Kiddos Quest — Privacy policy.

Effective Date: July 23, 2026 Last Updated: October 11, 2026

Kiddos Quest is a privacy-first, parent-led camera quest app developed and operated by Kiddos LLC ("Kiddos," "we," "us," or "our"). It lets families with children turn real-world objects, colors, and visual clues into adventures with on-device camera analysis.

This Privacy Policy explains how information is handled when a family uses Kiddos Quest. The short version is:

• no Kiddos account or sign-in is required;
• camera images are processed on the device and are not saved or uploaded;
• an on-device face-presence safety check rejects frames containing a detected face; neither the frame nor the result is saved or uploaded;
• temporary device-motion signals separate moving camera glimpses from stationary clue verification and show a pause during fast movement; neither motion samples nor camera images are saved or uploaded;
• quest progress, Reward Gallery unlocks, and settings are stored locally, subject to Apple's backup and restoration behavior;
• when New Finds Each Session is enabled, a small non-image find signature is kept only in memory during the current app session so the app can try not to accept the same object twice for the same color;
• there are no ads, third-party analytics SDKs, or cross-app tracking;
• purchases and automatic recognition of Kiddos+ access across participating apps use Apple services; and
• a parent may contact us directly for support, in which case we receive what the parent chooses to send.

1. Scope

This Privacy Policy applies to the Kiddos Quest iPhone and iPad application, its parent-facing settings, and direct communications with Kiddos about the app.

The general gameplay descriptions concern release builds. The separately labeled internal development section explains the additional diagnostics available only to testers in development builds. Neither version is a remote child-monitoring or environmental-safety service. An adult must actively play alongside the child and continuously supervise the actual surroundings, as required by the Terms of Use.

It does not govern Apple, websites, social networks, email providers, or other third-party services that a parent chooses to open. Those services have their own privacy practices.

2. Information Handled By Kiddos Quest

Camera Frames

When a camera quest is active, Kiddos Quest uses the device camera to look for an app-selected object, color, or visual property inside the on-screen target frame. Camera frames are analyzed in memory on the device. Depending on the active clue, a stationary target-frame region may produce transient object labels, broad color families, luminance, significant-color counts, contours, or a small low-detail visual fingerprint used only to compare two intentional finds during the current session. To help select only future, unseen story clues while the device is still, the app may also analyze one full-frame context pass plus one rotating overlapping crop no faster than every 0.75 seconds. While the camera is moving, it may analyze the full frame plus one rotating overlapping crop no faster than every half second and only after exposure and visual-detail checks. Unrestricted classifier results are projected through the app's reviewed story-object catalog before the app retains up to 24 stationary or eight lower-confidence moving concepts. These additional regions provide transient context only. They cannot complete a clue, include printed-text or contour analysis, retain a visual fingerprint, or count as proof that a requested object was found. Only stationary evidence inside the current successful-search window may later be consolidated as intentional context.

Before object classification, Apple's on-device Vision face-detection request checks whether a face is present anywhere in the frame. If it detects one, Kiddos Quest rejects that frame from matching and shows a red point-away cue. This is face-presence detection only: the app does not identify a person, compare faces, create a face template, or infer identity, age, or emotion. The camera frame and face observation remain transient in memory and are not saved or transmitted.

Kiddos Quest does not:

• save photos or videos to the device photo library;
• upload camera frames to Kiddos or a cloud recognition service;
• use camera frames for advertising, profiling, or identity recognition;
• identify or recognize a person, compare faces, or create a face template; or
• keep raw camera labels, pixels, crops, photos, or reconstructable visual measurements after the current camera session ends.

On supported iOS 27 devices with Apple Intelligence enabled and its on-device image capability available, Story Adventures also use one recent, resized, stationary camera image after a verified find to suggest later approved object clues. This scene assistance is enabled by default. The app checks for faces and human bodies before admitting that image; uncertain or failed human checks reject it. The model runs on the device, with no cloud fallback, and is instructed not to transcribe text or describe people, identity, sensitive traits, precise locations, or safety. Its output is untrusted: only names matching the reviewed prompt catalog or their grammatical forms may become temporary candidates, and the normal clue verifier still decides whether a find succeeds. The model does not author child-facing dialogue or decide whether an area is safe.

