Privacy Policy - Dr-Kids

Last updated: August 2026

Who we are

Dr-Kids (drkids.app) is a free parental-control web app that lets parents build a private whitelist of YouTube videos for their children; nothing is shown to a child before explicit parental approval. It is built by an independent developer registered in Saudi Arabia (freelance license FL-141494999).

Data we collect

There are no accounts. We do not collect names, email addresses, phone numbers, or any identifying data about you or your children.

• Local data on your device only: the approved video library, child profiles (a nickname and cartoon avatar chosen by the parent), the parent PIN (stored hashed), time limits and the watch log - all stored in your browser and never sent to us.
• What passes through our servers: when searching channels or screening videos, only video titles and channel names are sent to the screening service. Screening results (verdict, reason, category) are cached in a shared store keyed by the public video ID, with no link to you or your device.
• Service protection: IP addresses are used solely for daily request counting to prevent abuse - never for tracking or identification.

How we use, process and share your information

Use: user information is used solely to operate the service: displaying videos a parent approved, screening video titles for child-suitability, and syncing a family's library across their own devices at the parent's request. We do not use data for advertising, marketing analytics, or AI model training, and we never sell or rent it.

Processing: the library, child profiles, time limits and watch log are processed and stored locally in the device browser. What passes through our servers is limited to: video titles, channel names and public IDs (for screening and fetching), and the IP address (only for request counting and abuse prevention).

Internal sharing: there are no employees or internal teams; the app is operated by a single independent developer who does not access any family's data except upon that family's explicit support request.

External sharing: we share only the minimum necessary with these parties:

• YouTube API Services (Google): we send search queries and public channel/video IDs to retrieve their data. No personal user data is sent. YouTube data is governed by the Google Privacy Policy, and users may revoke the application's access to their data via the Google security settings page.
• Anthropic: we send video titles and channel names only, to assess child-suitability. No personal data is sent.
• Netlify: website hosting and serverless functions.
• Google Firebase (Firestore): storage of the shared screening-result cache (keyed by public video ID) and family sync data if a parent enables it.

Retention and deletion: cached YouTube API data (channel data and search results) is refreshed or deleted within 30 days at most in accordance with the YouTube API Services Developer Policies; most of it is refreshed within 6 to 24 hours. Family sync data persists while the parent uses it and is removed via the disconnect button. Local data is erased by clearing browser data or from within the app.

Storage on your device: cookies and similar technologies

The app uses browser localStorage, a technology similar to cookies, to store the following on your device: the approved video library, channels, child profiles, the parent PIN (stored hashed), time limits and watch log, filtering settings, and the family sync code if enabled. This data is read and written on your device exclusively and is never sent to us unless you enable family sync yourself.

The app also uses a Service Worker and Cache Storage to work offline.

Third party: when a video plays, the embedded YouTube player may place cookies or similar technologies on your device under the Google Cookie Policy. We use the youtube-nocookie domain to minimize this, though playback itself may still require some.

Control: you can delete all of this at any time from your browser settings (clear site data) or by uninstalling the app. Deleting it means losing the local library.

Third-party services

• YouTube: playback uses the official YouTube embedded player, governed by the YouTube Terms of Service and the Google Privacy Policy. We use the youtube-nocookie domain where possible.
• AI screening: video titles are screened via the Anthropic API to classify child-suitability. Titles only - no personal data.
• Hosting: the app is hosted on Netlify; the shared cache is stored in Google Firebase.

Children's privacy

The app is built to protect children: it collects no data from them, shows no ads, contains no analytics tracking, and offers the child no search beyond the parent-approved library.

Your rights

Your local data is yours: export, import and deletion are available in the parent dashboard, and clearing browser data erases it completely. Contact: Drconfident2017@gmail.com