Privacy Policy

Effective September 5, 2026. Replaces all earlier versions.

The short version

• Kindergarten Prep and Kindy are run by Curriculums OÜ, a company registered in Estonia. Because we are an EU company, EU data protection law (the GDPR) applies to everything we do with personal data, wherever you live. US laws, including COPPA and state privacy laws, apply on top of that for US families.
• We collect what we need to run the service: your email and account details, what you tell us about your child (first name, age, kindergarten start date, readiness answers, how activities went), and payment status from Stripe. We never see your card number.
• Your child never uses our products. Everything we know about your child comes from you, the parent or guardian, and we use it only to build and adjust your child's curriculum and to write to you about it.
• We do not sell personal data and we do not use children's data for advertising.
• You can ask for a copy of your data, a correction, or deletion at any time by emailing support@kindergarten-prep.com.

1. Who we are

Curriculums OÜ (registry code 12834041), Tobiase tn 13a, Käina alevik, 92101 Hiiumaa vald, Hiiu maakond, Estonia, is the data controller for the personal data described in this policy. We operate kindergarten-prep.com, kindy.kindergarten-prep.com and app.kindergarten-prep.com (together, the "Services"), and the emails we send in connection with them. For any question about this policy or your data, write to support@kindergarten-prep.com.

2. Who the Services are for

The Services are for adults: parents, guardians and educators of children aged roughly 3 to 5. Children do not use Kindy or our websites. Kindy is an app for the parent; the child's activities happen off screen with the parent. We do not knowingly collect personal data directly from anyone under 16. If you believe a child has sent us personal data directly, email us and we will delete it.

3. What we collect

3.1 Information you give us

• Account details. Your email address and a password (stored only as a secure hash by our authentication provider), and your first name if you choose to give it.
• Information about your child. Your child's first name or nickname, age in months, expected kindergarten start date, your answers to the readiness assessment, your one-tap ratings after each activity, activities you log yourself, and any curriculum settings you change. This is the information Kindy needs to place your child by ability and choose the next activity.
• Purchases. When you subscribe to Kindy or buy a printable bundle, payment is taken by Stripe. We receive your payment status, the amount, the date, the last four digits of your card and the card brand. We never receive or store your full card number or security code.
• Messages. Anything you send us by email, through the in-app feedback feature or through a form on our website.
• Printable opt-ins. If you request free printables on a letter activity page, your email address and the page you requested them from.

3.2 Information collected automatically

• Website analytics. On kindergarten-prep.com and the Kindy landing page we use HubSpot and Ahrefs Web Analytics to understand which pages are visited, from where and on what device. This includes IP address, browser and device type, referring page and pages viewed.
• Where you came from. If you arrive through an advert or a link on our own site, we store the campaign tags in the link (utm parameters and, for Google Ads, the click identifier) so we know which page or advert brought you. This is stored once per account.
• App usage. The Kindy app records which activities were shown, done and rated, and when. It stores your session and preferences in your browser so you stay signed in. The app does not use advertising or third-party analytics cookies.

3.3 Information from others

Stripe tells us whether a payment succeeded, failed or was refunded so we can manage your subscription. Kit, our email provider, tells us whether an email was delivered, opened or unsubscribed.

4. Why we use it and on what legal basis

We do not make automated decisions about you that have legal or similarly significant effects. Kindy's engine does choose your child's next activity automatically from your answers and ratings; that is the product working as described, you can override it at any time, and it has no effect beyond which activity appears in your app.

5. Children's information and COPPA

All information about your child is given to us by you, the parent or guardian, for the purpose of building your child's curriculum. In the language of the US Children's Online Privacy Protection Act, we collect information about children only from parents, never from children, and children have no access to the Services. We use children's information only to provide the Services to you and to write to you about your child's readiness. We never use it for advertising, never sell it, and never share it except with the service providers listed in section 6 who process it on our instructions. You can review, correct or delete everything we hold about your child by emailing support@kindergarten-prep.com.

6. Who we share it with

We share personal data only with companies that process it for us, under contracts that restrict what they may do with it, and only as far as needed to run the Services:

• Supabase (database and login) stores account and child data.
• Cloudflare hosts the Kindy app, landing page and API.
• Stripe processes payments and holds card details under its own privacy policy.
• Kit (formerly ConvertKit) sends our readiness and printable emails and stores your email address, your child's first name, age, kindergarten date and readiness summary for that purpose.
• Resend delivers transactional emails.
• HubSpot hosts kindergarten-prep.com, its forms and the contact records they create.
• Google provides web fonts, Google Ads measurement on our marketing pages, and Search Console.
• Ahrefs provides privacy-focused website analytics.

We may also disclose data if the law requires it, to protect the rights or safety of our users, or as part of a sale or reorganisation of the business, in which case this policy continues to apply. We do not sell personal data and we do not share it for cross-context behavioural advertising.

7. Where your data is stored

We are based in Estonia. Several of our providers store data in the United States. Where personal data leaves the European Economic Area, we rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses, together with the providers' security measures.

8. How long we keep it

• Account and child data: for as long as your account exists. If you cancel your subscription, your child's readiness picture and progress stay in your account so you can come back, as we promise in the app. If your account is inactive for 24 months we delete it. You can ask us to delete it sooner at any time.
• Payment records: seven years, as Estonian accounting law requires.
• Email list: until you unsubscribe or ask us to remove you.
• Website analytics: up to 26 months, then deleted or aggregated.
• Support messages: up to three years after the conversation ends.

9. Security

Connections to our Services are encrypted. Passwords are stored as secure hashes. Access to account and child data is limited to the people who need it to run the Services, and card details never touch our systems. No system is perfectly secure; if we ever learn of a breach affecting your data we will tell you and the relevant authorities as the law requires.

10. Your rights

Under the GDPR you have the right to access the personal data we hold about you and your child, to correct it, to have it deleted, to restrict or object to certain processing, to receive it in a portable format, and to withdraw consent at any time without affecting what was done before. If you live in California or another US state with a privacy law, you have equivalent rights to know, correct and delete, and the right not to be discriminated against for using them. We do not sell personal data, so there is nothing to opt out of on that point.

To use any of these rights, email support@kindergarten-prep.com from the address on your account. We will confirm your identity, answer within one month, and never charge for a first request. Deleting your account currently happens by email request; we are building a delete button into the app. You can unsubscribe from marketing emails with the link in any email.

You also have the right to complain to a data protection authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee); you may also complain to the authority where you live.

11. Cookies

kindergarten-prep.com uses cookies for three things: making the site work, measuring how it is used, and measuring whether our adverts on Google brought you here. Non-essential cookies are set only if you accept them in the banner, and you can change your choice from the banner at any time. The Kindy app uses browser storage only to keep you signed in and remember your settings; it sets no analytics or advertising cookies.

12. Changes

When we change this policy we will update the date at the top and, for changes that matter, tell you by email or in the app before they take effect.

13. Contact

Curriculums OÜ, Tobiase tn 13a, Käina alevik, 92101 Hiiumaa vald, Hiiu maakond, Estonia. Email: support@kindergarten-prep.com.