Privacy Policy

Effective: 3 May 2026 · Last updated: 3 May 2026

This Privacy Policy explains how KidsHost (a brand owned and operated by Lumenix AI) collects, uses and protects personal data of parents who use our service and limited metadata about their children. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Data controller: Lumenix AI ("we", "us", "our"), trading as KidsHost.
Registered in: United Kingdom.
Service area: Richmond and Kingston, London, UK.
Data protection contact: privacy@kidshost.co.uk

2. What KidsHost does

KidsHost is a parent-to-parent coordination service. It helps adult parents arrange in-person playdates between their children, restricted to families that already know each other from the same school, club, or local playground in Richmond or Kingston. KidsHost is not a social network, not a dating service, and does not allow children to register or create accounts.

3. What we collect

From parents (the account holder):

• Mobile phone number (used as account identifier and for WhatsApp messaging)
• First name (display name shown to other parents in the same circle)
• Postcode area or named locality (e.g. "Richmond", "Kingston") — never full postcode
• Affiliation context provided by the parent (e.g. "Park Hill Primary, Year 2") used to match circles
• WhatsApp conversation content with the KidsHost bot
• Opt-in confirmation (timestamp and source)

About children (metadata only on the parent's profile):

• Child's first name (no surname)
• Child's age range (e.g. "5–7")

We do not collect children's surnames, dates of birth, addresses, photos, location data, school class lists, contact details, or any biometric or health data. Children do not have accounts and never interact with KidsHost directly.

4. Why we collect it (purposes)

• To match parents with other parents in their existing real-life circle for playdate coordination.
• To send WhatsApp messages necessary to operate the service (matches, scheduling, reminders, feedback).
• To safeguard the platform against misuse (fraud prevention, blocking, audit logs).
• To respond to support requests and complaints.

We do not use personal data for advertising, profiling, or sale to third parties.

5. Legal basis

• Performance of a contract (UK GDPR Art. 6(1)(b)) — for delivering the playdate coordination service the parent has signed up for.
• Consent (UK GDPR Art. 6(1)(a)) — for sending WhatsApp messages, given by the parent at sign-up and revocable at any time by replying STOP.
• Legitimate interests (UK GDPR Art. 6(1)(f)) — for safeguarding, fraud prevention and service security.

Children's metadata is processed under the parent's authority and consent, in line with the UK ICO Age-Appropriate Design Code.

6. Who we share data with

KidsHost does not sell or rent personal data. Limited sharing occurs only with the following processors, strictly to deliver the service:

• Meta Platforms Ireland Ltd — to deliver WhatsApp messages via the WhatsApp Business Platform.
• Fly.io (Fly Hosting Inc.) — application hosting in the LHR (London) region.
• Twilio Ireland Ltd — for SMS delivery and verification only when WhatsApp is unavailable.

Each processor is bound by a Data Processing Agreement (DPA) and operates under UK GDPR or equivalent transfer safeguards.

7. International transfers

Where data leaves the UK, we rely on adequacy decisions or Standard Contractual Clauses (SCCs) plus appropriate supplementary measures, in line with the UK ICO international data transfer guidance.

8. Retention

• Active parent accounts: retained while the account is in use.
• Inactive accounts (no activity for 12 months): deleted automatically.
• Audit logs: retained for up to 24 months for safeguarding and legal compliance.
• Account deletion on request: completed within 30 days.

9. Your rights

Under UK GDPR you have the right to:

• Access your personal data
• Have inaccurate data corrected
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent at any time

To exercise any of these rights, email privacy@kidshost.co.uk. We will respond within 30 days.

10. Complaints

If you believe we have not handled your data lawfully, you can complain to the UK Information Commissioner's Office (ICO):

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Helpline: 0303 123 1113. Website: ico.org.uk

11. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated to active parents via WhatsApp message before they take effect. The "Last updated" date at the top of this page reflects the most recent version.