Privacy Policy

At Kidora, we attach great importance to the protection of your personal data. This privacy policy explains what data we collect, how we use it, and what your rights are.

1. Data Controller

The data controller for your personal data is Kidora.

Contact: [email protected]

2. Data Collected

2.1 Account Data

When you create an account on Kidora, we collect:

• Name: Used to personalize your experience
• Email address: Required for login and communications
• Password: Stored securely and encrypted
• Profile picture (optional): If you choose to upload one

2.2 Social Authentication Data

If you log in via Google or Facebook, we receive:

• Your name
• Your email address
• Your profile picture (if available)
• A unique identifier from the service (Google ID or Facebook ID)

We never receive your password from these services.

2.3 Usage Data

To improve your experience, we record:

• Favorite activities: Activities you save
• Completed activities: Activities you mark as completed
• Preferences: Your account settings, such as hiding completed activities

2.4 Newsletter

If you subscribe to our newsletter:

• Your email address is transmitted to Infomaniak Newsletter
• We record your consent and subscription date

2.5 Technical Data

We automatically collect certain technical information:

• IP address (for security and abuse prevention)
• Browser type and operating system
• Pages visited and visit duration
• Referral source (how you found our site)

3. Processing Purposes

We use your personal data to:

• Provide the service: Manage your account, save your favorites and completed activities
• Communication: Send you our newsletter if you have subscribed
• Security: Protect our platform against abuse and fraud
• Legal compliance: Meet our legal obligations
• Service improvement: Analyze usage to improve user experience

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: For the newsletter and non-essential cookies
• Contract performance: For providing the Kidora service
• Legitimate interest: To improve our service and ensure its security
• Legal obligation: To meet our legal obligations

5. Data Sharing

Your personal data is never sold to third parties. We share your data only with:

5.1 Service Providers

• Infomaniak: Hosting of our website and newsletter
• Google: If you use Google OAuth login
• Facebook: If you use Facebook OAuth login
• Matomo: Audience measurement, hosted on our own infrastructure
• PostHog: Interface usage analytics, with servers located in the European Union

6. Data Retention

We retain your personal data as long as necessary:

• Active account: As long as your account is active
• After account deletion: 30 days to allow recovery in case of accidental deletion
• Newsletter: Until you unsubscribe
• Technical data: Maximum 12 months

7. Data Security

We implement appropriate security measures to protect your data:

• Password encryption (bcrypt)
• Secure HTTPS connection
• Secure hosting at Infomaniak (Switzerland)
• Limited access to personal data
• Monitoring and protection against unauthorized access

8. Your Rights

In accordance with Swiss data protection legislation, you have the following rights:

8.1 Right of Access

You can request a copy of all personal data we hold about you.

8.2 Right of Rectification

You can modify your profile information at any time in your dashboard.

8.3 Right to Erasure

You can delete your account at any time via your account settings. This will delete:

• Your profile and personal information
• Your favorite and completed activities
• Your preferences

8.4 Right to Data Portability

You can request to receive your data in a structured, commonly used format.

8.5 Right to Object

You can object to the processing of your data for direct marketing purposes by unsubscribing from our newsletter.

8.6 Exercising Your Rights

To exercise any of these rights, contact us at: [email protected]

We will respond to your request within 30 days.

9. Cookies

Kidora uses cookies to improve your experience:

9.1 Essential Cookies

Necessary for the operation of the site:

• Session: To maintain your login
• CSRF Token: For form security
• Preferences: To remember your choices (language, hiding activities)

9.2 Audience Measurement Cookies

To understand how our site is used and improve its usability, we use audience measurement tools:

• Matomo: Traffic statistics, hosted on our own infrastructure
• PostHog: Interface usage analytics (page views, clicks, navigation paths and heatmaps), with servers located in the European Union. Session video recording is disabled.

This data is used in aggregate form. For visitors who are not logged in, it does not allow us to identify you directly.

9.3 Disabling Cookies

You can disable cookies in your browser settings, but this may affect some site functionality. Most browsers also let you enable the "Do Not Track" option; when enabled, PostHog does not record any usage data.

10. International Transfers

Your data is hosted in Switzerland by Infomaniak. Some data may be transferred outside Switzerland in the following cases:

• Google OAuth authentication (United States)
• Facebook OAuth authentication (United States)

These transfers are subject to appropriate safeguards in compliance with data protection standards.

11. Minors

Kidora is a platform intended to help parents and families find activities for children. The service is not intended for children under 16 years of age. We do not knowingly collect personal data from children without parental consent.

12. Policy Changes

We may modify this privacy policy at any time. In case of significant changes, we will inform you:

• By email if you have an account
• By a notice on our website

The date of the last update is indicated at the top of this page.

13. Contact and Complaints

For any questions regarding this privacy policy or the processing of your data:

Email: [email protected]

If you believe your data protection rights have not been respected, you can file a complaint with the Federal Data Protection and Information Commissioner (FDPIC):

Federal Data Protection and Information Commissioner
Feldeggweg 1
CH-3003 Bern
www.edoeb.admin.ch