Privacy policy
Last updated 2026-08-01
MyKidCard LLC operates mykidcard.com. If your child is under 13, the children’s privacy notice is the one that governs their information, and it is stricter than this page.
What we collect from you, the parent
- Your email address and a display name
- The result of your identity check — verified or not, and when. We do not keep the ID images or the selfie.
- Your consent choices and the version of the notice you agreed to
- Billing details, held by Stripe. We store a customer id and subscription status.
- A shipping address, only when you order a printed card
- Security and audit logs of actions taken in your account
What we collect from your child
A nickname, a preset avatar, a birth year, and the cards they add, including a photo of each trading card (never of a person). The full list and the full list of exclusions are in the children’s privacy notice.
Why we collect it
- To run the account and the binder
- To verify you are the parent, which the law requires before we collect from a child
- To take payment for a membership, credits, and printed cards
- To keep a compliance record of consent and approvals
- To detect abuse and keep the service secure
Analytics and advertising
We do not sell personal information and we do not run behavioral advertising. Our public marketing pages use first-party analytics to count visits. That analytics never loads on a signed-in page, never loads on any page a child uses, and never captures what you type into a form.
Who we share with
- Supabase — database, authentication, file storage
- Stripe — identity verification, subscriptions, payments
- Vercel — hosting and delivery
- Google (Gemini) — reads a photo of a trading card to identify and grade it. The photo is sent for that purpose and is not stored by us.
- Groq — estimates roughly what an identified card is worth. It receives the card details only, never an image and never anything about your child.
- Printful — prints and ships physical cards. Receives your name and address and the card artwork.
- Resend — sends confirmation codes and account email to you.
- Our customer-relationship system — holds your account as the customer, plus a strictly limited note of who your child connected with. See the children’s privacy notice for the exact fields.
- Law enforcement, when we are legally required to
Each of these acts as our service provider under contract: they may use what we send only to perform the service, never for their own purposes and never to build a profile.
How long we keep things
See the data retention policy.
Security
Access rules are enforced in the database itself, not only in the app. Wallet and ledger changes run through locked, balance-checked database functions. Our written information security program is maintained internally and reviewed at least annually.
Your choices
You can review, correct, export, or delete your information and your child’s at any time by emailing privacy@mykidcard.com. You can cancel a membership at any time from your dashboard.
Contact
MyKidCard LLC, Pittsburgh, PA · privacy@mykidcard.com