is linked to your household with a one-way code, not your family ID.
What you give Stripe and Printful directly: at checkout you type your payment details, email, and the shipping name and address into Stripe's page. You (the parent) are the recipient. Stripe passes the shipping name and address to us only to hand them to Printful; we don't keep them.
Who gets it, and where:
- Stripe (Stripe Payments Australia Pty Ltd, with Stripe, Inc. in the USA) takes the payment. It receives the order number, the products and amounts, and what you type on its page. Your card details go to Stripe, never to Kids Remote. Stripe may process data in the USA and other countries.
- Printful (Printful, Inc., USA) prints and posts the order. It receives the order number, the products, the print file, and the shipping name and address. Depending on the item and where it is going, it is printed in Australia, the USA, the UK or the EU (for example Latvia or Spain).
- Cloudflare (USA) stores the order record and print file for us, as for the rest of our server.
Under Australian Privacy Principle 8, this means your order details may be disclosed overseas, mainly to the USA, the UK and the EU. We only send what is needed to take the payment and deliver the order.
How long we keep it: an order that isn't paid is deleted after 2 days. For a paid order, our copy of the order and the print file is deleted 30 days after delivery (or 120 days after the order if delivery is never confirmed), which leaves time to report a problem and get a reprint. Stripe keeps payment records, and Printful keeps order records, for as long as their own legal and tax rules require; see their privacy policies.
Deleting it sooner: email hello@kidsremote.app with your order number and we will delete our copy, unless we still need it to fix a problem with that order.

Children

A parent or guardian aged 18 or over sets up the family and agrees before any child profile is created. Child profiles are not separate customer accounts, and kids never see a paywall.
Banjo chat and voice are off for every child by default. A parent switches them on for each child, and can set a daily time limit (1 hour by default). Voice is a separate yes: switching on "Allow voice" only shows the voice consent, and voice stays off until the parent agrees to it.
Withdrawing consent: a parent can switch chat or voice off for a child at any time, and it stops straight away (a call already running on that phone is hung up). We keep a dated note that consent was withdrawn, next to when it was given and which consent wording was shown, so we can show what was agreed. The note holds no other personal information.
US families (COPPA): for a child under 13 outside Australia, Banjo chat stays locked until a parent completes a verified parental consent step. Parents can review what we hold about their child, ask us to delete it, and withdraw consent at any time. Doing so stops further collection. We don't make a child give more information than a feature needs.
When a child seems to be in danger: if a child types or says words about self-harm or suicide, Banjo doesn't send that turn to xAI. She shows (and in voice, says) local crisis help numbers and tells them to talk to a grown-up they trust. The grown-ups get a note in Banjo settings that this happened. From a kid's linked phone, the note passes through our server to the grown-ups' phones. The note doesn't include what the child said. See How Banjo handles safety.
Australia: we follow the Australian Privacy Principles. We will update this policy for the Children's Online Privacy Code being developed by the OAIC.
No ads and no selling of children's data. The barcode scanner (Google ML Kit) may send basic usage diagnostics and an install ID to Google. Scanned QR images stay on the phone. That scanner is in the Android app only. The iPhone app scans QR codes with Apple's camera and does not send them to Google.
The same protections everywhere: children in Australia, New Zealand and the US get the same protections described on this page, including the right for a parent to see what we hold, have it deleted and withdraw consent.

Anonymous daily usage count

We count how many app sessions are opened each day, as one number for that day. We do not store a family ID, device ID or IP address with this count. We use it only to spot spikes in problems. The daily counts are automatically deleted after 400 days.

Help improve Banjo (Banjo line counts)

To make Banjo's jokes, stories and answers better, each family phone, including a kid's phone, can send Kids Remote a few plain totals, at most once a day: how many times each Banjo line played, was talked over, or got a "Funny!" tap; how many times the safety filter stepped in, by type only (the types are sexual content, self-harm, weapons or violence, drugs or alcohol, personal details, secrets, swearing, and stops by our server's filter or the voice check); and how many questions Banjo couldn't answer, by broad topic only (for example "space" or "animals"). The phone works out the topic. The question itself is never kept or sent.

These totals don't include names, ages, birthdays, what anyone said or typed, recordings, or any family, child or device ID. Our server doesn't keep the IP address they came from. Each phone's totals are added to one combined count for that day, then the phone's batch is thrown away, so we can't tell which family or child a number came from.

Only Kids Remote can read the combined totals, and any count under 10 is shown only as "under 10". Each day's totals are deleted automatically after 90 days. They're stored on our hosting provider (Cloudflare), the same as the rest of our server data. We don't sell them or use them for ads.

It's on unless you switch it off. Before anything is counted, a parent sees a one-time notice in the app and can switch it off there. A parent can also turn off "Help improve Banjo" in Banjo settings at any time. That stops it on every phone in the family and deletes the totals not yet sent from that phone.

QR code scanner on Android (Google ML Kit)

When you link a phone to your family, the Android app reads the QR code with Google ML Kit, a tool from Google LLC that is built into the app. Google states that ML Kit processes the camera image fully on the phone, and that neither the image nor what it reads from the QR code is sent to Google's servers. The linking details in the QR code go only to our server, as described above.

Google also states that ML Kit may contact Google's servers from time to time to receive bug fixes, model updates and hardware compatibility information, and sends Google metrics about how the scanner performs and is used in the app. These metrics may include basic device and app information and an install identifier. Google uses them to measure performance, fix problems, maintain and improve ML Kit and detect misuse, under Google's Privacy Policy. We don't receive these metrics, we don't link them to your family, and they aren't used by us for ads or tracking. The scanner only runs when you choose to scan a code.

