Clear purposes. Relevant information.
Our notice explains what we collect for enrollment, learning, care, communication and billing, who can see it and how to contact us. A child-friendly explanation helps families talk about privacy together.
The Kids Club Trust CenterCare for children.
Care for children.
Care for their information.
Family life belongs with the people you choose. Here’s how we protect our community’s information, respect your choices and keep improving.
Reviewed October 2026 · Website & community app
Philippine Data Privacy ActPrivacy safeguards · RA 10173
Privacy, built into
everyday care.
Our privacy program is guided by the Philippine Data Privacy Act of 2012. These are the safeguards built into our website and app to support its principles of transparency, legitimate purpose and proportionality.
Read the full privacy notice →Choices recorded with care.
Guardians confirm education and care information from their own accounts. Photo choices are separate, and public-photo permission is optional. Confirmations retain the terms and choices accepted.
Access that follows responsibility.
Parents see their linked children; teachers see children assigned to them. Private files require access checks. Expiring login codes, protected connections and activity histories support secure use.
A way to be heard.
Families can submit and track privacy requests in the app or email the team. Authorized admins review requests and record responses. Security concerns have a dedicated reporting route.
This Kids Club badge describes our privacy safeguards; it is not an NPC-issued seal or an independent certification.
Practical safeguards
Designed around your family.
Simple protections that support everyday life at Kids Club.
Private family access
Approved accounts and role checks control access. Parents see their linked children’s records; teachers see the children assigned to them. School administrators oversee the service.
Meaningful choices
Parents make separate private and public photo choices. Public-photo permission is optional. You can review your child’s information and ask us to correct or remove information.
Protected connections
HTTPS protects information in transit. Private app pages are not publicly indexed, uploaded photos require access checks, and login codes expire after a short time.
A closer lookClear answers.
Clear answers.
No fine-print promises.
From a child’s care form to a family conversation, access follows the people who need it. Here’s how that works in practice.
Full privacy information →Children, photos & family conversations
Each child’s conversation and album follow the approved participants. Parents do not receive access to another family’s private care records. School admins can oversee conversations to support the community.
New photos in a child’s conversation require a current submitted private-photo permission. When a saved care form changes that choice to “No”, further sending is blocked and existing photos in that child’s album stop being available to ordinary participants. Admins retain oversight for review and removal.
Staff must confirm permission for everyone identifiable before sharing a regular album. The app does not identify faces automatically. Please tell us about withdrawals affecting group albums, public posts or copies already downloaded; those need human follow-up.
Uploaded gallery, chat and new profile photos have embedded image metadata removed. No AI service analyzes family conversations in the current messaging feature.
Login, permissions & accountability
Accounts are approved by Kids Club. Email login uses short-lived codes, request limits and verified membership. Access checks also run when a private file is requested.
Changing access, changing a login email or downloading bulk records requires a recently confirmed login. Users can review their browsers and end other sessions. Role or login-email changes revoke existing access.
Activity and change histories support review. App users cannot edit or delete those histories. Infrastructure administrators and providers still have privileged responsibilities.
Email codes are not multi-factor authentication. We ask users to protect their email accounts and devices; additional app MFA and independent security testing remain review items.
Recovery copies & retention
The app has nightly backups with verification and a retention policy of 30 daily and 12 monthly recovery points. These include operational records and uploaded files; active login sessions and login codes are excluded.
Source-code archives are kept for releases. The public website’s source archive does not back up its enquiry database.
Deleted or corrected records can remain in earlier recovery copies until those copies expire. Our detailed retention schedule and restoration rehearsal require owner review. Requests to delete records are assessed against educational, financial and other applicable recordkeeping duties.
Service providers & international processing
We use ChatGPT Sites and Cloudflare for hosting and storage, Resend for transactional emails, and the team’s email providers for correspondence. Cloud services may process information outside the Philippines.
Enquiry emails contain your full enquiry. Team-mailbox forwarding creates copies with designated owners’ email providers. App-message notifications contain a generic update and an app link rather than the conversation text.
Provider contracts, transfer safeguards and retention responsibilities are part of our ongoing privacy review. We do not claim that all information is stored in the Philippines. Euka and other independently accessed services have their own privacy notices.
You have a voiceYour information.
Your information.
Your questions.
Ask for access, a correction, portability, deletion, consent withdrawal or a review of how information is used. We may need to confirm your identity and authority for a child, and explain any legal limits.
In the app: Your account → Privacy requests. Email is available even if you don’t have app access. Please don’t attach identity or medical documents unless we agree a suitable way to share them.
Something doesn’t look right?
Report a vulnerability Tell us. We’ll take it seriously.
Report a privacy concern or suspected security issue to team@kidsclub.ph. Share a short description and the page involved. Please don’t send passwords, login codes or another family’s information.
We assess incidents, record decisions and coordinate any required notifications. Researchers can use our vulnerability disclosure program to report an issue, review the research guidelines and provide contact details.