KIWIBEE policies
GDPR / UK GDPR Children's Privacy
Effective October 27, 2026
Controller
KIWIBEE is the controller of personal data processed through the Service. Contact: privacy@kiwibee.net.
Lawful bases
Performing our contract with the parent (running the Service), consent from the person with parental responsibility for children's data and for AI processing (Article 8 GDPR; the age of digital consent is 13 in the UK and 13-16 in EU member states), legitimate interests in keeping the Service secure, and legal obligations.
Children's code
Following the UK Age Appropriate Design Code, child profiles are high-privacy by default: no profiling, no nudge techniques for data sharing, no location tracking, no public visibility and only minimal data.
Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time (without affecting earlier processing). You can also complain to your supervisory authority, for example the UK Information Commissioner's Office or your local EU data protection authority.
International transfers
Our providers may process data in the United States. Where required we rely on safeguards such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or the EU-US Data Privacy Framework.
Response time
We respond to requests within one month, extendable by two further months for complex requests as the law allows.