隐私政策
最后更新：2026 年 11 月 1 日
KinPiko（伴可）由新加坡公司 VERTA AI PTE. LTD.（UEN：202608885N，下称「我们」）提供。家长用 iPhone App，宝贝用 Apple Watch App。本政策说明我们收集哪些数据、怎么用、谁能看到，以及你能怎么删除。
请先了解这三点：
- 手表绑定并获得定位权限后，即使是免费版，也会持续采集宝贝的位置，不只是在家长查看时。
- 绑定的家长和受邀家属可以查看宝贝和好友的聊天记录（文字和语音）。这也包括对方小朋友发来的内容，手表上会说明这一点。
- 消息在传输时加密，但不是端到端加密，服务器上保存着消息内容。
面向儿童的说明
手表 App 由宝贝使用。使用前必须由家长或监护人在 iPhone App 里输入手表上的绑定码，没有绑定的手表不能使用任何功能。绑定就表示你是宝贝的家长或监护人，并同意我们按本政策收集和处理宝贝的数据。
宝贝不需要提供邮箱或手机号。如果你认为我们在未经家长同意的情况下收集了孩子的数据，请联系我们，我们会删除。
我们收集的数据
家长（iPhone App）
- 账号标识：Sign in with Apple 提供的用户标识。我们不请求你的姓名和邮箱。
- 资料：你设置的昵称和头像，以及你给宝贝起的名字。
- 消息：你和宝贝之间的文字和语音。
- 订阅记录：Apple 提供的交易标识、产品和到期时间。我们拿不到你的付款信息。
- 推送标识和通知设置：用来发送通知。
宝贝（Apple Watch App）
- 精确位置：经纬度、精度和时间。低精度档大约每 5 分钟一次，高精度档大约每 3 分钟一次；家长请求最新位置时也会额外定位。需要在手表上允许定位。
- 电量和在线状态：让家长知道手表是否在线、还有多少电。
- 消息：宝贝发送和收到的文字、表情和语音。只有在录语音时才使用麦克风。
- 资料和好友：昵称、头像和好友列表，以及手表自动生成的账号标识。
- 推送标识：用来发送通知和请求手表定位。
服务器日志
服务器运行日志包含 IP 地址、请求路径和时间，用于防止滥用、保障安全和排查故障，只短期保留。
我们怎么使用
只用来提供 KinPiko 本身的功能：显示位置和轨迹、传递消息、发送通知、管理订阅、防止滥用和排查故障。我们没有广告，不使用第三方统计或追踪工具，不出售数据，也不用这些数据训练 AI 模型。
谁能看到
- 绑定的家长（管理员）和受邀家属：宝贝的位置、轨迹、电量、好友，以及宝贝和好友的聊天记录。家属由管理员邀请，管理员可以随时移除。
- 宝贝的好友：宝贝的昵称、头像和发给对方的消息。好友看不到位置。对方的家长和家属也能看到对方孩子和宝贝的聊天。
- 帮我们提供服务的公司：Apple（登录、推送和订阅）、Cloudflare（网络传输和官网托管）以及我们的服务器托管商。它们只为提供服务而处理数据。
- 依法要求时：法律要求或为保护人身安全所必需时，我们可能向有关部门提供数据。
这些公司和我们的服务器可能位于你所在的国家或地区之外。
保存多久
- 位置，免费版：最近 24 小时，另外保留最新的一个点。
- 位置，会员：最近 30 天；会员到期后的 30 天内仍按 30 天保留，之后按免费版处理。
- 消息：最多 90 天，到期自动删除。
- 账号资料：保留到账号被删除。
- 备份：被删除的数据可能在加密备份里多留一段时间，备份轮换后清除。
你的选择和权利
- 解除绑定：管理员可以在宝贝详情页解除绑定。手表的位置记录、手表和家长及家属之间的消息会被删除。
- 删除账号：在 iPhone App「我的」页面底部删除。你的账号、你和宝贝之间的消息会被删除，并撤销你对 KinPiko 的 Apple 登录授权；你是管理员时，绑定的手表会解除绑定并清空位置记录。
- 删除宝贝的账号和聊天：解除绑定和删除账号后，宝贝和其他小朋友之间的好友关系和聊天会保留到 90 天自动删除，方便重新绑定后继续使用。如需立即全部删除，请写信给我们。家长也可以随时在 App 里删除宝贝的好友。
- 关闭定位或麦克风：可以在手表的系统设置里关闭，相关功能会停止工作。
- 查阅和更正：可以写信给我们，查阅或更正你和你孩子的数据。我们也会按你所在地的法律（例如新加坡 PDPA、美国 COPPA）处理其他请求。
删除账号不会自动取消 Apple 订阅，请到系统设置中取消。
数据安全
所有通信都通过 HTTPS 加密传输，访问需要登录凭证，登录凭证保存在设备的 Keychain 里。不过没有绝对安全的系统，如果发生影响你的数据泄露，我们会按法律要求通知你。
政策变更
政策有变化时我们会更新这个页面和日期；重大变化会在 App 内提示。
联系我们
VERTA AI PTE. LTD.（UEN：202608885N，数据保护事务联系人同此邮箱）
16 Raffles Quay, #09-1, Hong Leong Building, Singapore 048581
support@kinpiko.com
Privacy Policy
Last updated: November 1, 2026
KinPiko is provided by VERTA AI PTE. LTD., a Singapore company (UEN 202608885N) ("we"). Parents use the iPhone app and children use the Apple Watch app. This policy explains what we collect, how we use it, who can see it, and how you can delete it.
