Privacy Policy
Last updated 18 August 2026.
KidSight is a tool for you, not for your child. There is nothing in it for a child to use and no way for a child to log in.
So the answers fit your kid, we ask for a first name or nickname and an age. You can also tell us what you would like them to work on. That is the whole ask, and it stays in our database.
Your child’s name never leaves it. Not to the AI that watches the videos, not to Google, not to our analytics, not to anyone. The AI is only ever sent a YouTube link and the video’s title, creator and length.
We use analytics to see which parts of the product get used. It is set to record as little as possible: no session recordings, no automatic click tracking, no heatmaps, and your email is never attached to any of it.
We do not sell anything, we do not run ads, and no creator has ever paid to be in the library.
You can remove a child’s profile at any time, and it is gone for good. To delete your whole account, ask us and we will do it. Nothing expires on its own.
Who we are
KidSight is operated by Mithani Ventures, LLC (“KidSight”, “we”, “us”). We are the data controller for the information described here. You can reach us at hello@kidsight.io.
What we collect
When you create an account
Your email address.
A password, which we store only as a hash and never in readable form. If you sign in with Google instead, we receive what Google passes us: your email address, an account identifier, and usually your full name and profile photo.
When you add a child
A first name or nickname.
Their age.
Optionally, what you would like them to work on.
This is information about your child that you give us. Your child has no account, cannot sign in, and never interacts with KidSight.
When you write to us
Your name, your email address, a phone number if you choose to give one, and whatever you write in your message.
Automatically, while you use KidSight
Which pages and features are used, and when.
Approximate location at country level, device type, browser, operating system and language.
The site you arrived from, and any campaign tags on the link you followed.
We do not store your IP address in our own systems. No table in our database has a column for it, and our product analytics provider is set to discard IP addresses on receipt.
What we never do with your child’s information
Their name never leaves our database. It is not sent to the AI that analyses videos, to Google, to our analytics provider, to our email provider, or to anyone else.
The AI that watches a video receives the video’s public YouTube link, title, creator and length. That is all. Nothing about you and nothing about your child is ever attached to it, and the system that sends it is built so that it cannot be.
We do not build advertising profiles, we do not sell or rent information to anyone, and no creator has ever paid to appear in the library.
Our analytics does receive an anonymous identifier for each child profile and their age band, so we can understand which parts of the library are useful at which ages. It never receives a name, an exact age, or anything you have written.
Why we are allowed to hold it
If you are in the UK or the European Economic Area, the law asks us to name a lawful basis for each use.
To provide what you asked for. Running your account and producing answers suited to your child. This is necessary to perform our agreement with you.
Our legitimate interests. Keeping the service working and secure, preventing abuse, and understanding which parts are used so we can improve them. We use the least identifying information that will do the job.
Your consent, where the law requires it, such as for non-essential cookies. You can withdraw it at any time.
Who else touches it
We use other companies to run KidSight. They may only act on our instructions.
Supabase: our database, accounts and server functions. Receives everything described above.
Vercel: hosting for the app. Receives traffic and technical logs.
Framer: hosting for kidsight.io. Receives website traffic and anything you send through the contact form.
Google Gemini: analyses videos. Receives a YouTube link, title, creator and length, and nothing else.
Google, for YouTube details and thumbnails. Receives video identifiers, and your browser loads thumbnails directly from Google.
PostHog: product analytics. Receives anonymous identifiers, age bands and counts. No names, no email, and IP addresses are discarded.
Google Analytics and Framer Analytics: website analytics for kidsight.io.
Resend: sends account email. Receives your email address and the contents of that email.
Google Fonts: serves the typefaces. Receives your IP address and browser when a page loads.
If you donate, you leave KidSight and go to Ko-fi, who handle that entirely. We send them nothing about you.
Children
KidSight is made for parents and other adults. It is not directed to children. There are no child accounts, no child-facing features, nothing to unlock or collect, and nothing designed to hold a child’s attention.
Information about a child reaches us only because a parent or guardian chose to give it, and only in the form described above.
You can see everything we hold about your child at any time in your account, change it, or remove that child’s profile, which deletes it. If you would like us to delete it for you, write to hello@kidsight.io.
