Privacy Policy

1. Who we are

KidLoop (“we”, “us”, “our”) is a free neighborhood platform that helps families share outgrown children's items. Our website is https://kidloop.org. You can reach us at support@kidloop.org.

2. Information we collect

• Account data — display name, email address, and optional profile photo when you register.
• Listing content — photos, titles, descriptions, and category information you submit.
• Location data — neighborhood, city, or ZIP code you enter in your profile. We never collect GPS coordinates.
• Chat messages — messages exchanged between users about listings, stored to deliver and display them.
• Usage data — pages visited, buttons clicked, and device type, collected to improve the product.
• Authentication data — if you sign in with Facebook, we receive your public profile name and email as permitted by Facebook Login.

3. How we use your information

• To create and manage your account.
• To display your listings and profile to other users in your area.
• To deliver chat messages between users.
• To send transactional emails (welcome, email verification, listing notifications).
• To send optional product update emails — you can unsubscribe at any time.
• To detect and prevent fraud, abuse, and safety violations.
• To analyse aggregate usage trends and improve the platform.

4. How we share your information

We do not sell your personal data. We share it only in these limited circumstances:

• Service providers — Google Firebase (database & auth), Vercel (hosting), Stripe (optional donation payments), and SendGrid/Nodemailer (email). Each provider processes data only as needed to perform their service.
• Other users — your display name, profile photo, and listing content are visible to other KidLoop users in your area.
• Legal requirements — we may disclose information if required by law or to protect the safety of our users.

5. Cookies & analytics

We use essential cookies for authentication sessions and Google Analytics (GA4) for aggregate usage analysis. GA4 data is anonymised and does not identify individual users. You can opt out of analytics by enabling “Do Not Track” in your browser or using the Google Analytics Opt-out Add-on.

6. Data retention

We keep your data for as long as your account is active. If you delete your account, we delete your profile, listings, and chat messages within 30 days, except where we are required to retain records for legal or safety purposes.

7. Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing support@kidloop.org. If you are located in the EEA or UK you have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with your local supervisory authority.

8. Children's privacy

KidLoop is a platform for adults to share children's items. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal data, please contact us so we can delete it.

9. Security

We use industry-standard measures including Firebase security rules, HTTPS-only transport, and access-controlled API routes. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. We will notify registered users by email of material changes. Continued use of KidLoop after the effective date constitutes acceptance of the revised policy.

11. Contact

Questions or requests regarding this policy: support@kidloop.org