Privacy Policy

KidSpot is a community platform for discovering and sharing kid-friendly activities, events, and places in Jávea, Xàbia, and the Costa Blanca. It is operated by USFirst App (contact: info@usfirstapp.com).

• Email address: Provided via Google sign-in. Used to identify your account and send account-related emails.
• Nickname: Chosen by you during sign-up. Displayed publicly on posts you share.
• Google avatar: Your Google profile picture, displayed next to your nickname.
• Kids' ages and gender: Optionally added by you in your profile. Used only to personalise activity suggestions and age filters. Never shared publicly.
• Posts and content: Events, places, and activities you upload, including any photos or flyer images.
• Usage data: Pages visited, posts viewed, RSVPs, saved posts, and votes. Used to improve the app experience.
• IP address: Collected for security and rate-limiting purposes only. Not linked to your profile.

• To provide and improve the KidSpot service
• To display your nickname and posts to the community
• To personalise activity recommendations based on your kids' ages
• To protect the platform against spam and abuse
• To moderate user-generated content

Your account data is retained for as long as your account is active. If you delete your account, all personal data (profile, kids, saved posts, RSVPs, votes) is permanently deleted within 24 hours. Posts you shared remain on the platform but will no longer be associated with your account.

Under GDPR, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data (edit your nickname directly in your profile)
• Deletion — delete your account and all associated data from your profile settings
• Portability — request an export of your data in a machine-readable format
• Objection — object to certain types of processing

To exercise any of these rights, email us at info@usfirstapp.com.

KidSpot uses the following cookies:

• Authentication session: Set by NextAuth.js to keep you signed in. Essential for the service to function.
• Cookie consent: Stored in localStorage to remember that you have accepted this cookie notice.

We do not use advertising or third-party tracking cookies.

KidSpot uses the following third-party services, each with their own privacy policies:

• Google OAuth — sign-in and Google Maps/Places API
• Supabase — database hosting (EU region)
• Cloudinary — image storage and delivery
• OpenAI — AI-assisted event extraction from photos and URLs
• Vercel — hosting and edge delivery

Some third-party services (OpenAI, Vercel) may process data outside the EU. We rely on Standard Contractual Clauses and adequacy decisions where applicable.

For privacy questions or data requests, contact us at info@usfirstapp.com.