Scene images and model descriptions are not saved, uploaded, or written to release logs. At most 32 reviewed catalog identifiers remain in memory, with bounded weights that expire after three minutes or more than four later successful captures. A completed hint requires a later successful capture before use. A later human detection rejects new imagery and cancels pending inference, while already completed catalog identifiers may remain within that original limit. Quest completion, exit, backgrounding, camera errors, memory pressure, and model timeout clear the temporary hints. A previously admitted still may finish during ordinary movement or a story pause; moving frames cannot enter the model. On iOS 26, unsupported devices, unavailable models, excessive heat, or failed model output, the existing on-device clue planner continues. Practice sequences remain deterministic and do not use scene-based clue planning.

For an unresolved object or exact-color clue in either Story Adventures or Practice, supported devices may also ask the same on-device model whether the current target-frame image contains the requested object or a substantial patch of the requested color. Recognizable toys and miniatures may count for object clues; the model must respect any image-or-toy-only clue restriction. For color-only clues, multicolored objects and printed illustrations may count even when their center is another color. This second opinion runs less often than the ordinary camera classifier and shares its single model-request slot with scene assistance. It uses only a stationary image admitted through the face and body checks, does not generate dialogue or transcribe text, and has no cloud fallback. A positive answer still passes the normal clue timing, movement and hold-to-confirm checks. The answer is discarded if the clue or view changes, a human check rejects the frame, the app pauses, or the result expires. Temporary image-comparison values and the model answer stay in memory only; they are not saved, logged in release builds, uploaded, or added as classifier observations. Recognition can still miss an object or accept an incorrect match. Colors retain their fast on-device pixel detector alongside this second opinion; printed characters keep their dedicated on-device detector.

Camera access is requested only when a camera quest begins. If camera access is denied, camera quests cannot run unless the adult later grants permission in iOS Settings.

Device Motion Safety Signal

During an active camera quest, Kiddos Quest may use the device's accelerometer and gyroscope through Apple's Core Motion framework to distinguish ordinary camera movement from stationary aiming and to detect sustained fast device movement. Ordinary movement blocks clue matching and completion while allowing only the sparse tentative camera context described above. If the device appears to be moving too quickly, the app also asks the child to stop before looking at the screen.

Motion samples are processed transiently on the device. They are not saved, added to quest history, used to infer location or fitness activity, used for advertising or profiling, or transmitted off the device by the app. If motion sensing is unavailable or restricted, the app continues without this additional signal. The feature may miss unsafe movement or pause during safe movement and is not a substitute for adult supervision.

Local Quest Progress And Settings

Kiddos Quest stores limited information locally on the device so the app can show progress, award points, remember preferences, rotate finds, and avoid unnecessary repetition. This may include:

• app-authored story, practice-pack, and target identifiers;
• whether a target was found or skipped;
• find counts, attempt dates, durations, best times, playlist cycles, scores, and Reward Gallery portrait unlocks;
• which unlocked Reward Gallery portraits have been viewed, so the app can show a local new-portrait indicator;
• sound, music, age-audience, per-quest parent-gate, onboarding, terms-acceptance, rating-prompt, and free-access preferences; and
• pending app-navigation or Siri shortcut commands.

To provide the three free play days, the app keeps at most three local calendar-date values, with provisional or confirmed free-use status while membership is verified. A date is added only after a verified successful find in an admitted quest. These allowance records contain no camera observations or quest content and are not transmitted by the app. They are separate from quest history and remain when that history is cleared. The former local quest-count receipts may remain on existing installations but no longer control free access.

This local information is not sent to Kiddos and is not used to identify a child. Recognition labels themselves are not retained in quest history. After a requested Story object is successfully verified, the app may retain only that app-authored target identifier, its local find count, and its last-found date to reduce near-term repetition. This bounded history contains no recognition label, image, inferred room or neighborhood, color, skipped or replaced clue, or resolved story plan; it is limited to 96 target identifiers, automatically removes entries older than 180 days, and is removed by Clear History - Reset all quests.

