ActiKidz privacy policy

JibInfo System Inc. ("ActiKidz", "we") operates an all-in-one platform for kids education providers and families across Canada. This policy explains what personal information we collect, how we use and share it, the rights you have under PIPEDA and Canadian provincial privacy laws, and the technical and organizational safeguards we apply. The authoritative, regularly versioned policy text loads from our content management system when you reach this page in a browser.

What this policy covers

• Account and identity data — name, email, phone, language preference, role (parent / student / teacher / studio owner / administrator), and authentication tokens used to keep you signed in across devices.
• Family and student records — child profiles, grade level, learning goals, attendance, class reports, growth notes, and any documents parents upload to family files.
• Provider operations data — schedules, enrollments, class packages, refunds, payouts, payment-method tokens (we do not store full card numbers — they are tokenized by Stripe), tax records, and merchant onboarding data.
• Usage telemetry — pages visited, search queries on public pages, device type, and approximate IP-derived region — used to improve product quality and detect abuse.
• Communications — emails, WeChat notifications, SMS reminders, and in-app messages exchanged between families and providers via ActiKidz.

How we use your information

We use your information to: deliver the scheduling, enrollment, billing, and communication features you sign up for; protect the platform against fraud and abuse; satisfy legal and tax obligations (Canadian sales tax remittance, financial reporting, KYC for merchants); and improve the product through aggregated analytics. We do not sell personal information, and we do not use family or student data for advertising profiling.

Who can see your data

Parents see their own family's records. Providers (studios, schools, private coaches) see records of students enrolled with them. ActiKidz staff access account data only as needed for support, security incidents, or legal compliance, under role-based access control with audit logging. We share data with vendors that process it on our behalf — Stripe for payments, Telnyx for SMS, WeChat Official Account for in-app and parent notifications, Amazon SES for email, DigitalOcean and AWS S3 for hosting and storage — under contractual confidentiality and processing terms.

International transfers and storage

ActiKidz operates from Canada but stores and processes data on infrastructure located in the United States — primarily DigitalOcean's San Francisco (SFO3) region for application databases and cache, and AWS US regions for email delivery (Amazon SES) and file storage (Amazon S3). Stripe processes payments globally. This means personal information collected from Canadian users is transferred to and stored in the United States, where it may be subject to lawful access requests under US law. We rely on contractual safeguards with each sub-processor and minimize the data shared with each. If you do not wish your information stored outside Canada, please do not use the service. Specific region details are listed in the current published version of this policy.

Retention

We retain account data for as long as your account is active and for a reasonable post-closure period required by tax and audit obligations (typically 7 years for financial records, shorter for non-financial records). Anonymous aggregated analytics may be retained indefinitely.

Your rights — access, correction, deletion, portability

You may request to access, correct, export, or delete your personal information. Parents may exercise these rights on behalf of children under 13. Providers may exercise them on behalf of operations data they own. See our data deletion request page for the deletion workflow, or contact support@actikidz.com for the other rights. We respond within 30 days as required by PIPEDA.

Security

We apply industry-standard encryption in transit (TLS 1.2+) and at rest (AES-256 for managed databases and object storage from our infrastructure provider), least-privilege role-based access control, separation of production and non-production environments, structured audit logging for sensitive operations, and code-level security review before production deploy.

Children's data

ActiKidz is designed for parent-controlled family use. Child profiles are created and managed by a parent or legal guardian account. We do not solicit information directly from children, do not display behavioural advertising to children, and limit child data to what is needed for class scheduling, attendance, growth tracking, and parent–teacher communication.

Cookies and browser storage

We use first-party cookies and browser local storage for authentication, language preference, timezone, anti-CSRF tokens, and remembering UI choices. We do not use third-party advertising cookies. Disabling cookies will break sign-in and most authenticated features.

Changes to this policy

We publish revisions through our content management system with effective dates and version numbers. When changes are material, we will notify affected accounts in advance through the in-app banner and email, and request fresh acknowledgement where consent is required.

Contact

Privacy questions and rights requests: support@actikidz.com. Postal: JibInfo System Inc., TH7-5681 Birney Ave, Vancouver, BC V6S 0L5, Canada.