Privacy policy

Last updated 3 October 2026

Who is responsible

Nubiss GmbH, [street, postcode, city, country] ("we") operates NubiiKids: the iOS app and the parent website. Contact for privacy questions: [privacy email].

What NubiiKids is for

Parents use NubiiKids to set screen-time rules for their own children's devices and to see how those devices are used. We process data only to provide this service to the family. We do not sell data, show ads, or use tracking or analytics tools, and the app contains no third-party SDKs.

What we process

• Parent account: name, email address, password (stored hashed), family and guardian settings, sign-in and security log.
• Children's profiles: first name, picture (emoji), age group, colour, kid PIN (stored only as a salted hash).
• Device data: a device identifier, device name and model, app version, sync status.
• Usage: rules, schedules, minutes used per app or category, requests for more time, emergency unlocks.
• Websites: the host names of websites and services the child's device connects to (for example youtube.com) with time and whether they were allowed. Never full addresses, page contents, searches or messages.
• Wellbeing (optional): mood and sleep check-ins, medicine reminders and doses, chores and routines a parent sets up.
• Groups and classes (optional): if a parent joins one, other member families see only the child's chosen display name, picture and group stars.

Apple decides which apps a child may use through Screen Time. NubiiKids never sees the names of apps unless a parent types them, and it never reads messages, photos, contacts or location.

Legal basis

Providing the service the parent signed up for (Art. 6(1)(b) GDPR). Wellbeing data about children is processed only when a parent turns those features on, on the basis of the parent's consent (Art. 9(2)(a) GDPR), which can be withdrawn at any time by turning the feature off or deleting the data. The security log is kept on the basis of our legitimate interest in protecting accounts (Art. 6(1)(f) GDPR).

Where data is stored and for how long

Data is stored on servers of [hosting provider and region, e.g. EU] and on the family's own devices. Activity and website logs are kept for 90 days; data on the device is removed after it has synced and is older than 30 days. Everything else is kept until the parent deletes it or deletes the account.

Deleting your account and data

Parents can delete their account at any time on the website under My account → Delete my account, and from the app (parent area → More → Account). If they are the family's last administrator, the family and all of its children's data are deleted. The security log keeps sign-in records without the family link for up to 365 days.

Your rights

You can ask for access, correction, deletion, restriction, portability, and object to processing, and you can complain to a data protection supervisory authority. Write to [privacy email].

Children

NubiiKids is used by parents for their children. Children do not create accounts; a parent sets up each child's profile and decides which features are used.