New Finds Each Session is enabled by default in Parent Controls and may be turned off by an adult. After a successful stationary, face-free color find, the app may keep one process-local signature consisting of a stable hash of a reviewed safe object concept, the requested broad color, and a 56-bit perceptual code made only from relative light and color relationships. It does not save the recognition label, camera pixels, photo, crop, room, location, or the underlying visual measurements, and the code is not used for identity recognition or profiling. The app compares later successful-find candidates locally, shows Found it! Pick another. and speaks a short explanation when a close same-object, same-color match is found, and keeps no more than 64 signatures. The set exists only in memory and is deleted when the adult turns the setting off, uses Clear History - Reset all quests, or the app process ends. Merely leaving the app in the background does not necessarily end the process. Nothing from this feature is written to persistent storage or uploaded.

Local Play Reminders

Play Reminders is enabled in the app's preferences by default, but iOS notification permission is required before reminders can appear. After verified successful finds on three distinct local calendar days, the app may ask for that permission when Home is active and unobstructed. If permitted, the device schedules two recurring reminders each week, on different days between 5 p.m. and 8 p.m. local time. A reminder opens the app; it does not start a quest, open the camera, or make a purchase.

The reminder preference, a random value used to keep the schedule consistent, and a yes/no record that the play milestone was reached stay on the device. The app uses existing local successful-find records to establish eligibility; it does not create another play-history log for reminders. This feature does not register a remote push-notification token or send play history to Kiddos. Any previously saved app-level off choice remains respected. Revoking notification permission stops delivery; when the app next refreshes permission, it removes its pending and delivered reminders. Clearing quest history does not reset the reminder preference, schedule value, or reached milestone. Manage notification permission in iOS Settings. Quest's Parent Controls no longer contain a Play Reminders option.

Home Screen Widget

The optional Home Screen widget displays existing story titles and artwork. The app uses local completion summaries to choose the public stories to display and prepares a small local cache in the shared Kiddos app group for the widget. The cache contains up to eight public story identifiers, titles, artwork references and images, and rotation timing. It does not contain camera images, recognition results, scores, or the underlying completion-history records, and the app does not upload it. The cache is protected using Apple file protections and excluded from device backup.

The widget can remain visible and rotate its prepared stories while the app is closed. Anyone able to view that Home Screen may see its featured story. Opening a story from the widget retains the app's ordinary access, camera, and parent/safety checks. Removing the widget stops its Home Screen display; it does not itself erase quest history or the shared display cache. The app refreshes the cache as its source data changes. Deleting Quest may not remove a shared app-group container still used by another installed Kiddos app.

Purchases And Subscription Entitlements

Kiddos Quest may offer parent-gated subscriptions through Apple's StoreKit, including a standalone Kiddos Quest subscription and Kiddos+ where available. Apple processes purchases, payment details, trials, renewals, cancellations, refunds, transaction verification, and purchase restoration under Apple's own terms and privacy policy. Kiddos does not receive a family's full payment-card details.

The app receives limited StoreKit transaction information, including product and transaction identifiers, subscription state, and relevant dates, to recognize purchases and access. This does not create a child profile.

To let participating Kiddos apps recognize Kiddos+ access, the app automatically checks limited entitlement information in a shared on-device app group and, when available, the Apple account holder's private iCloud/CloudKit database. A verified direct Kiddos+ subscription can automatically update that record. This is part of recognizing subscription access, with no separate in-app sharing switch; it does not require a Kiddos account. This metadata may include:

• whether the entitlement is active;
• the Apple product identifier and status;
• verification and expiration dates; and
• the originating app's name and bundle identifier.

This entitlement record does not include camera frames, quest history, recognition results, a person's name, email addresses, advertising identifiers, or analytics identifiers. A record label identifies the subscription, not a child. Quest progress is not synchronized through Kiddos+.

Support And Feedback

If a parent emails us, submits feedback, or otherwise contacts us, we receive the information the parent chooses to provide, such as an email address, message, device details, or screenshots. Please do not send a child's name, image, voice, location, or other personal information.

The feedback action may prepare an email containing the app version, device model, and operating-system version. You can review or edit it in your email app before deciding whether to send. Opening a draft does not itself send it to Kiddos.

Internal Development Testing

Internal development builds include a separate Log Scene Analysis switch, off by default. Story scene assistance does not require that switch. When a tester enables logging, derived observations, coarse setting assessments, target identifiers, timings, and selection decisions may be written to the developer console. Development tools may retain an exported or captured log beyond the app session. Testers must use adult-staged, non-personal scenes and review logs before choosing to share them with support.

