Privacy
1. Controller
Kidharbor, Matthias Beurer, Switzerland – hello@kidharbor.app. Address: see legal notice.
2. What this website collects
No tracking cookies, no ad trackers. We use no advertising networks, no social media plugins and no external font or script services. All content is served directly from our own server.
Login cookie in the pilot portal. When you register or sign in as a pilot family in the pilot portal (kidharbor.app/pilot), we set a single, technically necessary session cookie («__Host-kh_pilot»). It only contains a random session identifier, cannot be read by scripts (HttpOnly), is sent only over encrypted connections and only to kidharbor.app (Secure, SameSite=Strict) and expires after 90 days – signing out deletes it immediately. Its sole purpose is to keep you signed in: no analytics, no advertising, no sharing. All other pages of this website set no cookies.
Anonymous audience measurement. To see which pages are read and which downloads are used, we run the open-source software Umami on our own server. It sets no cookies, stores no IP addresses (only a daily-rotating, non-reversible hash) and builds no profiles; the data never leaves our server and is not shared with anyone. Browser «Do Not Track» settings are respected.
Server logs. When you visit the website, the web server processes technically necessary information (IP address, time, page requested, browser type). These logs serve solely for secure operation and troubleshooting and are deleted automatically after a short time.
3. Hosting
The website is operated on servers in Europe. No data is transferred to the USA.
4. Contact by email
If you write to us by email, we use your details solely to answer your enquiry and to handle a possible pilot project. We do not pass them on and delete them as soon as they are no longer needed for this purpose.
5. Your rights (website)
You have the right to access, rectify and delete your personal data. Please contact hello@kidharbor.app.
Privacy policy of the Kidharbor app
This section applies to the Kidharbor Parent App and the Kidharbor child protection on the child's device.
Controller
Kidharbor, Matthias Beurer, Switzerland – hello@kidharbor.app. Address: see legal notice.
What data we process
Account: parent's name and email. From the child's device – depending on the features enabled: app usage times, installed and used apps, location, visited web domains, incoming and outgoing chat messages (for safety checks) and voice notes. By default only usage times are stored; the protection features are enabled per child.
Purposes
Parental guidance and youth protection (time rules, location, tasks) and protection from harmful content and contacts (web and chat protection, SOS emergency call).
Chat and web checks
Messages and visited domains are classified automatically by an AI model of a Swiss provider in a Swiss data centre. Only the assessment is stored (e.g. “bullying flag”), not the chat content. Parents see flags for anomalies, not the full chat history.
Location
The last known location of the child's device is stored and shown to authorised parents. The child sees on the device that Kidharbor is active – Kidharbor is protection, not secret surveillance.
AI models from the USA
For voice output and the parent assistant we use models from the USA during the launch phase – not for checking children's content.
Sharing
Children's data is not shared with third parties. Hosting and AI processing are carried out by processors on our instructions and not for their own purposes.
Parental consent
Setup is done by the parent as legal guardian. The child is informed on the device about the active guidance.
Retention and deletion
Data is stored only as long as needed for the purpose. You can delete your account and all associated data at any time – in the app under Settings → Delete account, or via kidharbor.app/konto-loeschen. Deletion also removes the data of the associated child devices.
Your rights
You have the right to access, rectify and delete. Contact hello@kidharbor.app. The Swiss Data Protection Act (FADP) and the GDPR apply.