Last updated: 2026-04-07

Privacy Policy

This Privacy Policy describes how Albcoding SH.P.K. (“we,” “us,” or “our”) processes personal data when you use KidTrack — including the KidTrack website, the web-based administrator portal, and the KidTrack mobile applications for iOS and Android (together, the “Services”).

KidTrack is designed for kindergartens: it supports operations such as attendance, daily reports, photos, announcements, messaging, and related features, with roles such as administrator, teacher, and parent, as configured by each kindergarten.

This document is provided for general information and does not constitute legal advice. You may wish to consult a qualified professional about your specific situation.

1. Data controller

The controller responsible for personal data processed in connection with the Services is:

For privacy-related requests, contact us at the email or phone number above. We may ask you to verify your identity before fulfilling certain requests.

2. Scope

This policy applies to personal data we process when you access or use KidTrack on any platform, including:

• the public marketing and account pages on our website;
• the signed-in web experience for kindergarten administrators;
• the KidTrack mobile apps published on the Apple App Store and Google Play.

Kindergartens that use KidTrack may process information about children and families in their care. Where we process such data, we typically do so on behalf of the kindergarten (as a processor) to deliver the Services the kindergarten has chosen. The kindergarten remains responsible for its own compliance and for informing parents or guardians as required by applicable law.

3. Categories of personal data we process

Depending on how you use the Services, we may process:

• Account and authentication data — e.g. email address, password or authentication tokens, and profile identifiers when you register or sign in (including sign-in with Google or Apple where enabled).
• Role and profile data — e.g. name, role (such as administrator, teacher, or parent), and settings associated with your account.
• Kindergarten operational data — e.g. information about classes, attendance, daily reports, announcements, and other content you or your kindergarten enters into KidTrack.
• Communications — messages and similar content sent through in-app features, in accordance with your kindergarten’s configuration.
• Photos and media — images or files you upload where the product allows it (for example, daily activity photos), subject to kindergarten practices and permissions.
• Child-related data — information about children that staff or parents enter in KidTrack (such as name or attendance) as needed to operate the kindergarten’s account.
• Technical and usage data — e.g. device type, operating system, app version, approximate location derived from IP address or device settings (if applicable), log and security records, and diagnostics needed to run and secure the Services.
• Contact form data — if you use our website contact form, the details you submit (such as name, email, organization, and message) and data needed for spam protection (see Section 6).

4. Purposes and legal bases

We process personal data for purposes such as:

• providing, operating, and improving the Services;
• authenticating users and securing accounts;
• communicating with you about the Services, support, or important notices;
• complying with legal obligations and responding to lawful requests;
• protecting the security and integrity of our systems and users;
• where applicable, pursuing legitimate interests that are not overridden by your rights (for example, service analytics that do not involve profiling or sale of personal data).

We rely on applicable grounds under Kosovo’s personal data protection legislation (and, where relevant, comparable rules). These may include performance of a contract, consent where required, legitimate interests, or legal obligation, depending on the processing activity.

5. How we store and transfer data

KidTrack uses cloud infrastructure and authentication services provided by Supabase and related subprocessors to host and process data. Data may be stored or processed in the European Union, the United States, or other regions where our providers operate. Where personal data is transferred outside Kosovo or the EEA, we take steps intended to ensure appropriate safeguards, such as standard contractual clauses or other mechanisms permitted by law, in line with our agreements with service providers.

6. Service providers and integrations

We engage trusted providers to help run the Services, including:

• Supabase — database, authentication, storage, and related backend services.
• Google and Apple — optional “Sign in with Google” or “Sign in with Apple” where you choose those options; their use is also governed by their respective privacy notices.
• Cloudflare — Turnstile or similar security checks on our contact form to reduce spam and abuse.
• Email delivery — providers we use to send transactional or operational emails (for example, account confirmations or password resets).

We do not sell your personal data. We do not share personal data with third parties for their independent marketing purposes except as described in this policy or with your direction or consent.

7. Cookies and local storage (web)

When you use KidTrack in a browser, we and our providers may use cookies, local storage, or similar technologies that are necessary for the site to function (for example, to keep you signed in or to remember security preferences). We may add or adjust such technologies as the product evolves; if we use non-essential cookies in a way that requires consent under applicable law, we will provide appropriate notice and choices.

8. Mobile applications

When you use KidTrack on iOS or Android, the operating system may provide permissions (such as notifications, camera, or photo library) that you can allow or deny. We request permissions only where needed for features you use. Data collected through the apps is processed in line with this policy and is synchronized with the same backend services as the web portal where applicable.

9. Retention

We keep personal data only as long as necessary for the purposes described in this policy, unless a longer period is required or permitted by law. Retention may depend on factors such as whether your kindergarten maintains an active subscription, legal obligations, dispute resolution, and backup and security practices. When data is no longer needed, we delete or anonymize it in accordance with our internal procedures.

10. Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, loss, or alteration. No method of transmission over the internet or electronic storage is completely secure; we encourage you to use strong passwords and protect your account credentials.

11. Your rights

Subject to applicable law, you may have the right to request access, correction, deletion, restriction, or portability of your personal data, and to object to certain processing. You may also have the right to lodge a complaint with a supervisory authority where you live or work.

If you are in the European Economic Area or the United Kingdom, you may have specific rights under the GDPR or UK GDPR, including those listed above. To exercise any right, contact us using the details in Section 1. We will respond within the timeframes required by applicable law.

12. Children

KidTrack is intended for use by kindergartens and authorized adults (staff and parents). Personal data about children is processed where the kindergarten and, where required, parents or guardians have agreed to use the Services. If you believe a child’s information was collected without proper authorization, please contact us and we will work with the relevant kindergarten to address the issue.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. If changes are material, we will provide additional notice as appropriate (for example, by email or an in-app notice).

14. Contact

Questions about this Privacy Policy? Email info@mykidtrack.com or visit our contact page.