KidsOuting

Privacy Policy

Last updated: 2026-05-04

Who we are

KidsOuting is operated from Hong Kong by KidsOuting Limited (the “Service”). We provide a directory of kids activities, shops, and events for families in Hong Kong. For privacy questions, contact hello@kidsouting.com.

What we collect

  • Account data, email, display name, language preference, role (parent / business / admin).
  • Content you create, bookmarks, reviews, photos you upload to reviews, business listings you claim.
  • Usage data (only with your analytics consent), page views, search terms, anonymous device fingerprint, country derived from connection metadata. We do not collect raw IP addresses, full user agent, or precise location unless you explicitly grant browser geolocation permission.
  • Payment data (Premium subscribers, future), handled entirely by Stripe; we never see your card details.
  • Image metadata on photos you upload, when an image contains EXIF data (capture time, GPS coordinates, camera make and model, lens, exposure), we read these values and store them privately in our database. They are always stripped from the file before serving. We use them for: (i) trust scoring (does the photo's GPS roughly match the venue's location?), (ii) anonymous aggregate analytics on the device mix used by parents in Hong Kong, and (iii) helping admins moderate suspected fraud or stock-photo abuse. Camera/device data is never tied to advertising or sold.

What we do NOT do

  • We do not sell or rent your personal data.
  • We do not run third-party advertising or place advertising trackers.
  • We do not profile children. KidsOuting is a tool for parents (16+); user accounts require an adult.
  • We do not use your data to train external AI models without your explicit opt-in.

Your rights (HK PDPO + GDPR)

  • Access, get a copy of all data we hold about you
  • Correction, fix anything that is wrong
  • Deletion, request your account and data be removed (also available in-app under Settings → Delete account)
  • Portability, export your data in a machine-readable format
  • Withdraw consent, revoke analytics consent any time via the cookie banner

To exercise any of these, email privacy@kidsouting.com. We respond within 30 days.

Where data is stored

Account data, listings, bookmarks, and reviews are stored in Supabase (PostgreSQL) hosted in Singapore (AWS ap-southeast-1). Listing images are stored in Cloudflare Images (global CDN). Anonymous analytics events are stored in PostHog (US region). We will migrate to a Hong Kong region as soon as our database provider supports it.

Children's privacy

KidsOuting is intended for parents and guardians (16+). We do not knowingly collect personal data from children under 16. Reviews and photos uploaded to listings must not identify children. We remove violating content immediately on report.

Changes

We may update this policy as the Service evolves. Material changes will be announced via email and a banner on the site at least 14 days before they take effect.