Privacy Policy
Effective date: 04/04/2024
​
Introduction
This privacy policy covers the collection and use of information on xcbrgpal.com, which is owned and operated by XcBrgPal, LLC.
We take privacy seriously at BridgePal Kids and this policy is designed to tell you what information we collect and how we use it. Please review this policy from time to time as we may make changes. It forms part of our terms of service and explains your rights and responsibilities when using our services.
Please note that this Privacy Notice is applicable to all instances where we play the role of a Data Controller of your Personal Data, when we collect and process personal data about you for offering our products or services. BridgePal Kids is committed to keeping your Personal Data private. We process any Personal Data we collect from you in accordance with the applicable laws and regulations mentioned and the provisions of this Privacy Notice. Please read the following carefully to understand our practices regarding your Personal Data and how we treat it.
Throughout this document, the terms “we”, “us”, “our” & “ours” refer to BridgePal Kids. And the terms “you”, “your” “yours” & “you and/or your child “refer to YOU (as the User). Our platform is primarily for parents, mentors who are enlisted on our Platform and children below the ages of digital consent (“Child”)
​
Table of Contents
​
Children’s Privacy.
​
-
Third Parties used in relation to Children
Kids Privacy Assured by Kids Web Services: COPPA Safe Harbor & GDPRkids™
​
What Personal Data do we collect & process from Adults?
How do we use your Personal Data?
Lawful bases of processing your Personal Data
When do we share your Personal Data with Third Parties
​
​
Children’s Privacy
Our platform requires collection of personal data of children below the age of 16 years. For such purposes we obtain full verifiable parental consent using trusted third party PRIVO for more information see third party section below < https://www.privo.com/platform-privacy-policy>
When a child registers for an account we collect their:
-
First name
-
Date of birth
-
Parent email address (To seek parental consent)
-
Child email address (optional for password reset purposes)
-
Gender
When a parent provides full verifiable consent, they may choose to add the child’s last name. XcBrgPal is an interactive platform. Children can interact with the service and each other, by posting public comments, images, exchanging private messages and by writing journal entries which can be viewed by their parent.
We collect the information children post, send or receive when logged in using our platform. All comments are moderated by a system administrator prior to posting. However, if a child posts personal information about themselves within a private message or journal entry, that information is collected as well
We collect non-personal data when a child registers for our service. This data may include the country and time zone. This information may be used in XcBrgPal’s parent portal to update the child’s profile, their country and time zone location settings.
At any time, the parents can review their children’s information and request that we delete the personal information. You can make this request by contacting us at info@xcbrgpal.com
Third Parties used in relation to Children
We use the following third parties in relation to children in order to provide our platform.
-
The platform uses sentry.io to monitor performance of the web-app’s frontend to backend and for error tracking to help solve any problems arising from using the web-app. Data scrubbing is enabled to prevent collection and storage of personal information. We have turned on the enhanced privacy controls feature in sentry to limit personally identifiable information (PII) as well as source code for notifications and IP address tracking. For more information on Sentry please visit the privacy policy: https://sentry.io/privacy
-
XcBrgPal partners with Kids Web Services, an FTC approved COPPA Safe Harbor, to obtain full verifiable parental consent. All information collected for verification is stored securely and not used for any other purpose. For more information on Kids Web Services please see here: https://www.kidswebservices.com/privacy-policy/
-
We use Amazon Rekognition’s Content Moderation API to moderate images or video uploaded by children in the comments feature for explicit content. Any content processed by Amazon Rekognition is encrypted and stored at rest. Image and video inputs are processed solely to provide and maintain the service. Amazon Web Services (AWS) does not disclose customer content unless required by law. For more information on how Amazon moderates’ images, please visit their privacy policy: https://aws.amazon.com/privacy
-
We use Hive content moderation API to moderate texts uploaded by children in the comments and chats feature for explicit content and personal identifying information. Text inputs are processed solely to provide and maintain the service. Hive does not disclose customer content unless required by law. For more information on how hive moderates’ text, please visit their privacy policy: https://thehive.ai/privacy
-
Videos on the website are hosted on YouTube. All video content is flagged as made for kids. For more information, please visit the privacy policies and terms: https://www.youtube.com/static?gl=CA&template=terms, https://policies.google.com/privacy?hl=en-US
​
What Personal Data do we collect & process from Adults?
When a child wants to register for BridgePal Kids, we collect a parent’s email address to seek consent for the child’s use of the service. When a parent registers for an account, we collect the following personal information:
-
First and last name
-
Email address
How do we use your Personal Data?
