Privacy Policy

Last Updated: 19 September, 2026

Controller: AdaptaIQ Inc., 98 Cuttermill Road, Ste 466, Great Neck, NY 11021, USA

Operating product: Kidaro

1. Who we are and how you can contact us

This Privacy Policy explains how AdaptaIQ Inc. ("AdaptaIQ", "Kidaro", "we", "us" or "our") processes personal data in connection with Kidaro.

Kidaro helps parents understand how their child learns through AI-generated insights, reports and text adaptation features. These features may allow a parent to submit text, documents or other supported content and ask Kidaro to simplify, restructure, summarize, adapt or otherwise transform that content based on selected preferences or features of a child's learning profile.

Children do not create accounts. Parents or legal guardians create and control the account, provide required permissions or consent, and manage related choices.

Email for privacy matters: privacy@adaptaiq.com

If you have questions about this Policy or about how we handle personal data, you can contact us at the email address above.

2. Scope of this Policy

This Policy applies when you use the Kidaro website or related Kidaro services operated by AdaptaIQ, create or use an account, complete Kidaro questionnaires or interactions, use Learning Profile or text adaptation features, upload or submit content for processing, join our newsletter, make a purchase, or contact us about the Service.

It does not apply to:

Third-party websites or apps that may be linked from Kidaro.

Services provided by schools or organizations under separate agreements where those entities act as controller for their own processing.

Kidaro is designed for use by parents and legal guardians. Children may participate in an interview or interactive questions with adult supervision, but they do not create their own Kidaro accounts and we do not offer Kidaro accounts directly to children.

3. Key terms

"Service" means the Kidaro website, applications, Learning Profile tools, text adaptation features and related online services.

"Parent" means a parent or legal guardian who uses Kidaro on behalf of a child.

"Child" means the child whose learning-related information is provided through Kidaro.

"User Content" means information, text, documents, files, materials, notes, responses, preferences or other content submitted to the Service by a user.

"Personal data" means information relating to an identified or identifiable individual.

"Controller" means the entity that decides why and how personal data is processed.

4. Data we collect

The exact personal data we collect depends on how you use Kidaro.

4.1 Parent account and contact details

Name and surname.
Email address.
Password or other login credentials if an account is created.
Communication language and country of residence.
Your relationship to the child.
Any other details you choose to include in messages sent to us.

4.2 Child-related information

To provide Learning Profile features, we may process information about the child, for example:

First name or nickname.
Age, school year and languages spoken.
Daily routines related to sleep, homework and screen time.
Patterns of attention, motivation, emotional regulation and working memory.
Learning preferences and what tends to help or overload the child.
Context about school and home environments.
Parent observations and open-ended descriptions.
Responses provided during child-facing interactions, where enabled with appropriate parental involvement.
Voice recordings, audio input and resulting transcripts where a voice-enabled chat or other voice feature is used.

We may also receive information about learning differences, health, neurodiversity or special educational needs if you choose to share it. We do not require this information for every family.

We do not ask children to provide their own contact details or payment information through Kidaro.

We do not use identifiable information about your child for advertising, remarketing or building advertising profiles.

We do not send marketing communications directly to children.

4.3 Text, documents and other User Content

If you use text adaptation or similar features, we process the text, documents, files or other content that you choose to submit, together with instructions, selected preferences and the resulting outputs.

User Content may contain personal data about you, your child or other people depending on what you choose to submit. Please avoid including personal data that is not necessary for the requested processing and do not submit personal data about another person unless you have a lawful basis or other appropriate authority to do so.

We may process metadata associated with a submission, such as file type, file size, upload time and processing status, where needed to operate, secure or troubleshoot the feature.

4.4 Technical and usage data

Device type, operating system, browser type and version.
IP address and general location derived from IP address, such as city or country.
Referring pages, pages visited, date and time, and time spent on pages.
Interaction events such as clicks, scrolls and form submissions.
Basic error and performance data.
Referral information, advertising campaign identifiers and attribution parameters associated with visits, account registrations, purchases or other conversion events.