Internal testers may disable Use Scene Hints for controlled comparisons. While logging is explicitly enabled, diagnostic-only local model comparisons or catalog-mapping calls may run; those outputs do not verify a find or become semantic gameplay mappings. These comparison calls and scene-description logs are excluded from release builds. Release gameplay ignores retained internal switches. Neither build saves or uploads the camera image.

3. Information We Do Not Collect During Normal Gameplay

Kiddos Quest does not transmit to Kiddos:

• a child's name, email address, account, or contact information;
• photos, videos, raw camera frames, or recognition results;
• precise or approximate location;
• contacts, calendars, microphone recordings, saved motion or fitness history, health data, or private documents;
• advertising identifiers or cross-app browsing or gameplay activity; or
• quest progress, scores, Reward Gallery state, gameplay history, or analytics events.

Kiddos Quest does not request location permission or use GPS to locate the family. During an adventure, it may temporarily infer a broad visual setting, such as indoor or outdoor surroundings, from on-device observations to rank clues. This is not a geographic position or a verified description of the room, and it can be wrong. The app does not save an inferred room profile or map in quest history. A family may still choose a named Practice Find pack manually. A setting inference never establishes that an area is safe or authorizes leaving the adult-checked play area.

4. How Information Is Used

Information handled locally by the app is used only to provide app features, including camera recognition, transient adaptive story branching, on-device face-presence safety rejection, the temporary movement-safety pause, quest rotation, hints, progress, scores, Reward Gallery unlocks, best times, settings, accessibility, subscription access, and requested Siri or Shortcuts actions.

Information a parent voluntarily sends to Kiddos may be used to:

• respond to the parent;
• troubleshoot a reported issue;
• improve safety, accessibility, and app quality;
• prevent misuse or protect our rights; and
• comply with legal obligations.

We do not use a child's information to train artificial-intelligence models.

5. Adaptive Stories And Local Selection

Story Adventures use an app-authored, deterministic story graph and a closed catalog of reviewed, safe, everyday object concepts. The child-facing catalog separates 69 core concepts from 69 expanded concepts, limits expanded prompts within each adventure, and uses the same forgiving stationary target-frame verification for either tier. During one active session, after the face-presence veto, the app may keep a bounded, transient summary of successful stationary finds, occasional off-center discovery crops, and sparse quality-filtered moving glimpses so it can choose among approved future branches. Moving and discovery-only evidence is confidence-discounted, must recur, expires sooner, and cannot verify a find. A future object clue may use a verifier-confirmed concept only after it leaves the recent frame and one later completed action; an ambient observation needs stronger recurrence across two separate successful searches. Alternatively, after at least three independent reviewed concepts across at least two successful search windows coherently support the same authored context and catalog neighborhood, the graph may offer a conservative likely-nearby object as a new search; the app does not claim that object was already seen, and the child must still show it to the stationary target-frame verifier. A broad setting assessment may exist temporarily in memory; it is not a verified place or a geographic location and is not saved as a room profile in quest history. It does not persist a precise location, camera map, raw frame, crop, recognition label, printed character, reconstructable visual fingerprint, or inferred neighborhood after the camera session ends. Only the bounded app-authored target-ID/count/date history described above may rank future approved object clues. When New Finds Each Session is enabled, the separate non-image hash/color/perceptual-code signature described in Section 2 remains only in process memory and is used solely to avoid accepting a close repeat during that app session. The story graph, not a language model, selects the approved child-facing mechanic and object concept.

Practice Find sequences, including New Set, use a deterministic planner that runs within the app. It considers only approved app-authored target identifiers and bounded local progress history. Practice play does not invoke a generative language model or send selection inputs or outputs to a generative-AI provider. The separate on-device Story scene assistance and internal-only diagnostics are described in Section 2.

Some artwork and audio bundled with the app may have been created with production tools before the app was released. Those production providers are not contacted by Kiddos Quest at runtime and do not receive a family's camera data or gameplay.

