Hide & Keep

Privacy Policy

Effective July 27, 2026

The short version

Hide & Keep is a Bible discipleship app built for children and set up by a parent or guardian. We collect the least we can get away with: enough to sign you in, keep a child's progress from disappearing, and know which parts of the app people actually use.

We do not show advertising, we do not use third-party advertising or tracking software, and we do not sell or rent anyone's information — child or adult. You can delete the account and everything attached to it from inside the app at any time.

This policy covers the Hide & Keep mobile app and this website. If something here is unclear, write to us at support@hideandkeep.app and we'll answer in plain language.

What we collect

An account belongs to the grown-up. Children use profiles inside that account and never register on their own.

The parent account

An email address and password, which is how you sign in. Optionally a display name, a profile picture, a preferred language, and your notification preferences.

Child profiles

Whatever the parent types when creating the profile: a name — a first name or nickname is plenty — and an age, which we use to pitch the reading level. Alongside that sit display preferences the child picks, like an avatar colour and whether to use the dyslexia-friendly font.

Progress and activity

Which dig sites and activities a child has finished, quiz and game scores, gold earned, cosmetics and companions unlocked, and daily quest progress. This is the part that would hurt most to lose, and it is the main reason an account exists at all.

Field notes

Children can write short reflections in response to prompts. That writing is stored with the child's profile and is visible only inside your account. It is never published, shared with other users, or shown to anyone outside the account.

Purchases

Which book or bundle was purchased, the store transaction identifier, which platform it came from, and when we verified it. Payment itself is handled entirely by Apple or Google — we never see or store card numbers or billing details.

Notifications

If you turn on reminders, we store a device push token so the reminder can reach the device. Turn notifications off and the token stops being used.

App usage and diagnostics

We record basic usage events — which screen was opened, how long a session lasted, the app version, the platform, and a coarse country. The country comes from a network-level header at our edge; we do not collect precise location, and we do not store IP addresses alongside these events. When the app hits an error we also keep a diagnostic report so we can fix it.

What we never do

  • No advertising of any kind, and no ad networks in the app.
  • No third-party analytics, tracking, or social-media software development kits. The usage data described above is collected by us, for us.
  • No selling, renting, or trading of personal information.
  • No behavioural profiling or targeted advertising built from a child's use.
  • No precise or background location.
  • No public profiles, no messaging between users, and no way for a child to be contacted by a stranger through the app.

Children's privacy

Hide & Keep is designed for children, so we treat everything attached to a child profile as sensitive by default.

A child cannot create an account. A parent or guardian registers, and in doing so consents to the collection described here on behalf of the children they add. We ask for the minimum needed to run the app, and we do not condition a child's participation on handing over more than that.

Purchases sit behind a parent gate, so a child cannot buy anything without an adult solving the prompt first.

As the parent, you can review what is stored about your children, correct it, or remove it — by editing or deleting a child profile in the app, or by deleting the account entirely. If you would rather we handle it, write to support@hideandkeep.app. If you believe we have somehow collected information from a child without a parent's involvement, tell us and we will delete it.

Who else touches the data

We keep the list of outside companies short, and each one only does a specific job for us. None of them are permitted to use your information for their own purposes.

  • Supabase — hosts the database, sign-in, file storage, and the server-side functions the app calls.
  • Cloudflare R2 — stores and delivers the teaching videos and other media.
  • Vercel — hosts this website.
  • Expo — delivers push notifications to devices.
  • Apple and Google — process purchases and confirm receipts back to us so the right book unlocks.

Beyond that, we would only hand over information if the law genuinely required it, or if it were necessary to protect someone's safety.

Deleting your data

You can delete your account from inside the app. It is a real deletion, not a flag: every child profile on the account goes, along with the progress, field notes, rewards, and diagnostic records tied to it, and finally the sign-in itself.

To remove a single child rather than the whole account, delete that child's profile and their data goes with it. You can also email support@hideandkeep.app from the address on the account and we will do it for you.

One caveat worth stating plainly: purchases are recorded by Apple and Google, not just by us. Deleting your Hide & Keep account does not cancel or refund a store purchase, and it does not erase the record the store keeps.

How long we keep things

Account, profile, and progress data stays until you delete it — the whole point is that a child's work is still there next year. Usage events and error reports are kept only as long as they are useful for understanding and fixing the app. Purchase records are kept as long as we need them to keep your books unlocked and to meet our tax and accounting obligations.

Security

Data is encrypted in transit. Access to the database is restricted per account at the database itself, so one account cannot read another's children, progress, or notes. Administrative access to content is limited to named staff accounts.

No system is perfect, and we would rather say so than imply otherwise. If you find a security problem, please report it to support@hideandkeep.app and we will take it seriously.

Changes to this policy

If we change how we handle information, we will update this page and move the effective date at the top. For a change that materially affects what we collect from children, we will make a point of telling parents in the app rather than relying on you to notice a new date here.

Contact

Hide & Keep
support@hideandkeep.app

Questions about your data, a request to see or delete it, or anything in this policy — that address reaches a person.