-
To verify your identity
-
To deliver our products and services
-
To communicate with you regarding existing products and services availed by you, including notifications of any alerts or updates
-
To handle enquiries and complaints
-
To comply with legal or regulatory requirements
-
To investigate, prevent, or take action regarding illegal activities, suspected fraud and situations involving potential threats to the safety of any person
-
After providing consent for your child to participate on the platform, you may actively opt to receive marketing information to help us improve the platform and assist with the market analysis of the platform
​​
Lawful bases of processing your Personal Data
-
You have explicitly agreed to/consented to us processing your Personal Data for a specific reason information that is disclosed during the sign-up and sign-in processes
-
The processing is necessary for the performance of the contract we have with you or to take steps to enter into a contract with you
-
The processing is necessary for compliance with a legal obligation​
Where the processing of your child’s data is based on your consent, you have the right to withdraw your consent at any point in time. Please note that should the withdrawal of consent result in us not being able to continue offering our products and services to you and your child, we reserve the right to withdraw or cease our products and services to you upon your withdrawal. You may withdraw consent by contacting us with a written request to the contact details specified below in the ‘Contact Us’ section. Upon receipt of your request to withdraw your consent, the consequences of withdrawal will be communicated to you. Upon your agreement to the same, your request for withdrawal will be processed.
When do we share your Personal Data with Third Parties?
-
We may use third parties in the provision of our products and services to you. We may share your Personal Data with such third parties. The services use the same third-party service providers for all users, regardless of age. For more information on the use of third-party service providers, please see the children’s section above https://www.kidswebservices.com/privacy-policy/
-
With whom your Personal Data may be shared: We may also disclose your Personal Data to appropriate authorities if we believe that it is reasonably necessary to comply with a law, regulation, legal process; protect the safety of any person; address fraud, security, or technical issues; or protect our rights or the rights of those who use our products & services.
-
Where do we process your personal data? Information we collect about you will be processed and stored on servers in the United States. The United States does not have the same Personal Data laws as those in the UK and the EU and has no finding of “adequacy” from the European Union under Article 45 of the GDPR. BridgePal Kids ensures that suitable safeguards are in place to protect the privacy and security of your personal data and to use it only consistent with your relationship with us and the practices described in this Privacy Statement. For more information on the measures taken to protect your data and data transfer please contact us at <info@xcbrgpal.com>
​Use of Cookies and other Tracking Mechanisms
We may use cookies and other tracking mechanisms on our website and other digital properties to collect data about you. Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information about your actions to the owners of the website. Most web browsers allow you some control of cookies through browser settings. Outlined below are the categories of cookies along with a description of what they are used for.
-
Strictly Necessary Cookies - These cookies are needed to run our website, to keep it secure and to comply with regulations that apply to us.
How do we secure your Personal Data?
We are committed to protecting your Personal Data. We take reasonable steps to ensure appropriate physical, technical and managerial safeguards are in place to protect your Personal Data from unauthorized access, alteration, transmission and deletion. We ensure that the third parties who provide services to us under appropriate contracts take appropriate security measures to protect your Personal Data in line with our policies.
How long do we keep your Personal Data?
We keep the Personal Data we collect about you for as long as it is required for the purposes set out in this Privacy Notice and for legal or regulatory reasons. We take reasonable steps to permanently delete your Personal Data that is no longer needed. If you want to opt out of services, review your information or delete it please contact us at <info@xcbrgpal.com>.
A Note to EU and UK citizens:
BridgePal Kids, complies with the rights given to EU and UK Citizens under the General Data Protection Regulation (GDPR). These rights are as follows:
​
•The right to have your personal information updated to ensure it is up-to-date and accurate.
•The right to withdraw your consent to any processing that is currently being done under your consent.
•The right to receive a copy of the personal information we hold about you.
•The right to request that we delete personal information in certain circumstances.
•The right to have us transfer to another controller the personal information that you have provided us with.
•The right to request a restriction on the processing of your data in some limited circumstances.
•The right to request that we stop processing your data.
For more information on how to action these rights please contact us at: <info@xcbrgpal.com>.
If you are an EU or UK citizen and would like to make a complaint about the way we process your Personal Data, you can contact the relevant Data Protection Authority (DPA) in your country.
Links to other websites
Our website may contain links to websites of other organizations. This privacy notice does not cover how those organizations process your Personal Data. We encourage you to read the privacy notices on the other websites you visit.
Contact Us
For any further queries and complaints related to privacy, or exercising your rights, you could reach us at:
Postal Address: PO Box 24552 Raymond Way #636 Lake Forest, CA 92609 - 0636
Contact Email Address: info@xcbrgpal.com
Notification of changes
We regularly review and update our Privacy Notice to ensure it is up-to-date and accurate. Any changes we may make to this Privacy Notice in future will be posted on this page. If we make a material change to the policy, we will contact you before we make the change.