6. Siri, Shortcuts, And Apple Platform Features

Kiddos Quest offers App Intents for actions such as opening the featured story, choosing a quest, browsing the collection, viewing rewards, or opening parent controls. Spotlight receives only public, app-authored story and practice-category titles, descriptions, artwork, and stable identifiers. It does not receive camera observations, play history, scores, or unlocked-reward records. Removed catalog entries are withdrawn when the app refreshes its index.

When you supply a natural-language quest request through these features, the app may use Apple's available on-device language model to match your words to its existing public catalog. The app does not save the request or model response, send them to a remote model, or use them to create new camera targets. Literal catalog matching remains available when the model cannot be used. Saved play settings, access rules, camera eligibility, Family Start, and parent checks still apply; a request cannot unlock rewards or change safety settings. Parent controls remain protected by the app's parent gate.

Apple may process Siri, App Store, StoreKit, iCloud, operating-system diagnostics, and related platform information according to the family's Apple settings and Apple's Privacy Policy. Kiddos does not add a third-party voice, analytics, or advertising service to these features.

7. When Information May Be Disclosed

Kiddos does not sell personal information and does not disclose personal information for cross-context behavioral advertising.

Limited information may be disclosed only:

• to Apple to provide App Store distribution, purchases, subscription verification, iCloud entitlement sharing, Siri, and operating-system features;
• to service providers that help us operate ordinary business support systems, but only for the service requested and under appropriate restrictions;
• when a parent directs or consents to the disclosure;
• when reasonably necessary to comply with law, legal process, or a valid government request;
• to protect a child, a user, Kiddos, or another person's rights, safety, or security; or
• as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law and continued protection of the information.

Apple Inc. provides the App Store, StoreKit, iCloud/CloudKit, Siri, and related platform services described here. Apple may process Apple-account, purchase, connection, or diagnostic information under its own policies. Its contact address is One Apple Park Way, Cupertino, CA 95014, United States. See the Apple Privacy Policy and Apple Privacy Contact. A reference to Apple does not mean that Quest sends camera frames or quest history to Apple. If you choose to share app diagnostics through Apple's optional reporting controls, Apple may make diagnostic reports available to developers under those controls.

8. Children's Privacy

Kiddos Quest is designed for parent-led co-play by families with children age 5 and older. An adult checks one clear play area, starts the quest, stays close enough to intervene, and supervises any safe exploration inside that area; the camera experience is not positioned as independent play for a young child. A child is not asked to create an account, enter a name, communicate with strangers, share content, or provide personal information to play.

Kiddos does not knowingly collect personal information online from children through normal use of the app. If you believe a child has sent personal information to Kiddos, contact us at contact@kiddos.ai. We will review the request and delete the information when required.

Where applicable, a parent may ask what personal information Kiddos holds about their child, request review or deletion, and refuse further collection or use. We may need proportionate information to verify the request, but do not require a child account. Information held only on the family's device is managed using the local controls in Section 10; requests about information independently controlled by Apple can be directed to Apple.

The parent gate is intended to separate child gameplay from adult settings, purchases, and external links. It is not a substitute for legally required parental consent where a service collects a child's personal information. Kiddos Quest is designed to avoid that collection in the first place.

9. Ads, Tracking, Sale, And Sharing

Kiddos Quest contains:

• no third-party advertising;
• no behavioral or cross-app tracking;
• no third-party analytics or crash-reporting SDK;
• no sale of personal information; and
• no sharing of personal information for targeted advertising.

Kiddos Quest does not sell personal information or share it for cross-context behavioral advertising. There is no such sale or advertising-sharing activity to turn off. You may still contact us to exercise any applicable privacy rights described in Section 12.

10. Retention And Deletion

Camera frames, transient face observations, raw camera labels, and reconstructable visual measurements are analyzed temporarily in memory and are not retained by Kiddos Quest after the camera session ends. When New Finds Each Session is enabled, only the non-image signature described in Section 2 may remain in process memory until it is cleared or the app process ends; no camera image or raw recognition result is included.

Local quest progress, scores, and Reward Gallery state remain on the device until an adult uses Clear History - Reset all quests, deletes the app, or erases the device. The Story object novelty history is additionally capped at 96 target identifiers and automatically drops an entry 180 days after its last verified find. Resetting quests deletes saved target outcomes, Story object novelty history, progress summaries, scores, best times, playlist cycles, portrait unlocks, and viewed-portrait state. Some non-history preferences, such as sound settings, subscription state, onboarding state, or terms acceptance, may remain so the app continues to operate correctly.