If you believe a child has given us information directly, tell us and we will remove it.
How long we keep it
Nothing expires on a schedule. What you give us stays until you remove it.
Remove a child’s profile and it is deleted immediately.
Delete your account and your profile, every child profile, and the activity tied to them go with it.
Messages you send us are kept while we deal with them.
Two things outlive a deletion, and we would rather say so than claim otherwise. If a message to you ever bounced, or you asked us to stop emailing, we keep that record so we never write to a dead or unwanted address again. It includes your email address, which is the point of it. We also keep anything that no longer identifies anyone: counts and averages, and any report you sent us about a video with everything you wrote removed and your name detached. That report is about the video, not about you.
How we protect it
No service can promise perfect security, and we are not going to. Here is what is actually in place, and what is not.
In transit. Every connection to KidSight is encrypted, and we require it rather than merely offering it. Unencrypted requests are redirected, and browsers are told to refuse them in future.
At rest. Our database provider, Supabase, encrypts stored data with AES-256. That is their control rather than something we built, and we name them so you can read their commitments yourself.
Separation between accounts. The rules deciding who can read what live in the database itself, not only in the app. Every table holding your information carries a rule tying each row to the account that owns it, so one parent cannot reach another parent’s data even if the app were tricked into asking.
Your password. Passwords are stored only as a hash by our authentication provider, never in a form anyone can read. We do not currently offer two-factor authentication. If that matters to you, signing in with Google lets you rely on the protections already on your Google account.
What our database never holds. No table in it has a column for your IP address or your browser, and none of our server code records them. Our hosting providers keep their own access logs as ordinary infrastructure; those sit with them, not with us. The system that analyses a video receives the video and its public details, and nothing about you or your child is ever attached to it.
Who at KidSight can see it. A small number of administrators can read child profiles in order to run and support the service. Changes an administrator makes are recorded. Reads are not, and we would rather tell you that than let you assume otherwise.
If something goes wrong. If we discover that personal information has been exposed, we will tell the people affected and the relevant regulator, as the law requires. We are small and have no polished incident process to point you at. You would hear it from us directly.
Your rights
Wherever you live, you can ask us to:
Give you a copy of what we hold about you.
Correct anything that is wrong.
Delete your account and everything with it.
Stop using your information in a particular way.
Write to hello@kidsight.io. We will reply within 30 days. We will never charge you for this, and we will never make the service worse because you asked.
If you are in the UK or the EEA and you think we have handled this badly, you may complain to your national data protection authority. If you are in California, we do not sell or share personal information as those terms are defined there, and we have not in the past twelve months.
Cookies and similar
We use a small number of cookies and similar storage. Some are necessary, such as keeping you signed in and remembering whether you chose light or dark. Others are analytics, which tell us which parts get used.
You can clear or block them in your browser. Blocking the necessary ones will sign you out.
Do Not Track
Some browsers can send a Do Not Track signal, which asks a site not to follow your activity across the web.
Inside the KidSight app, our product analytics honours it. If your browser sends Do Not Track, it records nothing about you.
On this website, kidsight.io, the analytics we use does not respond to the signal. We would rather tell you that than imply a protection that is not there. You can still block or clear those cookies in your browser.
Other companies that can see you here
When a page loads, your browser fetches a few things straight from other companies rather than from us. Typefaces come from Google Fonts, and video thumbnails come from YouTube. Both mean Google receives your IP address and browser details as the page loads, before you have done anything.
Our website analytics providers, Google Analytics and Framer Analytics, are able to recognise visitors across other sites that also use them.
What does not happen here is worth saying plainly. We do not sell or share your information for advertising. We do not build advertising profiles. There is no Meta pixel, no TikTok pixel, no advertising tag of any kind, and no session recording anywhere in KidSight.
Where your information goes
We and the companies listed above are based in the United States, so if you are outside it your information will be transferred there. Where the law requires safeguards for that transfer, we rely on the standard contractual clauses our providers offer.
Changes
If we change this policy we will update the date at the top. If a change matters to you, we will say so plainly rather than quietly editing the page.
Contact
Mithani Ventures, LLC. Write to us at hello@kidsight.io.