Privacy Policy

Pomet, Inc. · Effective date: September 3, 2026 · Last updated: September 3, 2026

KidBrief is built on a simple premise: information about your children belongs to your family. That extends to how we treat it. We built the app so your kids’ profiles stay on your own device by default, and this policy explains what we collect, who can see it, how we use it, and how we protect it. Plain language, no surprises.

What we collect

Sources of information

We collect personal information from the following sources: (a) directly from you, when you set up your family, add a profile, or contact us; and (b) from your device, such as device type, operating system version, and crash reports.

We do not collect information from the caregivers you share a brief with. See Caregiver information below.

What lives on your device, not with us

KidBrief is local-first. Your kids’ profiles — names, photos, routines, allergies, medications, emergency contacts, the small details that make a hard evening go well — are created and stored on your own device. We do not have accounts. There is no signup, no password held by us, and no copy of your family sitting on our servers waiting to be useful to us later.

In normal use, your family’s profile never leaves your device. There are three narrow exceptions, and each one is described below: a brief you deliberately share, text you send for AI sorting, and anything you email us yourself.

Where the app connects

The KidBrief app contacts exactly two services, both of them ours and both hosted on Cloudflare:

Our sorting service, which turns what you wrote or said into structured profile fields.
Our sharing service, which holds an encrypted brief while its link is active.

There are no advertising networks, no third-party trackers, and no other destinations of any kind inside the app.

When you create a share link for a sitter or a grandparent, KidBrief encrypts that one brief on your phone and uploads only the encrypted result to servers we operate, so the caregiver can open it in their browser without installing anything.

That brief contains only what you chose to include: the kids you selected, the fields on their profiles, any photos attached to those fields, any voice recordings in the brief — such as how a child’s name is pronounced, or a spoken note you left — your emergency contacts, your pets, and the note you wrote for the evening.

We cannot read any of it. The key that unlocks the brief is never sent to us. It travels inside the share link itself, in the portion after the “#” symbol, which web browsers never transmit to a server. Our server stores an encrypted file it has no means to open; the caregiver’s browser holds the key and unlocks the brief on their own device. This is not a promise about our conduct that we could quietly change — it is a property of how the system is built.

The brief is reachable only by the link’s random, unguessable token. It expires on the schedule you picked — a share is never open-ended — and you can revoke it at any time from the app. When a share expires or is revoked, we stop serving it immediately and delete the encrypted copy from our servers within 30 days.

Nothing is shared unless you tap share. Closing the app, adding a field, or updating a profile does not send anything anywhere.

Voice notes and brain-dumps

There are two kinds of audio in KidBrief, and they are treated differently.

When you speak so KidBrief can sort what you said into profile fields, the audio is transcribed on your device and the recording is not sent to us or to anyone else. The resulting text is sent to our sorting service and on to OpenAI, which returns it as structured fields. That text can contain health details, because that is often what you are describing.

We hold a Zero Data Retention agreement with OpenAI: the text we send is not retained by them and is never used to train models. We do not store the transcript on our servers either — the structured result comes back to your device and stays there.

Recordings you deliberately attach to a brief — a name pronunciation, or a spoken note for the sitter — are stored on your device and travel inside the encrypted share when you share that brief, so the caregiver can play them. They are encrypted along with everything else in the brief, and we cannot listen to them.

Health and medical details

Allergies, medications, dosages, conditions, pediatrician contacts, and where the EpiPen is kept are treated as sensitive personal information under laws including the California Consumer Privacy Act (as amended by the CPRA) and consumer health data laws in Washington and Nevada.

To be precise about what that does and does not mean: KidBrief is not a healthcare provider, insurer, or vendor to one, so HIPAA does not apply to us. But we handle this information as the sensitive category it is. We process it for one purpose — displaying it to you and to the caregivers you deliberately share it with. We do not use it for anything else, we do not sell it, and we do not share it with advertisers or data brokers. California residents have the right to limit the use and disclosure of sensitive personal information under CPRA § 1798.121.

Because this information concerns your children, who cannot consent for themselves, you are providing it as their parent or legal guardian and consenting on their behalf. You can withdraw that information at any time by deleting the fields, which removes it from your device.

Information about your children

KidBrief is designed to be used by a parent or legal guardian describing their own children. Children do not use KidBrief, do not create accounts, and are not the audience for the app.

