Privacy Policy

Introduction

KidMap helps parents and guardians find children's playgrounds, save the ones they like, and keep their own record of visits. This privacy policy explains what data the app processes, on what legal basis, who it is shared with, and what rights you have.

Data controller: MB „Finansų dirbtuvės“, Baltupio g. 65A, LT-08322 Vilnius. You can reach us at appkidmap@gmail.com.

In short

Your account, favorite playgrounds, visits, badges, and points are stored on your device. If you use "Sign in with Apple", a copy is also kept in your own iCloud (the CloudKit private database) so that it comes back on another device or after reinstalling the app; we cannot see that copy. Guest data never leaves the device.

What you create for others — playgrounds you add, photos, equipment tags, reviews, and problem reports — is sent to KidMap's shared database in Apple iCloud (CloudKit). Until it is approved, only you and the moderators can see it; once approved, it is visible to all KidMap users. Reviews, photos and equipment tags are approved automatically; new playgrounds are approved by a moderator (see the terms of use). The only things that leave your device are listed under "What leaves your device".

What data we process and on what legal basis

• Location – used to show your position on the map and sort the nearest playgrounds. Collected only while the app is in use and only with your permission (GDPR Art. 6(1)(a) – consent). Your location is processed on the device and is not sent to anyone.
• Photos – if you add a photo to a playground, the camera or photo library is used with your permission. Before it is sent, the photo is downscaled and any faces detected in it are automatically blurred on your device. The photo is published automatically (faces are blurred once more first) and shown to all users; an inappropriate photo can be reported and is removed by a moderator.
• Account data – the display name you choose and, if you use "Sign in with Apple", the identifier associated with it. That identifier is stored in the device Keychain.
• Content you create – playgrounds you add, equipment tags, reviews, ratings, and reports, together with a random KidMap user identifier and (on reviews) the display name you chose. Processed to perform our agreement with you (Art. 6(1)(b)), so that the content can be published to other parents.
• Purchase information – the status of your Premium subscription or one-time purchase, obtained from Apple StoreKit. The app never sees or stores your payment card details.
• Technical advertising data – when ads are shown, Google receives your device's IP address and general device information and, if you allow tracking, Apple's advertising identifier (IDFA) (see "Advertising and consent").
• Moderation data – when you report content, you give a reason, an optional comment and the identifier of that content; your KidMap identifier is attached so that abuse can be spotted. If a moderator suspends an account, we keep its KidMap identifier and its anonymous CloudKit user identifier. For each author, two numbers are kept against the anonymous CloudKit identifier — how many of their submissions were approved and how many rejected; they decide whether the author is trusted (see the terms of use). The list of authors you hide and the notices about moderation decisions stay on your device only. Processed on the basis of legitimate interest and legal obligation (Art. 6(1)(f) and (c)) — to protect users and to comply with the Digital Services Act.

What leaves your device

• Your personal data, if you use "Sign in with Apple" – favorites, visits, badges, points, display name, and profile picture – to your own iCloud (the CloudKit private database). Only your iCloud account can read it; we have no access to it. Processed to perform our agreement with you (Art. 6(1)(b)), so that your account works on all your devices.
• Content you submit – to KidMap's shared database in Apple iCloud (the CloudKit public database). Submitting requires being signed in to iCloud on the device; CloudKit does not give us your Apple ID, name, or email — only an anonymous user identifier specific to this app. To show other users' playgrounds on the map, the app downloads approved content from the same database.
• Ad requests to Google AdMob – only if you have not purchased Premium, and only according to your consent choice.
• A Google Places request for a place photo – only the playground's own coordinates from the KidMap dataset are sent. Your location, your account, and anything you have created in KidMap are never sent with this request.
• Playground photos from open data sources – some playgrounds have photos hosted on municipal servers (for example the Vilnius city GIS at gis.vplanas.lt) or on Wikimedia Commons (commons.wikimedia.org). When you open such a playground, the photo is downloaded directly from that server, so the operator of that server sees your IP address and the time of the request, exactly as when you open any web page.
• Apple services – "Sign in with Apple", the Apple Maps map and Look Around imagery, and StoreKit purchases operate through Apple's servers under Apple's privacy policy.

Advertising and consent

The free version shows banner ads through Google AdMob. In the European Economic Area, the United Kingdom, and Switzerland we ask for your consent through a Google User Messaging Platform (UMP) consent form before ads are shown, and you can change your choice at any time in that same form. If you do not give consent, Google may show only limited ads (without using cookies or other local storage for advertising) or no ads at all.

The app also asks once for Apple's App Tracking Transparency permission. Only if you allow it does Google AdMob receive Apple's advertising identifier (IDFA), which it may use to choose more relevant ads and to measure their performance, including across other companies' apps and websites. If you do not allow it, the IDFA is not shared with anyone and ads are still shown. This processing is based on your consent (GDPR Art. 6(1)(a)). Google uses the IDFA as an independent controller; how Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites. You can change your choice at any time in Settings → Privacy & Security → Tracking. KidMap itself does not track you across other apps and does not sell your data to advertisers. With Premium, no ads are shown and no ad requests are sent.

Where data is stored and for how long

Personal data (your account, favorites, visits, badges, points) is stored on your device and, if you use "Sign in with Apple", in your iCloud as well. When you delete your account (Profile → Delete Account), it is deleted both on the device and in iCloud (if you are offline at the time, as soon as you are back online). Removing the app keeps the iCloud copy so that you can restore your account; guest data is deleted together with the app.