The iPhone and iPad app does not include Google ML Kit. It reads QR codes with Apple's own camera tools on the device. The web version doesn't use ML Kit.

Who else handles data

xAI (SpaceXAI LLC, USA): AI chat, voice and the setup chat, only when AI is on, under your key (see above).
Apple (iPhone and iPad only): when Banjo is listening on an iPhone or iPad, Apple's speech service may briefly handle what is said, including what a child says, to turn it into text. Apple's own privacy policy applies to that.
Our hosting provider, currently Cloudflare, Inc. (USA). It runs the linking server and stores the server data above in Cloudflare Workers KV on its global network. It also relays live Banjo voice between every phone (including the main Big Boss phone) and xAI, and relays NextDNS requests. Nothing it relays is stored; the encrypted keys and the server data above are stored in Workers KV.
NextDNS (NextDNS Inc.), only if you add NextDNS: your NextDNS key and profile ID are stored encrypted on our server and sent only to NextDNS when the app changes your filtering. The Web and Line features change filtering rules and pause the internet on your family's own NextDNS profile, which only affects devices set up to use that profile. Phones set up with your profile send their internet lookups (DNS) to your NextDNS account, under NextDNS's privacy policy.
Google ML Kit (Google LLC), in the Android app only: reads the QR code when you link a phone. The barcode scanner (Google ML Kit) may send basic usage diagnostics and an install ID to Google. Scanned QR images stay on the phone. It isn't used for ads. See QR code scanner on Android. The iPhone app does not include Google ML Kit.
Apple and Google: app downloads. The app has no in-app purchases.
Stripe and Printful, only if you order merch: payment, and printing and posting. See Merch orders.
Banjo chat and voice for US children under 13 are not available yet, because they need verifiable parental consent and we haven't switched a method on. If we add one (for example a card check that doesn't charge you), the provider will handle those details, and we will name it here before we use it.

We don't sell or rent personal information, and we don't share it for advertising.

Deleting data

On a phone: delete a profile in the app, or uninstall the app to remove everything stored on that phone.
AI key: "Remove" in the key settings deletes the key from this phone and our server copy, if one exists.
A linked phone: removing it deletes its sign-in credential and clears its name, avatar and age band on our server.
Problem reports: switch off "Also send reports to Kids Remote" to stop sending them. Reports we already have are deleted after 90 days, or sooner if you email us.
Banjo line counts: switch off "Help improve Banjo" in Banjo settings to stop them on every family phone and delete the totals not yet sent. Combined daily totals we already have hold no family, child or device ID and are deleted after 90 days.
Banjo's family memory: Settings → "Reset Banjo's memory" on the main Big Boss phone deletes it straight away. Otherwise each line is deleted after 180 days, and the whole record 180 days after the family last used Banjo.
A child's Banjo consent: switching it off stops Banjo for that child straight away. A short record of when consent was given and withdrawn is kept until the child or the family is removed.
The whole family account: on the main Big Boss phone, go to Settings → Delete family account. It deletes everything our server holds for the family straight away (the household board, the family link, consent records, Banjo settings, Banjo's family memory, usage and spend, and every linked phone's sign-in) and wipes that phone, including the xAI key stored on it. Linked phones are signed out next time they check in.
Without the app: see Delete your family account, or email hello@kidsremote.app and we will delete the family within 30 days. We will confirm when it's done.
At xAI: with ZDR on, xAI doesn't keep chats. Otherwise xAI deletes them after 30 days. You can also manage your xAI account in the xAI console.

Security

Traffic is encrypted in transit (HTTPS). Sign-in credentials and linking codes are stored hashed. Profile PINs are not stored on our server. The xAI and NextDNS keys are stored encrypted on our server and are never sent to a kid's phone. Linked phones only use the xAI key through our server, and only while Zero Data Retention is confirmed on for your xAI account: if xAI doesn't confirm ZDR on a reply, or a check (at least every 10 minutes) doesn't confirm it, linked phones stop using Banjo until it does.

Overseas disclosure

xAI, our hosting provider (Cloudflare), NextDNS and Google may store or process information in the United States or other countries. If you order merch, Stripe and Printful may process your order in the United States, the United Kingdom, the European Union or Australia (see Merch orders). We take reasonable steps (such as name redaction and requiring ZDR for kids' Banjo on every phone) to protect it.

New Zealand families

For people in New Zealand we handle personal information under the Privacy Act 2020 and its information privacy principles, as well as the Australian law above. Our privacy officer is Monique Cook (hello@kidsremote.app).
Information a parent gives us about someone else: when a Big Boss adds a child or another grown-up (for example a name, birthday or age band), we collect that person's information from the parent, not from them. It is used only to run the family's app as described on this page, and it goes only to the providers listed in Who else handles data. Please let the other grown-ups in your family know, and point them to this page. Anyone can ask us to see or correct what we hold about them.
Overseas: information may be stored or processed in the United States and other countries by xAI, Cloudflare, NextDNS and Google (and, for merch, Stripe and the printer). Those countries' privacy laws may not give the same protection as New Zealand law. We send only what each feature needs, and kids' Banjo only runs while Zero Data Retention is on.
Children: a parent or guardian sets up every child profile and decides whether Banjo is on for each child. New Zealand children get the same protections described in Children.
Privacy breaches: if a breach is likely to cause serious harm, we will tell the people affected and the Privacy Commissioner as soon as practicable.
Access, correction and complaints: email us first. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).

Access, correction and complaints

Email us to access or correct information, or to complain. We aim to reply within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au). In New Zealand, you can contact the Office of the Privacy Commissioner (privacy.org.nz). US parents can also contact the Federal Trade Commission (ftc.gov).

Changes

We will update this page and the date above when things change, and tell parents in the app before any change that affects children's data.