The information in a kid profile is entered by the adult responsible for that child, exercising their own authority as that child’s parent or guardian. We do not collect information from children, we do not ask children for information, and we do not knowingly permit anyone under 18 to set up KidBrief.

If you are not a parent or guardian of the children you are describing, or you do not have that parent’s permission, do not use KidBrief for those profiles.

Caregiver information

When you share a brief, we collect nothing about the person who opens it.

We do not record who opened a link or when. We do not store their IP address, their browser, or their device. We do not set cookies on the sitter page, we do not build profiles of caregivers, and there is no account for them to create. A caregiver opens a link, reads the brief, and closes it, and we are none the wiser.

Two honest caveats. Our infrastructure provider, Cloudflare, processes network requests to serve the page and may keep its own short-lived operational logs to route traffic and stop attacks, as any provider of that kind does — we do not receive those logs, query them, or build anything from them. And the brief itself is encrypted before it leaves your phone, so even the copy we hold is unreadable to us.

There is also no way for a caregiver to send anything back through the brief. It is something to read, not a channel.

Some caregivers are teenagers. Because we collect nothing when a link is opened, there is nothing of theirs for us to hold or to delete.

Device and usage data

We collect basic technical information to keep the app running — device type, operating system version, and crash reports, which reach us through Apple’s standard developer tools. This information is aggregated or deidentified and used only to make the product work better.

Waitlist and marketing

If you join our early access list, we collect your email address and use it for launch announcements and significant product updates. We will never sell it or share it with advertisers. You can unsubscribe at any time.

Feedback and support

If you send us feedback or a support message, we receive it and we read it — that’s what it’s for. These messages are separate from your family’s profiles: nothing stored in KidBrief is attached to them unless you paste it in yourself.

Cookies and analytics

Our website at kidbrief.app may use standard website analytics to understand visits — pages viewed, how you arrived, approximate location derived from your IP address, and device and browser type. This information is kept separate from your KidBrief app data, is not used to identify you personally, and is never used for advertising. Where required by law, we ask for your consent before placing non-essential cookies, and you can withdraw consent or disable cookies in your browser settings at any time.

The app itself contains no analytics and no tracking of any kind.

Who has access to it

You

Your family’s profiles belong to you and live on your device. KidBrief is not a shared or collaborative product. Other KidBrief users cannot see your family.

The caregivers you choose

Only people you hand a link to. That link is unguessable, it expires, and you can revoke it. A caregiver sees exactly the kids and fields you selected for that share — nothing else, and nothing from past or future shares. Anyone holding the complete link can open that brief until it expires or you revoke it, so treat the link itself as the key it carries.

KidBrief employees

We never read your kids’ profiles — and in the case of a shared brief, we could not if we tried, because we do not hold the key that opens it. Access to any user content is technically restricted and limited to authorized personnel, only when strictly necessary for security, support, maintenance, or legal compliance.

Cloudflare

Cloudflare hosts everything we run: the KidBrief website, the sharing service, and the sorting service that turns your words into structured fields.

The sharing service stores encrypted briefs while their links are active. Because each brief is encrypted on your device and the key never reaches the server, Cloudflare stores data it cannot read. The sorting service stores nothing at all — text arrives, structured fields go back, and nothing is written down.

Cloudflare operates as a data processor under our instructions and does not use your data for any independent purpose.

OpenAI

OpenAI processes brain-dump text into structured fields under a signed Zero Data Retention agreement. Photos, voice recordings, and shared briefs are never sent to OpenAI.

Apple

Apple distributes the app and provides crash reports through its standard developer tools.

Our other service providers

We work with a small number of additional providers — for example, to store waitlist email addresses — who process data on our behalf, and this list may change as the product grows. You can request the current list at any time by emailing privacy@kidbrief.app.

Legal and regulatory authorities

We may be required to disclose data to law enforcement or regulatory bodies if compelled by law. Where legally permitted and appropriate, we will notify you. Because your profiles live on your device, and because shared briefs are encrypted with a key we never hold, in most cases there is very little we are able to disclose.

Business transfers

If Pomet, Inc. is acquired, merges, or sells assets, information we hold may transfer as part of that transaction. Any acquirer would be bound by the commitments in this policy, and we would notify you before your data became subject to a different one. Because your family’s profiles live on your device rather than on our servers, there is very little about your children for any acquirer to receive.

