Why children's data is specially protected
The General Data Protection Regulation (GDPR) emphasizes that children deserve special protection because they are often less able to assess risks and consequences. A parental control app processes exactly this kind of data: locations, usage times and family relationships.
The checklist
- Controller: Who is behind the app, with name and address in the legal notice?
- Types of data: What data is collected, and does the feature really need it?
- Storage location: Where is the data stored – with the provider or in storage belonging to the family?
- Recipients: Who receives data, and are all recipients specifically named?
- Third countries: Is data processed outside the EU, and with what safeguards?
- Retention period: Are there specific deletion periods, especially for locations?
- Tracking: Does the app contain advertising or analytics SDKs?
- Deletion: Can you delete data yourself, and completely?
- Contact: Is there a reachable address for privacy requests?
- Transparency for the child: Is what happens explained in an age-appropriate way?
Your rights under the GDPR
| Right | What it means |
|---|---|
| Access (Art. 15) | You can ask what data about you is being processed. |
| Rectification (Art. 16) | Incorrect data must be corrected. |
| Erasure (Art. 17) | Under certain conditions, data must be deleted. |
| Restriction (Art. 18) | Processing can be temporarily restricted. |
| Data portability (Art. 20) | You can receive certain data in a commonly used format. |
| Objection (Art. 21) | You can object to certain types of processing. |
| Complaint (Art. 77) | You can lodge a complaint with a data protection supervisory authority. |
This overview does not replace legal advice.
The checklist applied to Kydly
- Controller: Giminger Consulting – Eugen Giminger, Cologne, Germany. Full details in the legal notice.
- Storage location: no family server of its own; family data via Apple CloudKit in your iCloud.
- Recipients: invited family members, Apple for its services, Vercel for the website, STRATO for email.
- Retention period: location samples seven days, certain events and requests 30 days.
- Tracking: no analytics or advertising SDKs of its own in the app.
- Deletion: “Delete family & reset Kydly” in the app.
- Contact: privacy requests by email to info@giminger.com.
You can find the complete information, including legal bases and transfers to third countries, in the privacy policy.
Frequently asked questions
Is a parental control app compatible with the GDPR?
In principle, yes, if the provider complies with the requirements: transparent information, data minimization, legal bases and safeguards. Check the privacy policy for this.
Does my child have to consent to location tracking?
That depends on age and the situation. Regardless of the legal question, experts recommend involving children and explaining openly what is shared.
Where can I complain about data protection violations?
To the data protection supervisory authority of your German federal state or the authority responsible for the provider. For Kydly, that is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
Get to know Kydly
Try Kydly first with sample data in the demo, or download the app. The basic features for one parent and the first child are free.
Sources and further information
This guide is published by the provider of the Kydly app. It does not replace individual legal, medical or educational advice. Information about Kydly describes the app as of the date stated; the Privacy Policy, the Terms of Use and the terms Apple displays before purchase are binding. Legal documents (privacy policy, terms of use, legal notice) are available in German and English.