Children's Privacy Notice

Last updated: 1 June 2026

This notice is written for parents in plain language. It explains how צעד צעד ("Step by Step") handles information about your child. This notice supplements our Privacy Policy and is required by laws including the U.S. Children's Online Privacy Protection Act (COPPA) and Article 8 of the EU General Data Protection Regulation (GDPR-K).

1. Who can use the App

• Only parents (or legal guardians) age 18 or older can create an account.
• Children do not sign up, do not log in, and do not directly interact with our servers.
• All information about a child in the App is added and managed by you, the parent.

2. What information about your child is in the App

You can choose to add the following about your child. None of it is required, but the App works better with at least a name:

We do not collect from your child:

• Real-world location
• Contacts, calls, or messages
• Microphone or camera (unless you take a profile photo)
• Browsing or social-media activity
• Any biometric identifier

3. How we use child information

We use child information only to:

• Run the App for your family
• Show your child their habits, rewards, and progress
• Let you, the parent, manage and view that progress

We do not:

• Show ads to your child
• Sell or rent child information to anyone
• Share child information with marketers
• Use child information to train artificial intelligence
• Allow other users to see your child's information

4. Your rights as a parent

At any time, you can:

• See all the information about your child in the App
• Edit or delete that information directly in the App
• Delete your child's profile or your whole account from Settings → Account
• Ask us for a copy of all data, or to delete it, by emailing stepshabitsapp@gmail.com
• Withdraw your consent at any time

If you withdraw consent or delete the account, we will permanently delete your child's information within 30 days, except for backups (deleted within 90 days) and any records we are legally required to keep.

5. How we keep child information safe

• All data is encrypted in transit (TLS) and at rest
• Photos are stored on Cloudinary, with strict access controls
• Account access is protected by Supabase Authentication
• Only a small number of authorized employees can access servers, and only when necessary
• We never email, text, or otherwise contact children directly

6. Service providers

We use the following companies to run the App. Each is contractually bound to protect your child's information:

• Supabase — Authentication and database
• Cloudinary — Photo storage
• Expo (EAS) Push — Push notifications (only if you enable them)

We do not use any third-party advertising or analytics SDKs in features used by children.

7. Verifiable parental consent

If your country requires verifiable parental consent (for example, the United States under COPPA for children under 13), we obtain it before any child information is processed. Methods we may use:

• Confirming a credit-card or government-ID detail (no charge made)
• A signed consent form
• A short verification video call

If you believe your child's information is in the App without your consent, contact us at stepshabitsapp@gmail.com and we will remove it immediately.

8. Reporting a problem

If you have any concern about how your child's information is handled:

• Email stepshabitsapp@gmail.com
• We will respond within 14 days
• You can also contact your local data-protection authority (in Israel: the Privacy Protection Authority; in the EU: your national DPA; in the US: the Federal Trade Commission)

9. Changes to this notice

We will tell you in-app and by email at least 14 days before any material change to this notice. If a change requires renewed parental consent, we will ask for it before the change applies to your child's information.

10. Contact

• Email: stepshabitsapp@gmail.com
• Company: צעד צעד
• Address: Gharshevski 4/5, Mazkeret Batya, Israel