We will not sell your personal data or share it with advertisers. We will never sell data about your children, in any form, to anyone.

How it’s used

To make the app work

We use your data to run KidBrief: sorting a brain-dump into fields, building the brief a caregiver sees, delivering the note they leave you, and reminding you when something looks out of date.

KidBrief uses AI to turn what you write or say into structured profile fields. This is an assistive tool for organizing what you wrote. KidBrief does not make automated decisions about you that produce legal or similarly significant effects. You can always edit, correct, or delete anything the AI produced.

Improving the product

We use aggregated and de-identified information to understand how KidBrief is used. This information is stripped of direct identifiers and processed so it cannot reasonably be linked back to any individual family.

We never use your family’s profiles, photos, voice recordings, or brain-dumps to train AI models, and we never share them with anyone for that purpose.

Communicating with you

KidBrief does not send push notifications. The app has no notification code in it and will not message you on your phone.

If you have given us your email address, we use it for product updates and service communications, and you can unsubscribe from marketing email at any time. We will still send you essential service and security messages. If we ever add notifications, we will update this policy and ask before turning them on.

Security and abuse prevention

We may use technical and usage data to detect and prevent misuse, fraud, or attacks on the service — for example, to stop someone draining our AI endpoint. This is never used to profile you.

Legal bases

Where GDPR applies, we process personal data on these bases: (a) Contract performance (Art. 6(1)(b)) — providing KidBrief, including share links and field extraction; (b) Legitimate interests (Art. 6(1)(f)) — product improvement, security, and abuse prevention, where not overridden by your rights; (c) Consent (Art. 6(1)(a)) — marketing communications; (d) Legal obligation (Art. 6(1)(c)) — complying with applicable law. You may withdraw consent at any time without affecting processing that already happened lawfully.

Health-related details you record — allergies, medications, conditions — are processed on your instruction, for the single purpose of showing them to you and to the caregivers you choose to share them with. We do not use them for anything else. KidBrief is not currently distributed in the EU or EEA.

If we introduce materially different uses of your data, we will update this policy and ask for consent where required.

How it’s protected

On your device

Family data is stored on your device, protected by iOS’s built-in file encryption, which keeps it unreadable while the device is locked. KidBrief also supports an app lock — a passcode, or Face ID or Touch ID where your device offers it — so the profiles are not readable by someone who picks up your unlocked phone.

On Face ID and Touch ID: when you unlock KidBrief with your face or fingerprint, Apple’s system tells the app only whether the check passed or failed. Your biometric data never leaves Apple’s Secure Enclave on your own device. KidBrief does not collect, receive, store, or have any access to a scan of your face, your fingerprint, or any other biometric identifier, and we could not share one if we wanted to.

Shared briefs are encrypted before they leave your phone

This is the strongest privacy property KidBrief has, so it is worth stating precisely. When you share a brief, your phone generates a fresh 256-bit key, encrypts the brief with it, and uploads only the encrypted result. The key is placed in the share link after the “#” symbol. Browsers do not send that portion of a web address to servers, so the key never reaches us. The caregiver’s browser reads the key from the link they were given and decrypts the brief on their own device.

The practical consequence: our servers hold encrypted files they have no means to open.

Share tokens are generated from at least 24 bytes of cryptographic randomness — 192 bits, far beyond guessing. Expiry and revocation are enforced on our server on every request. Shared pages are marked noindex so they cannot be found through search engines. An expired, revoked, or invalid link reveals nothing about your family — not even whether it was ever valid.

In transit and at rest

Everything that travels to our servers moves over encrypted connections (TLS). Shared briefs are additionally encrypted on your device beforehand, as described above, and each is stored separately, reachable only by its own token.

Zero Data Retention with OpenAI

Under our signed Zero Data Retention agreement, text sent for processing is not retained for model training or long-term storage.

Data minimization

We only collect what we need. We do not build advertising profiles and we do not do targeted advertising. We keep data only as long as it is serving you.

Breach notification

If a breach affects your personal information, we will notify you without undue delay and take immediate steps to contain and remediate it. Where the law sets a deadline for notifying you or a regulator, we will meet it.

Your rights

To exercise any of these, email privacy@kidbrief.app. We will respond within 30 days.