We use this data to keep the Service secure, maintain performance, understand usage and improve the user experience.

4.5 Communications and preferences

The content of your messages and our replies.

Support tickets and related diagnostic information.
Newsletter preferences.
Records of marketing consent and opt-out choices.

4.6 Payment and transaction data

Billing name and contact details.
Country, currency and tax-related information where applicable.
Limited payment-card details such as card type and last four digits; full card numbers are handled by our payment provider and are not stored by us.
Transaction identifiers, amounts, dates and status.

4.7 Cookies and similar technologies

We use cookies and similar technologies. Some are strictly necessary. Others, including analytics, session-recording or advertising technologies, are used in accordance with the choices and requirements applicable in your jurisdiction. See our Cookie Policy for details.

5. Why we use data and our legal bases

We process personal data only where we have an applicable legal basis. Under EU and UK data protection laws, relevant bases may include performance of a contract, consent, compliance with legal obligations and legitimate interests.

5.1 Providing the Kidaro Service

Create and manage your access to Kidaro.
Deliver Learning Profile summaries, reports and related features.
Remember progress, preferences and settings.
Provide customer support and respond to requests.
Legal bases: performance of a contract or steps taken at your request before entering into a contract; and legitimate interests where appropriate to provide, maintain and secure an effective Service.

5.2 Learning Profile Summary and child-related insights

Analyze patterns across learning-related areas such as readiness and wellbeing, focus, emotional regulation, motivation, working memory and thinking style.
Generate the Learning Profile Summary and related explanations.
Present practical suggestions to parents.

Some information you choose to share may be special-category data under EU or UK law, for example health-related information. Where explicit consent is required for such processing, we rely on that explicit consent. You may withdraw consent at any time, although this may prevent us from providing features that depend on that information.

5.3 Text adaptation and transformation

When you use text adaptation features, we process User Content to carry out the transformation you request. This may include analyzing, simplifying, restructuring, summarizing, adapting or otherwise transforming submitted content based on your instructions, selected preferences or features of a child's Learning Profile.

The processing may involve automated systems and AI providers acting on our behalf. We use submitted User Content for the purpose of providing, securing and maintaining the requested feature and related support.

Legal bases: performance of a contract or steps taken at your request; legitimate interests where appropriate to operate, secure and troubleshoot the Service; and consent or explicit consent where required for particular categories of personal data.

5.4 Improvement, research and development

We use technical data and, where appropriate, aggregated, anonymized or de-identified information that cannot reasonably be linked back to an individual child to:

Understand how the Service is used and where users may encounter friction.
Improve question wording, flows, usability and reliability.
Test and evaluate new features and AI-based components.
Produce statistics that do not identify individuals.

We do not use identifiable child data or the identifiable contents of User Content to train general-purpose AI models.

Legal basis: legitimate interests in improving and developing Kidaro while protecting user privacy, to the extent applicable. Where consent is required, we will request it.

5.5 Communications and marketing

Send essential service messages such as confirmations, security alerts and important updates.
Inform you about Kidaro features, content or events where permitted.
Send optional newsletters or marketing where you have opted in or another lawful basis applies.

You can opt out of marketing emails at any time. We do not send marketing communications directly to children.

5.6 Security and fraud prevention

Maintain the security and integrity of the Service.
Detect and prevent fraud, abuse or misuse.
Investigate incidents and respond to lawful requests.

Legal bases: legitimate interests in protecting users and our infrastructure, and compliance with legal obligations.

6. Use of cookies and similar technologies

We use strictly necessary, analytics and performance, functional and communication, and advertising and measurement technologies. Advertising and measurement technologies may include Meta Pixel.

Where applicable law requires prior consent, non-essential technologies are not activated unless and until consent is provided. Where prior consent is not required, certain technologies may be enabled by default and can be disabled through Cookie Settings.