Shared content is stored in an Apple iCloud (CloudKit) database that Apple operates on our behalf. A submission awaiting review is kept until a moderator approves or rejects it; rejected submissions are deleted. Approved content is kept for as long as the playground information is relevant, or until we remove it following a report or your request. Where content is rejected or removed, only a technical marker with the reason for the decision remains — without the content itself and without its author.

Reports about content are kept until a moderator has dealt with them, and then deleted. A suspension record is kept until the suspension is lifted. The counts of approved and rejected submissions are deleted together with the account. The moderators' action log (which moderator, what action, on which content or playground identifier, and when) is kept for as long as the service runs, so that we can account for moderation decisions; it holds neither content nor data about content authors.

Third parties and transfers outside the EEA

We use the following third-party services: Apple (iCloud / CloudKit for storing shared content, Sign in with Apple, Apple Maps and Look Around, StoreKit purchases), Google AdMob and the Google User Messaging Platform (ads and consent management), Google Places (fallback place photos), and the open data servers that playground photos are loaded from. These services process data according to their own privacy policies.

Google and Apple may process data outside the European Economic Area, including in the United States. Such transfers rely on the European Commission's adequacy decision (EU–U.S. Data Privacy Framework) and/or Standard Contractual Clauses.

Google Privacy Policy: https://policies.google.com/privacy
Apple Privacy Policy: https://www.apple.com/legal/privacy/

Children's privacy

KidMap is intended for parents and guardians, not directly for children, and it is not published in the Kids category. We do not knowingly collect personal data from children under 16. We never ask for or encourage entering a child's name, age, or photo. If you believe we have inadvertently collected a child's data, please contact us and we will remove it promptly.

Data security

On the device, data is stored inside the app's sandbox, which is protected by the device operating system and your screen lock. The Sign in with Apple identifier is stored in the Keychain. We recommend enabling a device passcode or biometric unlock.

In the shared database, access is enforced by Apple's server: a submission awaiting review can be read only by its author and the moderators, and only moderators can create or change public content. Data is transferred over an encrypted connection.

Your rights

You have the right to access, rectify, erase, restrict, or object to the processing of your data, the right to data portability, and the right to withdraw consent at any time (which does not affect processing carried out before the withdrawal).

You exercise these rights in the app: you can review and edit your profile at any time, withdraw a photo that has not been approved yet, and delete your whole account from Profile → Delete Account. Once deleted, your account cannot be recovered.

When you delete your account, the playgrounds, photos, and equipment tags you added are not deleted — they are factual information about playgrounds that helps other parents — but your KidMap identifier is removed from them, and within 30 days the author name on your reviews is changed to "Anonymous user". Submissions not yet reviewed stay in the moderation queue without your KidMap identifier; until they are dealt with, Apple's CloudKit still associates them with an anonymous, app-specific iCloud user identifier that only Apple and our moderators can see — it disappears once the submission is approved or rejected. If you would like us to remove specific content of yours, email us.

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with a supervisory authority. In Lithuania this is the State Data Protection Inspectorate (https://vdai.lrv.lt); elsewhere in the EU, the authority where you live.

Changes

We may update this privacy policy from time to time. We will notify you in the app of any significant change before it takes effect, and the date of the last update is always shown at the bottom of this document.

Contact

For privacy questions and requests concerning your rights, email: appkidmap@gmail.com

This website (getkidmap.com)

This section covers the website getkidmap.com; the sections above cover the app. Data controller: MB „Finansų dirbtuvės“, company code 304694468, Baltupio g. 65A, LT-08322 Vilnius, Lithuania, appkidmap@gmail.com.

Server logs. When you open a page, the server receives your IP address, the page requested, the time and your browser's user agent. This is needed to deliver the page and keep the site secure (GDPR Art. 6(1)(f), legitimate interest). The site is hosted by UAB „Interneto vizija“ in Lithuania, which processes these logs on our behalf and keeps them for a limited time for operation and security.

Contact form. If you write to us, we receive your email address, your name if you give it, and your message, and use them only to reply (Art. 6(1)(b) and (f)). The message is delivered to our Gmail mailbox, provided by Google Ireland Limited. We keep correspondence as long as needed to deal with your request and delete it no later than 24 months after the last message. The form stores nothing on the web server; to prevent abuse it keeps only a one-way hash of your IP address, for one hour.

Cookies and analytics. The site sets no cookies unless you accept analytics. If you press "Accept", we use Google Analytics 4 (Google Ireland Limited) to count visits and see which pages are useful (Art. 6(1)(a), consent). Google Analytics sets the cookies _ga and _ga_<ID>, kept for up to 2 years, and Google may also process data in the United States under the EU-US Data Privacy Framework. We do not use Google Analytics for advertising. You can withdraw consent at any time with "Cookie settings" at the bottom of every page; if you press "Reject", no analytics cookie is set. Your choice itself is kept in your browser (localStorage) for 6 months.

Language. If you open the home page and your device's time zone is in Lithuania or your browser language is Lithuanian, we show the Lithuanian version. This is worked out in your browser and sent nowhere. If you pick a language yourself, that choice is remembered in your browser (localStorage).

Other resources. Fonts and every other resource are served from getkidmap.com itself. Links to Instagram, TikTok and Facebook are plain links: those services receive nothing until you follow them.

Your rights are the same as described under your rights above, and you can complain to the State Data Protection Inspectorate (vdai.lrv.lt).