Three things to know first:
- Once a watch is linked and has location permission, it keeps collecting your child's location, even on the free plan, not only when a parent is looking.
- The linked parent and invited family can read your child's chats with friends (text and voice), including what the other child sends. The watch explains this.
- Messages are encrypted in transit but are not end-to-end encrypted. Our servers store their content.
Children
The watch app is used by children. Before it can be used, a parent or guardian must enter the code shown on the watch into the iPhone app; a watch that isn't linked can't use any feature. By linking, you confirm you are the child's parent or guardian and consent to us collecting and processing the child's data as described here.
Children are not asked for an email address or phone number. If you believe we collected a child's data without parental consent, contact us and we will delete it.
What we collect
Parents (iPhone app)
- Account identifier: the user identifier from Sign in with Apple. We don't request your name or email.
- Profile: your nickname and avatar, and the name you give your child.
- Messages: text and voice between you and your child.
- Subscription records: the transaction identifier, product and expiry date from Apple. We never receive your payment details.
- Push token and notification settings: to send notifications.
Children (Apple Watch app)
- Precise location: coordinates, accuracy and time, about every 5 minutes on low accuracy and every 3 minutes on high accuracy, plus when a parent requests the latest location. Requires location permission on the watch.
- Battery and online status: so parents can see whether the watch is online and charged.
- Messages: text, emoji and voice sent and received. The microphone is used only while recording a voice message.
- Profile and friends: nickname, avatar, friend list, and an account identifier generated by the watch.
- Push token: to send notifications and request a location update.
Server logs
Server logs contain IP addresses, request paths and times. We use them to prevent abuse, keep the service secure and fix problems, and keep them only for a short time.
How we use data
Only to provide KinPiko: showing location and history, delivering messages, sending notifications, managing subscriptions, preventing abuse and fixing problems. We have no ads, use no third-party analytics or tracking, never sell data, and don't use it to train AI models.
Who can see it
- The linked parent (admin) and invited family: your child's location, history, battery, friends, and chats with friends. The admin invites family members and can remove them at any time.
- Your child's friends: your child's nickname, avatar and the messages sent to them. Friends can't see location. A friend's parent and family can also see that friend's chats with your child.
- Companies that help us run the service: Apple (sign-in, push and subscriptions), Cloudflare (network transit and website hosting) and our server host. They process data only to provide the service.
- When required: we may disclose data where the law requires it or where necessary to protect someone's safety.
These companies and our servers may be located outside your country or region.
How long we keep it
- Location, free plan: the last 24 hours, plus the most recent point.
- Location, members: the last 30 days. This continues for 30 days after a membership ends, then the free plan applies.
- Messages: up to 90 days, then deleted automatically.
- Account data: until the account is deleted.
- Backups: deleted data may remain in encrypted backups for a limited time until they are rotated out.
Your choices and rights
- Unlink a watch: the admin can unlink from the child's page. The watch's location records and its messages with the parent and family are deleted.
- Delete your account: at the bottom of the Me tab in the iPhone app. This deletes your account and your messages with your child, and revokes your Sign in with Apple authorization for KinPiko. If you are the admin, linked watches are unlinked and their location records cleared.
- Delete your child's account and chats: after unlinking or deleting your account, your child's friendships and chats with other children stay until they expire at 90 days, so they can continue if the watch is linked again. To delete everything right away, email us. Parents can also remove friends in the app at any time.
- Turn off location or microphone: in the watch's system settings. Related features will stop working.
- Access and correction: email us to access or correct your or your child's data. We also handle other requests under the laws that apply to you, such as Singapore's PDPA and the US COPPA.
Deleting your account doesn't cancel an Apple subscription. Cancel it in system settings.
Security
All communication is encrypted with HTTPS, access requires a credential, and that credential is stored in the device's Keychain. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires.
Changes
When this policy changes we update this page and its date. Significant changes are also announced in the app.
Contact
VERTA AI PTE. LTD., UEN 202608885N (also our data protection contact)
16 Raffles Quay, #09-1, Hong Leong Building, Singapore 048581
support@kinpiko.com