We do not use advertising technologies to create advertising profiles about children or to target advertisements to children based on their activity on the Service. See our Cookie Policy for provider-specific information and preference controls.

7. Children's privacy and parental consent

Kidaro is built for parents and legal guardians. Children may take part in an interview or interactive questions, but always under the responsibility of the parent or guardian.

We obtain parental permission or consent where required before processing child-related information through child-facing features.

We do not knowingly allow children to create Kidaro accounts, manage payments or receive marketing communications.

If we learn that child personal data was provided without required parental involvement or permission, we will take appropriate steps, which may include deletion or obtaining the required consent.

Parents or guardians can contact us to exercise applicable rights on behalf of their child.

Where U.S. law requires verifiable parental consent, the consent process must be completed using the verification method presented by Kidaro. A simple statement of consent in this Policy does not replace any verification step required by law.

8. How we use AI and AI transparency

Kidaro uses AI and other automated systems to analyze responses, generate Learning Profile explanations and suggestions, and process text or documents submitted for text adaptation.

Where voice input is used, Kidaro may process audio through automated systems and service providers to recognize speech, create a transcript, interpret the response and provide the requested chat or Learning Profile functionality.

For text adaptation, AI systems may process the content you submit together with relevant instructions, preferences or selected Learning Profile information needed to generate the requested output.

We limit personal data sent to AI providers to what is reasonably necessary for the relevant function and contractually require providers acting on our behalf to process data only for authorized purposes. We do not permit identifiable child data submitted through Kidaro to be used to train general-purpose AI models.

Kidaro outputs are informational and may be inaccurate, incomplete or omit context. Learning Profile outputs are not medical, psychiatric, psychological or educational diagnoses.

Kidaro does not use automated processing to make decisions that produce legal effects concerning a child or similarly significant effects such as admissions, eligibility, disciplinary or comparable formal decisions.

9. How we share personal data

We do not sell personal data for monetary consideration. We disclose personal data only as described below and where we have a lawful basis. Certain advertising-related disclosures may be treated as a "sale", "sharing" or targeted advertising under some U.S. state privacy laws even where no money is exchanged.

9.1 Service providers (processors)

Hosting and cloud infrastructure providers.
Database and storage providers.
AI infrastructure and model hosting providers.
Email and communication tools.
Payment processors.
Analytics and error-monitoring tools.
Customer-support tools.

These providers process personal data for the services they provide to us and are required to protect it in accordance with applicable contractual and legal requirements.

AI and infrastructure providers may receive User Content when necessary to perform a requested text adaptation or other AI-assisted function. We do not authorize them to use identifiable child data submitted through Kidaro to train general-purpose AI models.

Providers supporting voice-enabled features may also process relevant audio or transcripts where necessary for speech recognition, transcription, AI processing or related infrastructure. They are subject to the same applicable contractual and data-protection requirements described above.

9.2 Advertising and measurement providers

We may disclose limited technical, usage, referral, campaign and conversion information to advertising and measurement providers, including Meta, to measure advertising performance and attribute visits, registrations, purchases or other conversion events.

We do not disclose identifiable child data to advertising providers for targeted advertising or the creation of advertising profiles.

9.3 Optional experts and advisors

If you choose an optional feature involving review by a psychologist or similar expert, that expert will be subject to confidentiality obligations and will only access data needed for that review.

9.4 Legal and safety reasons

Comply with applicable law, legal process or lawful requests from public authorities.
Enforce our terms and protect the rights, privacy, safety or property of AdaptaIQ, users or the public.
Detect, prevent or address fraud, security or technical issues.

9.5 Business transfers

If we are involved in a merger, acquisition, financing, restructuring or sale of all or part of our business, personal data may be transferred as part of that transaction subject to applicable law and appropriate safeguards.

