Legal

Privacy policy

Effective October 1, 2026. Kedemo is a parental-control service operated by D&S Tech LLC, New Jersey, USA (“Kedemo”, “we”). This policy explains what we collect, why, how long we keep it and what you can do about it.

In short: we collect what is needed to show a parent their child’s device activity and enforce the family’s rules. We do not sell personal data, we do not show ads, and activity is deleted automatically on a schedule the family chooses.

Who is who

A parent or legal guardian creates a family account and installs Kedemo on devices they own or manage for their children. For the data collected from those devices the family decides what is monitored; we process it on the family’s behalf to provide the service. Kedemo is not intended to monitor adults without their knowledge, and the family must only install it on devices they are entitled to manage.

What the Kedemo app on a child’s device collects

• Web activity — the domain names requested (for example youtube.com), when, and whether they were allowed or blocked. Not page content, searches, form data or passwords.
• App activity — which programs were in the foreground and for how long, including the window title (which can contain the name of a document, video or chat).
• Requests — when the child asks for more time, a website or an install: the request, an optional note, and for installs the file name, publisher, path and file hash.
• Device information and events — device name, operating system and version, Kedemo version, online status, rule changes applied, limits reached, tamper and VPN/proxy detections.

Kedemo does not record keystrokes, message content, e-mail, photos, camera, microphone, location or screen video. The Kedemo icon is always visible on the device, so children know it is there.

What we collect from parents

• Account: name, e-mail, password (stored only as a one-way hash), time zone, family members you invite, and the children’s first names or nicknames and ages you enter.
• Security: sign-in times, IP address and browser of dashboard sessions, and, if you turn it on, your two-step login secret (encrypted).
• Phone app: a push-notification token so alerts reach your phone.
• Billing: handled by Stripe. We keep your Stripe customer ID, plan and invoice history — never your card number.
• Support: messages you send us.

How we use it

Only to run the service: show activity and reports to the family, enforce the rules, send the alerts and e-mails the family asked for, keep accounts secure, provide support, bill paid plans and meet legal obligations. We do not use children’s data for advertising, profiling or to train AI models.

How long we keep it

• App, website and alert history: 90 days by default; the family owner can choose 30 days to 1 year in Settings → Privacy & data. Older records are deleted automatically.
• Account, children, devices and rules: while the account exists.
• Security logs of changes and sign-ins: up to 13 months.
• Closing the account: after a 7-day grace period Kedemo is removed from the family’s devices and all family data is deleted. Encrypted backups roll over within 30 days.
• Billing records: as long as tax law requires.

Who we share it with

We do not sell or rent personal data. We use a small number of service providers who process data only on our instructions:

• Hosting — our servers in the United States.
• Encrypted backups — an S3-compatible storage provider; backups are encrypted before they leave our servers.
• Stripe — payments.
• Google Firebase Cloud Messaging (and Apple’s push service on iPhone) — delivering notifications to the parent’s phone.
• E-mail delivery provider — sending account, alert and report e-mails.

We may disclose data if the law requires it, and we will tell the family unless we are legally prohibited from doing so.

Security

All connections use TLS. Rules sent to devices are digitally signed so they cannot be forged. Passwords and the family master password are hashed; secrets are encrypted at rest; staff access is limited and logged. Two-step login is available for every parent.

Your choices and rights

• See and download everything we hold for your family: Settings → Privacy & data → Download all data (or in the phone app).
• Correct it in the dashboard, or ask us.
• Delete a child, a device, a family member or the whole account at any time from the dashboard or the phone app.
• Children’s privacy (COPPA): the parent controls the child’s information and can review, have deleted or stop further collection of it at any time by removing the device or closing the account.
• Residents of the EU/UK (GDPR) and California (CCPA/CPRA) and other places with privacy laws have additional rights; we honor access, deletion, correction and portability requests from everyone.

Contact: privacy@kedemo.com — D&S Tech LLC, 89 Spruce St, Paterson, NJ 07501, USA. We answer within 30 days.

Changes

If we change this policy in a way that matters, we tell account owners by e-mail or in the dashboard before it takes effect.