Access

You can request a copy of any personal data we hold about you. Note that your family’s profiles are already in your hands — they are on your device.

Correction

You can edit any profile, field, or photo directly in the app at any time.

Deletion

Deleting a kid, a field, or the app itself removes that data from your device. You can revoke every active share link from the app, which deletes the shared copies from our servers. To have us delete anything else we hold, email privacy@kidbrief.app.

Export

You can export your family’s data from the app as a portable backup file at any time, and restore it on another device.

Opt out of marketing

Unsubscribe from any email, or contact us directly.

If you are asking about someone else’s KidBrief

Because family profiles live on the user’s own device, we usually cannot see, retrieve, or delete what someone else has stored. If you contact us about data you believe a KidBrief user holds about you or your child, we will take reasonable steps to help — which typically means relaying your request to that user.

Before we act on any request, we verify who is asking, using information proportionate to the sensitivity of what is being asked for. We will not disclose the contents of anyone’s KidBrief to a third party on request.

A note on custody and family disputes. We are not able to determine who has legal authority over a child, and we will not take a side. We do not adjudicate custody, and being contacted by one parent does not cause us to disclose or delete another parent’s data. If a court of competent jurisdiction orders us to act, we will comply with that order. If a request concerns immediate danger to a child, contact your local authorities — they can reach us faster through legal process than we can act on our own.

Your state privacy rights

Depending on where you live, you may have additional rights under your state’s privacy law, including the right to: (a) confirm whether we process your personal data and access it; (b) correct inaccuracies; (c) delete it; (d) obtain a portable copy; (e) opt out of sale, targeted advertising, or profiling; (f) limit the use of sensitive personal information; and (g) appeal if we deny a request. We do not sell your personal data, use it for targeted advertising, or profile you for decisions producing legal or similarly significant effects. Email privacy@kidbrief.app. To appeal a denied request, write to us with the subject line “Appeal.”

California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect and how it is used, the right to delete, the right to correct, the right to opt out of sale or sharing, and the right to limit the use and disclosure of sensitive personal information. We do not sell or share your personal information. Email privacy@kidbrief.app. We will not discriminate against you for exercising these rights.

EU/EEA and UK residents

You have the right to access and receive a copy of your data; rectify inaccurate data; erase your data; restrict processing; object to processing based on legitimate interests; data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority. Email privacy@kidbrief.app.

Data retention

Your family’s profiles are retained on your device for as long as you keep them. We do not hold a copy, so there is nothing on our side to age out.

Shared briefs stop being served the moment they expire or you revoke them. The encrypted copy is deleted when you revoke it, and every stored copy is deleted automatically within 30 days regardless — the longest share you can create lasts one week, so nothing live is ever cut short. There are no caregiver open-records or IP addresses to delete, because we never collected any.

Before you delete the app, revoke any active share links. Deleting the app removes your data from your device but does not automatically expire links already out in the world — and once the app is gone, you no longer have the means to revoke them. If this happens, email privacy@kidbrief.app and we will revoke them for you.

Waitlist email addresses are retained until you unsubscribe or until 24 months of inactivity, whichever comes first.

Device and usage data is retained in aggregated form for up to 12 months.

In limited cases we may retain certain records for longer where required by law — for example, financial recordkeeping — but this never includes your family’s profile content.

International transfers

KidBrief is operated from the United States and relies on a small number of trusted service providers that may process data in the United States or other countries. The United States does not have an EU adequacy decision. For transfers from the EEA or UK, we rely on Standard Contractual Clauses approved by the European Commission (and the UK International Data Transfer Addendum where applicable), supplemented by additional safeguards where necessary. You can request a copy by contacting privacy@kidbrief.app.

Changes to this policy

We may update this policy as the product evolves or as laws change. If we make material changes, we will notify you in the app and update the effective date at the top of this page. Where required by law, we will ask for your consent before applying material changes to how we process your data.

Contact us

Questions, concerns, or requests about this policy or your personal data:

Email: privacy@kidbrief.app

Address: Pomet, Inc. · 2261 Market Street STE 76796, San Francisco, CA 94114

Pomet, Inc. is the data controller for the personal data we hold — encrypted shared briefs, text sent for AI processing, waitlist addresses, and usage data. For the profiles stored on your own device, you are the one who decides what is recorded and who sees it.