Privacy Policy
Last updated: November 4, 2026
This policy explains what personal data the єДитина mobile app and website (the "Service") process, why, and what rights you have. The Service is operated by Nazar Derkach ("we", "us"). Contact: support@ekid.tech.
1. Who the Service is for
The Service is intended for parents and school staff. Children do not use the app and cannot create accounts. A parent enters basic information about their own child so the school can release the child safely.
2. Data we collect
- Account data: first name, last name, email address, password (stored only as a cryptographic hash), role (parent, teacher or both), school, account status.
- Child data entered by a parent: the child's full name, school and class. We do not collect a child's photo, date of birth, address, location or any other information.
- Pickup requests: which child, who requested, which teacher accepted, status, timestamps (request, accepted, "child is ready", "parent has arrived", completed) and an optional rejection reason.
- Device data for notifications: a push-notification token, the platform (Android/iOS) and the teacher's chosen class filter.
- Security data: hashed one-time email codes, consent confirmation, administrative audit records, and technical server logs (such as IP address) used for abuse prevention.
We do not collect precise or approximate location, contacts, photos, microphone or camera data, advertising identifiers, and we do not use advertising or third-party analytics or tracking.
3. How we use data
- to create and secure your account and verify your email;
- to let the school approve accounts and children;
- to organize pickup requests between parents and teachers and show their status;
- to send push notifications about the status of requests and accounts;
- to maintain security, prevent abuse and fix errors.
We do not sell personal data and do not use it for advertising or profiling.
4. Who can see the data
- Teachers and administrators of the same school see the names of parents and children and the pickup requests needed to release children safely. Users never see data of other schools.
- A parent sees only their own children and requests.
5. Service providers (processors)
We use trusted providers to run the Service, each only for its function: cloud hosting and a managed PostgreSQL database (data storage), Google Firebase Cloud Messaging (push notifications), and an email service (confirmation codes). They process data on our instructions and do not use it for their own purposes. Data is transferred over encrypted HTTPS connections.
6. Retention
We keep data while your account exists. When an account is deleted, the account, the children added by that user, related pickup requests and related device tokens are deleted. Server logs are kept for a limited time for security.
7. Your rights
You may request access to your data, correction, deletion, restriction of processing, or withdraw consent at any time. To delete your account and data see Delete account, or write to support@ekid.tech. Depending on where you live, you may also have the right to complain to a data-protection authority (for example, the Ombudsman of Ukraine or an EU supervisory authority). We process data in accordance with applicable law, including the Law of Ukraine "On Personal Data Protection" and, where applicable, the GDPR.
8. Security
We use encrypted connections, hashed passwords, role-based access limited to a school, and administrative audit logging. No system is perfectly secure, but we work to protect your data.
9. Children's privacy
The Service is not directed to children and does not allow children to register. We process a child's name, school and class only because a parent or guardian entered them. A parent may ask us to delete this data at any time.
10. Changes
We may update this policy. The date at the top shows the latest version. Significant changes will be shown in the app or on this page.
11. Contact
Nazar Derkach — support@ekid.tech