Nido Privacy Policy

1. Who is responsible for the data

Data about children, parents and staff is entered by the kindergarten that uses Nido. OPTIMATRIX's relationship with kindergartens is governed by a separate agreement. The kindergarten decides what information to keep and is responsible for its accuracy and lawfulness: it is the owner of the personal data database. OPTIMATRIX LLC processes the data on the kindergarten's behalf (as the operator) and only to run the platform.

The app is used by adults: parents, trusted persons and kindergarten staff. Children do not use the app.

2. What data we process

• Account: phone number, name, interface language, role in the kindergarten (owner, administrator, teacher, parent) and a profile photo if you add one.
• Information about the child kept by the kindergarten: name, date of birth, group, notes about the child (allergies, health, special needs), attendance and reasons for absence, the daily diary (meals, sleep, toilet use, mood, activities, notes), photos and videos from the kindergarten. Notes about the child, the “Sick” mark, reasons for absence and diary notes may contain health information.
• The child's profile photo is optional. A parent can add, replace or remove it in the app (this requires consent to processing the child's data), and so can the kindergarten's owner or an administrator in the web panel. The photo is reduced in size and stored without metadata (such as where it was taken). Only kindergarten staff (teachers only for children in their own groups) and the child's parents can see it, and Nido support only if the kindergarten's owner has given it access; it is not shown to trusted persons or other parents. If the photo is removed, the file is deleted from Nido's storage.
• Pickups: who collected the child and when (if a person not on the list came for the child, their name and, if known, phone number as entered by the educator), which staff member handed the child over, the decision (handed over or refused) and the reason for a refusal.
• Trusted persons: name, phone number, relationship to the child, photo and how long their access is valid.
• Parental consents: to processing the child's data, to photos and videos in the child's feed and to appearing in group photos, with the date and text version.
• Messages and announcements between parents and the kindergarten, and poll answers.
• AI assistant: questions from the kindergarten's owner and administrators, the answers and the request log, if the kindergarten has enabled the assistant.
• Technical data: the device token for push notifications, device type, sign-in sessions, IP address (only to limit request rates, which protects against guessing codes and phone numbers and against overload; kept for no longer than an hour), the activity log (who changed what and who opened children's photos and videos), read receipts for announcements and messages, and a record that you accepted the terms and this policy.
• Diagnostic data on how push notifications and the QR code scanner work (phone model, system and app version, language and time zone, app installation ID, errors), collected by components built into the app and not linked to your account.
• Telegram: your phone number and the ID of your chat with the Nido bot; sign-in codes, the confirmation code if you ask by email to delete your account, and notifications come through the bot (currently the only way to receive a sign-in code).
• Face recognition (biometric data): only if the kindergarten has turned this feature on. The current version of the app has no such feature: biometric data is not collected.

3. Why we process data

• Signing in with a one-time code sent via Telegram, currently the only way to receive a sign-in code.
• Safe pickups: a child is handed over only to a parent or a currently valid trusted person, and parents and the administrator are alerted about dangerous refusals.
• The diary, attendance, photos and videos for parents.
• Messages, announcements and notifications from the kindergarten and from Nido: notices about the service, and also “Nido news”, whose notifications you can turn off: in the app, Profile → Notifications; in the web panel, Notifications → My notifications.
• AI assistant answers to questions from the kindergarten's owner and administrators, if the kindergarten has enabled it.
• Preventing abuse, investigating incidents and meeting legal requirements (the activity log).
• User support.
• Diagnostics and usage statistics for push notifications and the QR code scanner, based on diagnostic data from built-in components and not linked to your account.

Nido does not sell data, does not show ads and does not use children's data for profiling.

4. Where data is stored and how it is protected

Nido data, including the database, photos, videos and backups, is stored on servers of the hosting provider Eskiz in the Republic of Uzbekistan, as required by the Law of the Republic of Uzbekistan “On Personal Data”. Photos and videos open only through temporary signed links.

Connections use HTTPS only. Teachers see only their own groups, parents see only their own children, and the kindergarten's owner and administrators see the whole kindergarten. Nido support can see a kindergarten's data only if the kindergarten's owner has given it access: for 24 hours and read-only; every request is recorded in the kindergarten's activity log.

So that the app opens even offline, the phone keeps a copy of data that has already been downloaded (for example, lists of children and their photos, the diary, the feed and messages) and, on a teacher's phone, also the names, phone numbers and photos of parents and trusted persons in the teacher's groups (so that a child can be handed over offline) and records that have not been sent yet. The copy is encrypted (AES-256), and its key is kept in the phone's secure storage (Keychain on iPhone, Keystore on Android); the copy is not included in iCloud or Android backups. The copy is erased when you sign out of your account or delete it in the app; when you switch to another kindergarten, the previous kindergarten's data is erased. For the text of push notifications, the phone separately keeps only the names of your own children, also encrypted. If the account is deleted on the website or by email, the copy and the names stay on the phone, encrypted, until someone signs in to the app again or the app is deleted.

