Privacy Policy
Last updated: October 18, 2026
Who operates KidDaVinci
Bright Reality LLC, a Washington limited liability company, operates KidDaVinci for families and KidDaVinci Studio for studios. Contact info@kiddavinci.com about privacy or your data. These services are intended for adults, including parents, guardians and studio staff; children do not register accounts.
Accounts and sign-in
We store your account identifier, display name, language and notification preferences, and an email address when you provide one. Email passwords are stored as hashes, not readable passwords. Google, Apple, Facebook and WeChat provide identifiers and the profile information you authorize. We may copy a provider profile photo into our private storage if you have not chosen your own avatar. We do not request access to your social posts, friends or photo library through sign-in.
Email and WeChat
WeChat sign-in can create an account without an email address. Linking it to an existing email account is optional and requires our email verification code. A new Google identity matching an existing email account also requires our verification code; Google sign-ups using a third-party email address require verification. Facebook sign-in currently requests a profile identifier, name and profile photo; an email is supplied and verified separately. Previously linked identities sign in by their provider identifier.
Sign in with Apple
Apple provides an account identifier and an email address, which may be a private relay address. Where a refresh credential is available, we keep it encrypted on our server so that we can revoke the authorization when you delete your account. Revocation failures are queued for retry, separately from local account deletion. Older accounts may have no stored Apple credential; after deletion we explain how to stop using KidDaVinci under Sign in with Apple in your Apple Account settings. Signing out of the app is not account deletion.
Children, creations and conversations
Parents and guardians can enter a child’s nickname, birth month/year, optional full name and avatar. Studios may also enter student and class records before a family joins, and are responsible for the permissions needed to provide them. We store uploaded images, titles, tags, dates, comments, voice recordings and the family or class relationships needed to control access. Family uploads default to family visibility, not public visibility. Access depends on the permissions you choose and the family or class memberships you grant.
Studios, sharing and public content
Enrollment details go to the studio handling the request. Studio staff can access records relevant to their roles. Claiming a student links the family and studio records; it does not remove the studio’s original records. A family receives copies of classroom creations. Studio public galleries can show permitted creations and ages without children’s names; guardians can withdraw studio display permission. Share links and public posts can be seen by their recipients or visitors. Downloads, screenshots and copies held by other people cannot be recalled by deleting your copy. When you choose a social sharing destination, we hand the selected share card and supported text to that app through its sharing interface. Facebook and Instagram are operated by Meta; WeChat is operated by Tencent. Their handling of the shared content follows their own policies. Meta SDK automatic app-event logging and advertising-identifier collection are disabled. Sharing may use a temporary device file or clipboard to transfer the card.
Photos, voice and AI
We send photos to Google Gemini to suggest titles and tags, detect artwork corners and, where relevant, read a signature. Studio AI tools may send the text or images needed to carry out a staff request. Local lighting, rotation and image-editing tools run on the device. Sending a voice comment does not automatically transcribe it. Where transcription is available, a recipient can request it; a cloud transcription sends that recording to Google, while supported local recognition runs on the device. We do not use your content to train our own AI models. Provider processing remains subject to the services and terms we use.
Location, notifications and analytics
Explore uses a ZIP code or city you enter, or your location if you grant permission, to find nearby activities. Area subscriptions store the chosen search area and notification preferences. We store push tokens or browser subscriptions to deliver notifications; Apple, Google/Firebase and email providers process delivery data. Notifications and emails may include a creation thumbnail and comment details. You can change these preferences. We use Vercel Web Analytics on public pages, excluding private family and studio management pages, query parameters and fragments. We do not use advertising trackers or sell personal information.
Service providers and storage
Our primary application data and media are hosted on Amazon Web Services in the western United States. Vercel serves the website; Cloudflare provides network/domain services. These infrastructure services may process network identifiers and request information. Google provides AI and some notification services. Login providers process the authentication you choose. Studio billing uses Stripe, which processes payment details. Encryption in transit and provider storage encryption do not make this an end-to-end encrypted service: our authorized systems must process content to provide features. Access from other countries involves international data transfers.
Retention, account deletion and shared records
Deleted creations normally remain in Trash for 30 days; you can request permanent deletion sooner. Account deletion disables your linked sign-in methods, sessions and API credentials, removes memberships and notifications, and clears the account profile. Children for whom you are the only administrator, and their creations, are deleted. Records shared with another administrator and studio originals may remain. Some conversation history and operational records may remain associated with a de-identified account. A studio owner must transfer or delete the studio before deleting the account. Voice files, stored media and provider revocations may be cleaned up asynchronously; failures can delay physical removal. Backups and security records are not erased instantly and remain subject to their retention and operational requirements.
Device copies and your choices
The app caches creations and conversations for offline use. Signing out clears or makes inaccessible the current account’s app cache; separately downloaded files remain under the device owner’s control. Use Settings → Delete account for account deletion. You can also manage family access, child details, Trash, notification settings and sharing within the app. For access, correction, deletion or other privacy requests that the app cannot handle, contact info@kiddavinci.com. We may verify your identity before acting.
Policy updates
We update the date on this page when the policy changes. Material changes will be communicated through an appropriate service notice. The English version is the reference text; translations are provided for convenience.