9.6 What we do not do with identifiable child data

We do not sell, rent or license identifiable child data to third parties for their independent commercial use.
We do not disclose identifiable child data to advertisers or data brokers for targeted advertising or the creation of advertising profiles.
We do not use identifiable child data to train general-purpose AI models.

Product-improvement uses of child data are limited to information that is aggregated, anonymized or de-identified so that it cannot reasonably be linked back to an individual child, unless another use is specifically disclosed and lawfully authorized.

10. International transfers and hosting

Some providers may process data outside your country. For users in the EEA or UK, where personal data is transferred to a country without an applicable adequacy decision, we use appropriate safeguards where required, such as the European Commission Standard Contractual Clauses and, where relevant, the UK Addendum or International Data Transfer Agreement.

You can contact us for more information about the safeguards used for international transfers.

11. Data retention

We retain personal data only for as long as reasonably necessary for the specific purposes described in this Policy, unless a longer period is required or permitted by law.

Parent account and contact data: while you have an active relationship with Kidaro and typically for up to 24 months afterward for relationship management, records and disputes.

Child-related data and Learning Profile outputs: while you actively use the Service and, by default, for up to 12 months after your last meaningful activity, unless you request earlier deletion or a longer period is required by law.

Voice recordings and audio input: retained only for as long as reasonably necessary to provide the voice-enabled feature, maintain security, troubleshoot issues and meet legal obligations. Where a specific storage or deletion period applies to audio, it will be communicated in the Service. Transcripts or information derived from voice input may be retained under the retention period applicable to the related chat or Learning Profile data.

Text adaptation User Content and outputs: retained only for as long as reasonably necessary to provide the feature, allow access to saved outputs where offered, maintain security, troubleshoot issues and meet legal obligations. Where the product provides a specific deletion or storage period, that period will be communicated in the Service. You may request deletion subject to applicable exceptions.

Payment and transaction records: for the period required by tax, accounting and financial rules.

Technical logs and security records: typically up to 12 months unless longer retention is reasonably necessary for security investigations or legal requirements.

Consent records: for as long as reasonably necessary to demonstrate and manage the consent and meet legal requirements.

We maintain retention and deletion practices for child personal data and do not retain it indefinitely. When data is no longer needed and we are not required to keep it, we delete it or anonymize it.

12. Your rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection or portability of personal data. Where processing is based on consent, you may withdraw consent at any time.

Parents or legal guardians may exercise applicable rights on behalf of their child. Contact privacy@adaptaiq.com. We may need to verify your identity and relationship to the child.

If you live in the EEA or UK, you may also lodge a complaint with your local data protection authority.

12.1 U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights, subject to applicable thresholds, exceptions and verification requirements, including rights to access, correct, delete or obtain a portable copy of personal data and to opt out of certain targeted advertising or disclosures that applicable law defines as a sale or sharing.

We do not sell personal data for monetary consideration. Certain advertising and measurement technologies, including Meta Pixel, may be treated as targeted advertising, "sharing" or a "sale" under some state laws.

You can disable advertising technologies through Cookie Settings and may contact privacy@adaptaiq.com to exercise applicable rights.

We do not sell or share identifiable child data for targeted advertising or cross-context behavioral advertising and do not use identifiable child data to create advertising profiles.

13. Security

We use technical and organizational measures designed to protect personal data, including appropriate access controls, encryption, backups and monitoring. No security measure can eliminate all risk.

If a personal-data breach requires notification under applicable law, we will provide the required notice.

14. Third-party links

Kidaro may link to external websites or services. Their privacy practices are independent of ours.

15. Changes to this Policy

We may update this Policy from time to time. If changes are material, we will provide notice as required by applicable law.

If we materially change how identifiable child data is collected, used or disclosed, we will provide advance notice and obtain any consent required by applicable law before applying the change.

16. How to contact us

Email: privacy@adaptaiq.com

Post: AdaptaIQ Inc., 98 Cuttermill Road, Ste 466, Great Neck, NY 11021, USA