5. Who receives data

Only to make features work, and only as much as needed:

• Google Firebase Cloud Messaging, to deliver push notifications. Only neutral text without children's or adults' names passes through Google; the phone adds the name itself.
• Apple Push Notification service (USA), to deliver push notifications to iPhones. The same neutral text without children's or adults' names passes through Apple.
• Telegram, for sign-in codes and notifications to people who connected the Nido bot. Notifications contain no names of children or adults; kindergarten announcements are sent in full. Telegram's servers are located outside Uzbekistan.
• Google ML Kit (USA), to read QR codes during child pickup in the Android app. The camera image is processed only on the phone and is not sent anywhere; the component itself sends diagnostic data about how it works to Google (such as phone model and system version, app version, installation ID, scanner settings and events, performance metrics and error codes), not linked to your account. On iPhone, QR codes are read by the phone's own system.
• Google (Gmail, USA), to host the optimatrixuz@gmail.com mailbox: emails sent to this address (questions about data and requests to export, correct or delete it, including kindergarten owners' written requests about their staff) and our replies, with the phone numbers and other details given in them.
• Anthropic (USA), only if the kindergarten has enabled the AI assistant: questions from the kindergarten's owner or administrators and aggregated figures about the kindergarten. Names of children, parents and staff are replaced with pseudonyms before sending; phone numbers, photos, messages and diary texts are not sent.
• Government authorities, only when legally required.

6. How long data is kept

• Your account: for as long as you use it. When you delete your account, your name and phone number are erased immediately.
• Information about a child (profile, attendance, diary, photos and videos, messages, consents, trusted persons): while the child attends the kindergarten and for 12 months after the kindergarten records that the child has left. After that it is deleted or anonymised.
• The pickup log, the security log (activity log) and the AI assistant question log: 24 months from the date of each entry, after which entries are deleted. Until then entries are not changed or deleted, as a safety requirement; they keep the details as they were at the time, such as the name of the person who collected the child.
• Account deletion requests received by Nido support: 24 months from the date of the request. Once a request is closed, it keeps the dates, the verification method (for a written request from a kindergarten owner: the kindergarten, the owner and a reference to their email), who on the Nido team verified the request and deleted the account, or rejected the request and why, and, of the phone number, only the operator code and the last two digits; the support note on the request is erased.
• Backups: 30 days. Deleted data disappears from backups within 30 days.
• If a kindergarten's agreement with OPTIMATRIX LLC ends, within the following 90 days the kindergarten can obtain an export of its data by writing to optimatrixuz@gmail.com. After that the kindergarten's data is deleted, and log entries are deleted when their retention period ends.
• Sign-in codes are stored only as hashes and are valid for a few minutes.

If the law requires certain information to be kept longer, it is kept for the period set by law.

7. Your rights

• Find out what data about you is processed, and have it corrected or deleted, through the kindergarten or by writing to optimatrixuz@gmail.com.
• Withdraw consents for your child in the app: Profile → Consents. Without consent to data processing, the diary, feed and chat are closed; pickups and trusted persons keep working.
• Turn off optional notifications: Profile → Notifications.
• Delete your account in the app (Profile → Delete account), at app.nidokids.uz/delete-account or by writing to optimatrixuz@gmail.com.
• Complain to the authorised government body for personal data protection.

8. Deleting your account

What is deleted: your name and phone number in Nido, your profile photo, your roles in kindergartens, your link to children in the app, the Telegram connection, device tokens, notifications and sign-ins on all devices.

What stays with the kindergarten: records about children (attendance, diary, pickups, consents and messages), without your name; they are kept for the periods in “How long data is kept”. If you are a trusted person, the record about you in the child's details (name, phone number, photo) is managed by the parent and stays with the records about the child. The pickup log keeps the name (or the phone number, if there was no name in Nido) recorded at the time of the pickup. A kindergarten owner deletes their account through Nido support, because a kindergarten cannot be left without an owner.

The page app.nidokids.uz/delete-account explains how to delete your account with or without the app and how long the records that stay with the kindergarten are kept.

9. Changes

We will tell you about significant changes to this policy in the app and the web panel and ask you to accept the new version. The current version is on this page; its effective date is shown at the top.

10. Operator and contacts

• Operator: OPTIMATRIX LLC (OPTIMATRIX MChJ), taxpayer ID (INN) 312 864 699.
• Registered address: 29B, 1st Mehnatkash dead-end, Kamolon street, Yangiobod mahalla, Shaykhantakhur district, Tashkent.
• Email: optimatrixuz@gmail.com, for questions about data and requests to export, correct or delete it.
• Person responsible for organising personal data processing: the Director of OPTIMATRIX LLC.
• Hosting: Eskiz, Republic of Uzbekistan; data is stored in Uzbekistan.