Privacy Policy

Kids Video Box · Last updated: 8 June 2026

This Privacy Policy explains how BloomyCraft Labs Ltd ("we", "us", or "our") handles information in the Kids Video Box mobile application (the "App"). By using the App you agree to the practices described here.

We built Kids Video Box as a parent-controlled, kid-safe video player. We collect as little information as possible, we do not use advertising, and we do not use analytics or tracking.

Summary (the short version)

  • The only personal information we collect is the email address a parent uses to create a Family Account, plus a push-notification token so the parent's remote controls work.
  • Your child's profiles, allowed-channel list, watch history, and downloaded videos stay on the device — we never receive or store them.
  • We show no ads, run no analytics, and never sell your data.
  • Videos play through YouTube's embedded player; Google's privacy policy applies to that playback.

1. Information we collect

a) Information you give us

  • Family Account email and password. When a parent creates or signs in to a Family Account (used to link the parent's and child's devices for remote controls), we collect the email address and a password. Passwords are handled and stored by Google Firebase Authentication and are never visible to us in plain text.

b) Information collected automatically for app functionality

  • Push-notification token. To deliver the parent's remote commands (for example, "pause the screen now"), the App registers a device push token with Firebase Cloud Messaging.
  • Family identifier and remote-control messages. A family identifier (the Family Account's ID) and the parent's current control command (e.g. pause / resume) are stored in Google Cloud Firestore so both devices stay in sync.

c) Information stored only on the device (we do not receive it)

  • Child profiles and the parent's chosen allowed-channel list.
  • Watch history / usage shown in the parent's Usage Report.
  • Offline videos a parent transfers to the device.
  • The Parent Mode PIN, which is stored only as a salted, hashed value on the device and is never transmitted.

This information lives in the App's private storage on the device. Deleting the App removes it.

d) Information we do not collect

  • No advertising identifiers and no advertising.
  • No analytics or behavioural tracking.
  • No location, contacts, photos, microphone, or camera data.
  • We do not knowingly collect personal information directly from children.

2. How we use information

We use the limited information above only to:

  • create and authenticate the parent's Family Account;
  • deliver the parent's remote-control commands to the child's device;
  • operate, maintain, and secure the App.

We do not use it for advertising, profiling, or analytics, and we do not sell or rent it to anyone.

3. Third-party services

The App relies on the following services, which process data under their own privacy policies:

  • Google Firebase (Authentication, Cloud Messaging, Cloud Firestore) — used for the Family Account, push notifications, and remote-control sync. See the Firebase Privacy and Security information and the Google Privacy Policy.
  • YouTube — videos play through YouTube's embedded player (using the privacy-enhanced youtube-nocookie.com mode), and channel/video information is retrieved through the YouTube Data API. Your use of YouTube content is subject to the Google Privacy Policy and the YouTube Terms of Service.

We are not responsible for the privacy practices of these third parties.

4. Children's privacy

Kids Video Box is designed to be used by children under the supervision of a parent or guardian. The features that collect personal information (creating a Family Account) are intended for the parent or guardian and are located in Parent Mode, behind a PIN.

We do not knowingly collect personal information directly from children. If you believe a child has provided us with personal information without parental consent, please contact us at the address below and we will delete it.

We handle children's data consistent with applicable laws, which may include the U.S. Children's Online Privacy Protection Act (COPPA) and the EU/UK GDPR.

5. Data sharing

We do not sell, rent, or trade personal information. We share information only:

  • with the service providers listed in Section 3, solely to operate the App;
  • if required by law, or to protect our rights or the safety of users.

6. Data retention

  • Family Account data is kept while the account exists. When the account is deleted, the associated authentication record and family control document are removed.
  • On-device data remains until you delete it in the App or uninstall the App.

7. Data security

Account credentials and cloud data are protected by Google Firebase's security infrastructure, and Firestore access is restricted so that a Family Account can only read and write its own data. The Parent Mode PIN is stored on the device as a salted hash. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, or delete your personal information. You can:

  • Delete your Family Account or request deletion by contacting us;
  • Remove all on-device data by deleting the App;
  • Sign out at any time in Parent Mode → Settings.

To exercise any right, contact us at the email below.

9. International data transfers

The third-party services we use (Google Firebase) may process and store data on servers located outside your country, including in the United States. By using the App you consent to such transfers.

10. Local network (Wi-Fi transfer)

The App includes an optional Wi-Fi transfer feature that lets a parent upload videos from a computer on the same local network. These files are sent directly to the device and stored locally; they are not transmitted to us or to any third party.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Your continued use of the App after a change indicates acceptance of the updated policy.

12. Contact us

If you have any questions about this Privacy Policy or your data, contact us at:

BloomyCraft Labs Ltd
Email: info@bloomycraftlabs.com
United Kingdom