KidProsper Privacy Rights & Regulatory Compliance Statement

Version: 1.0

Effective Date: July 21, 2026

Last Updated: July 21, 2026

Status: APPROVED FOR LEGAL REVIEW

Owner: KidProsper Compliance Engine (KCE)

Introduction

KidProsper is an AI-powered Child Intelligence Operating System designed exclusively for parents and legal guardians. Because our platform processes sensitive developmental observations and behavioral parameters regarding children, we adhere to the highest global standards of privacy-by-design, data minimization, and regulatory compliance.

This statement acts as the master cross-reference document detailing how KidProsper satisfies the major international privacy acts and guarantees your statutory rights.

Part I: Global Regulatory Alignment Matrix

KidProsper operates on a strictest-common-denominator compliance model, ensuring that our technical architecture and policies satisfy or exceed the mandates of the world's leading data protection regimes:

Part II: Universal Data Subject Rights

Regardless of where you reside, KidProsper empowers parents with complete control over their family’s data portfolio. Through the KidProsper Parental Dashboard, you can exercise the following rights:

1. The Right to Access & Transparency

You have the right to request a complete summary of the personal information and child developmental parameters stored under your account, along with the identities of any essential infrastructure providers with whom data is shared.

2. The Right to Correction (Rectification)

If your child’s profile details, assessment responses, or account parameters are inaccurate or out of date, you can directly update them in-app or request corrections through support.

3. The Right to Erasure (The Right to be Forgotten)

You may request the permanent deletion of a child profile or your entire parent account at any time.

• The 30-Day Soft Delete: Deletion requests initiate a secure 30-day grace period to prevent accidental loss.

• Hard Purge: Following the 30 days, KCE executes an automated Hard Purge, permanently removing active child data, assessments, Growth Blueprints, KP Scores, and AI chat histories. (Note: Certain legal and audit logs are retained for up to 7 years solely for regulatory defense).

4. The Right to Data Portability

You can export your complete family data portfolio—including profiles, assessment histories, KP Scores, Growth Blueprints, activities, habits, and AI conversation archives—in standard, machine-readable formats (PDF and JSON) for your personal records or to share with qualified professionals.

5. The Right to Withdraw Consent

You may toggle off optional consents (Marketing, Research, Analytics) at any time in your settings without losing access to the platform. Withdrawing core consents (Child Data Processing, Psychometric, or AI usage) requires the deletion of the associated child profile.

Part III: Special Protections for Children's Data

Because modern global laws impose strict limitations on how minors' data is handled, KidProsper enforces the following structural rules:

• No Child Accounts: Children are legally and technically prohibited from registering accounts or logging into KidProsper. All data is managed entirely by the verified parent.

• Absolute Ban on Behavioral Advertising: KidProsper does not track children across third-party websites or applications, and never serves behavioral, targeted, or programmatic advertisements to minors.

• No Public Profiling: Child data is processed exclusively within your private family dashboard. There are no public leaderboards, searchable profiles, or peer-to-peer sharing features.

• AI Model Isolation: Data submitted regarding your child is never used to train publicly available or third-party foundational artificial intelligence models.

Part IV: International Data Transfers

KidProsper may process information in countries outside your country of residence (including secure cloud servers hosted in the United States or other global regions). Where required by applicable law, we implement appropriate safeguards (such as standard contractual clauses and encryption standards) to protect international transfers of personal information.

Part V: AI Transparency & Explainability

KidProsper utilizes artificial intelligence to assist parents in understanding developmental tendencies. Where feasible, KidProsper may provide explanations regarding the factors contributing to recommendations, including assessment responses, developmental parameters, activities, habits, and historical trends. This maps directly to the transparency requirements of the EU AI Act and KIE Explainability.

Part VI: Complaints to Regulatory Authorities

If you believe your privacy rights have been violated or wish to escalate a compliance concern, you have the statutory right to submit complaints to your local data protection supervisory authority, including:

• EU Supervisory Authorities (Member State data protection bodies)

• UK Information Commissioner's Office (ICO)

• Indian Data Protection Board (DPBI)

• US State Regulators (e.g., California Privacy Protection Agency)

• Office of the Privacy Commissioner of Canada

Part VII: Annual Compliance Reviews

KidProsper periodically reviews its privacy, security, and child safety controls (at least annually) to maintain alignment with evolving laws, platform requirements, and industry best practices.

Part VIII: Exercising Your Rights & Global Support

To submit a data access request, exercise your privacy rights, or report a compliance concern, you can reach our privacy team directly:

• In-App Portal: Navigate to Settings > Privacy Rights in the KidProsper mobile application.

• Email: privacy@kidprosper.com

• Grievance Officer (India): In compliance with the Digital Personal Data Protection Act (DPDPA), our designated Grievance Officer can be reached via grievance@kidprosper.com.