Privacy Policy
App name: MyKidPix
Developer: Barbarosa-Developer
Contact: support-mykidpix@googlegroups.com
Last updated: June 13, 2026
1. Overview
MyKidPix is an Android app that monitors the WhatsApp media folder on your device, uses on-device face recognition to identify photos containing your registered children, and automatically backs them up to designated Google Photos albums.
This policy explains what data we collect, how we use it, and your rights under applicable privacy laws including GDPR and CCPA.
2. Data We Collect
2.1 Data processed on-device only (not collected)
| Data | How it’s used | Where it’s stored |
|---|---|---|
| Biometric face recognition data — face templates (128-dimension embeddings generated by TensorFlow Lite FaceNet) | Identifying your children in photos | Encrypted on your device only — never uploaded |
| Children’s profile photos (the reference photo you provide when registering a child) | Source for generating face embeddings | On your device only |
| Photo file paths and metadata (which files have been processed) | Tracking processing state | Encrypted on your device only |
Face data is processed entirely on your device using a local AI model. It is never transmitted to any server or third party.
2.2 Data transmitted off-device
| Data | Recipient | Purpose | Required? |
|---|---|---|---|
| Photo files (original image bytes from WhatsApp) | Google Photos (your own account) | Backup to your personal Google Photos album | Only when you connect Google Photos and approve an upload |
| Google OAuth tokens | Google (oauth2.googleapis.com) | Authenticating your Google account | Only when you sign in with Google |
| Google account email address | Stored on your device only | Displaying which Google account is connected in Settings | Only when you sign in with Google |
No personal data, biometric data, or AI-generated data is ever sent off your device — only the raw photo files you choose to back up.
3. Background Data Collection
MyKidPix runs a background service that monitors your device’s WhatsApp media folder even when the app is closed or not in use. This is core functionality — it allows the app to detect photos as soon as they arrive, without you needing to open the app each time.
You can disable background monitoring at any time from the Home screen toggle in the app.
4. How We Use Data
- Face embeddings: Stored locally and used only to identify whether a photo contains a registered child. They are never shared with any third party.
- Photo files: Uploaded only to your own Google Photos account, under your control, when you enable the backup feature.
- OAuth tokens: Used only to authenticate uploads to your Google Photos account. Stored securely on your device.
We do not use your data for advertising, profiling, or any purpose other than the backup functionality described above.
5. Data Sharing
We do not sell, rent, or share your personal data with any third party, except:
- Google Photos API: When you connect Google Photos, photo files are uploaded to Google’s servers under your Google account. This data is governed by Google’s Privacy Policy. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Legal requirements: We may disclose data if required by law or to protect our rights.
6. Data Deletion and Account Deletion
How to delete your account / disconnect Google
MyKidPix authenticates via Google OAuth — your “account” in the app is your connected Google identity. To disconnect it:
- Open MyKidPix → Settings
- Tap Sign out
This removes all stored OAuth tokens from your device. MyKidPix will no longer have access to your Google Photos account. Photos already uploaded to Google Photos remain in your Google account and must be managed via the Google Photos app — MyKidPix does not delete them.
How to delete all local data
| What to delete | How |
|---|---|
| A child’s face data and profile | Kids tab → long-press the child → Delete |
| All processed photo records | Settings → Clear review queue |
| Everything (all embeddings, profiles, records, and tokens) | Uninstall the app |
Because MyKidPix does not operate any external servers, no user data is retained by the developer after uninstallation.
Data retention periods
| Data | Retained until |
|---|---|
| Face embeddings and child profiles | You delete the child profile, or uninstall the app |
| Processed photo records (file paths, processing state) | You clear the review queue, or uninstall the app |
| Google OAuth tokens | You sign out from Settings, or uninstall the app |
| Photos in Google Photos | Governed by your Google account settings — MyKidPix does not delete them |
7. Your Rights (GDPR — EU/EEA Users)
If you are located in the European Union or European Economic Area, you have the following rights:
- Right to access: You can view all data stored by the app directly within the app (children profiles, processed photos).
- Right to deletion: You can delete any child profile (including all associated face embeddings) from the Kids tab. You can clear the review queue and all processing records from Settings. Uninstalling the app removes all locally stored data.
- Right to object: You can disable background monitoring at any time from the Home screen toggle.
- Right to portability: Face embeddings are stored locally on your device and can be accessed directly via the app’s database if needed.
- Right to withdraw consent: You can withdraw consent at any time by disabling monitoring and deleting all child profiles. Uninstalling the app fully removes all data.
To exercise any of these rights or for questions, contact: support-mykidpix@googlegroups.com
8. Your Rights (CCPA — California Users)
If you are a California resident, you have the right to:
- Know what personal information is collected about you (see Section 2 above).
- Delete your personal information (see Section 7 above — all deletion options apply equally).
- Opt out of sale: We do not sell your personal information.
- Non-discrimination: We will not discriminate against you for exercising any of these rights.
To submit a CCPA request, contact: support-mykidpix@googlegroups.com
9. Children’s Privacy
MyKidPix is designed for use by parents to manage their own children’s photos. The app is intended for use by adults (parents/guardians) only. We do not knowingly collect data from children directly — all data is provided and controlled by the parent using the app.
Face recognition data about children is stored locally on the parent’s device and is not transmitted to us or any third party.
10. Security
- All data stored on-device is encrypted using SQLCipher (AES-256).
- All communications with Google’s servers use HTTPS.
- OAuth tokens are stored in the app’s private storage, inaccessible to other apps.
11. Changes to This Policy
We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy. For material changes, we will notify you within the app.
12. Contact
For any privacy questions, requests, or complaints:
Email: support-mykidpix@googlegroups.com
We aim to respond to all requests within 30 days.