Privacy Policy

Effective date: July 14, 2026

KidTech LLC (“KidTech”, “we”, “our”, or “us”) builds family and kids’ apps — including Burrow, Flashby, Toofy, and Bough & Spur — and operates kidtechusa.com. This Privacy Policy explains what we collect across our apps and website, how we use it, and how we protect it. Some details depend on which app or service you use.

Information we collect

• Account information — the email and name you provide when you create an account. Passwords are stored only as a secure one-way hash, never in plain text.
• Financial account data (via Plaid) — certain apps, such as Burrow, let you connect a bank account. For those apps, we use Plaid Inc. to retrieve your account details, balances, and transaction history. We never see or store your bank login credentials; those are handled entirely by Plaid.
• Children’s information — our apps are built for families. A parent or guardian may create profiles for their children (name or nickname, age, avatar, and in-app activity). These profiles are created and controlled by the parent. We do not knowingly collect information directly from children.
• Newsletter — if you subscribe to our newsletter, we collect your name and email address.
• On-device data — some settings are stored only on your device and are never transmitted to or stored on our servers.

How we use your information

We use your information solely to provide our apps’ and website’s features, and — if you subscribe — to send our newsletter and related updates. We do not sell, rent, or share your personal or financial information with third parties, and we do not share it for advertising.

Plaid

For apps that let you connect financial accounts (such as Burrow), we use Plaid to make that connection. Your use of Plaid is also subject to Plaid’s End User Privacy Policy. You can revoke Plaid’s access at any time by disconnecting the account in the app.

How we protect your information

• In transit — all data is transmitted over encrypted connections (TLS 1.2 or better).
• At rest — for apps that connect financial accounts, the credentials that authorize access to your bank data are encrypted with AES-256-GCM using keys held only on our servers; the underlying databases and backups are stored on encrypted infrastructure.
• Access controls — access to your data is restricted by role (parent vs. child) and scoped so one account can never access another’s data. Administrative access to production systems is limited and protected by multi-factor authentication.

Children’s privacy

Our apps are designed for families. Child profiles are created and managed by a parent or guardian who consents to and controls that information. We do not knowingly collect personal information directly from children under 13 without verifiable parental involvement. A parent may review or delete their child’s information at any time.

Data retention and deletion

We keep your data only as long as your account is active. When you disconnect a financial account, we revoke access at Plaid and delete the associated account and transaction data. When you delete your account, we delete its associated data. You can unsubscribe from the newsletter at any time via the link in every email. You may request deletion at any time by contacting us.

Your choices

You can disconnect a linked financial account (in apps that support it), unsubscribe from the newsletter, delete your account and associated data, or contact us with any privacy question or request.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and reflected in the effective date above.

Contact us

For privacy inquiries, contact privacy@kidtechusa.com. For general support, contact Support@kidtechusa.com.