The New Finds Each Session signature set is capped at 64 finds and is deleted automatically when the adult turns the setting off, when quest history is cleared, or when the app process ends. Merely leaving the app in the background does not necessarily end the process. It is never written to persistent storage.

The local reminder preference, schedule value, and reached play milestone are not quest-history records and remain when quest history is cleared. When the app refreshes a disabled reminder preference or revoked notification permission, it removes its pending and delivered reminders. The widget's separate shared display cache is refreshed by the app and excluded from backup; removing a widget is not a deletion request for that cache. These controls and their limits are described in Section 2.

Kiddos+ entitlement metadata can remain in the shared local cache and private iCloud record after subscription access expires. Expiration controls access; it is not automatic deletion of the record. The app may update the record as subscription status changes. Clearing quest history does not clear shared subscription records, cancel a subscription, or direct Apple to delete its data. Deleting Quest does not necessarily remove a shared app-group cache used by another Kiddos app or the private iCloud record. Apple's account and iCloud controls govern data held there; contact us with questions about app-managed entitlement data.

Parent support communications are retained only as long as reasonably necessary to respond, maintain appropriate business records, protect safety and security, or meet legal obligations. A parent may request deletion by contacting us, subject to applicable legal exceptions.

Deleting the app removes its own local app container, subject to Apple's device backup and restoration behavior. Device or iCloud backups can retain or restore app data depending on Apple settings; manage those backups through Apple. Removing local history does not delete an email or diagnostic report already sent to support, an Apple purchase record, or a record held by another service. You can withdraw camera permission in device Settings; camera-based finding will then be unavailable. Siri, motion, purchase, and iCloud settings are also managed through the applicable Apple controls.

11. Security

Kiddos Quest uses data minimization, on-device processing, Apple platform protections, parent-gated adult controls, and limited local storage to reduce privacy risk. No storage or transmission method can be guaranteed to be completely secure, but we design the app to avoid collecting or transmitting child data whenever possible.

Parents should keep the device, Apple account, and operating system secure and should avoid including personal information in support messages.

12. Privacy Rights

Depending on where a parent lives and whether a law applies, the parent may have rights to request access, correction, deletion, restriction, objection, portability, or information about how personal information is used. A parent may also withdraw consent where processing relies on consent and may complain to an applicable regulator.

California residents may have rights under the CCPA, as amended by the CPRA, including rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service when exercising privacy rights. Kiddos Quest does not sell or share personal information for cross-context behavioral advertising and does not use sensitive personal information to infer characteristics.

Most gameplay information is stored only on the family's device, so Kiddos cannot access, export, correct, or delete it remotely. An adult can reset quest history in Parent Controls or delete the app. For information sent directly to Kiddos, submit a request to contact@kiddos.ai. We may need to verify that the requester is the adult associated with the communication. We will not discriminate against anyone for exercising applicable privacy rights.

13. International Users

Kiddos LLC is based in the United States. If a parent sends information directly to Kiddos from another country, it may be processed in the United States, where privacy laws may differ. We handle such information as described in this policy and apply legally required safeguards where applicable.

Mandatory privacy rights under local law are not limited by this policy.

14. External Links

Parent Controls may include links to Kiddos websites, Apple App Store pages, email, and social platforms behind the parent gate. During first-launch adult setup, the Kiddos Family link can open the App Store directly before setup is complete; an adult must control that setup. Reopening onboarding later requires entering Parent Controls. When an adult opens an external destination, its applicable terms, privacy policy, cookies, and data practices apply. Kiddos does not control independent third-party services.

15. Changes To This Privacy Policy

We may update this Privacy Policy to reflect app changes, legal requirements, or improved privacy practices. The updated policy will show a new "Last Updated" date. When required, we will provide additional notice in the app and seek any required consent before materially changing how previously collected personal information is used.

16. Contact Us

Questions, privacy requests, or concerns may be sent to:

Kiddos LLC

481 N Santa Cruz Ave

Los Gatos, CA 95030

United States

Email: contact@kiddos.ai

Apple's privacy information is available at:

https://www.apple.com/privacy/

Copyright 2026 Kiddos LLC. All rights reserved.