Last Updated: March 27, 2026
This California Privacy Notice (“Notice”) supplements Kupola’s Privacy Policy and applies only to residents of California to the extent the California Consumer Privacy Act, as amended (“CCPA”), applies.
This Notice explains how Kupola (“Kupola,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information relating to California residents, and describes the rights California residents may have under applicable law.
This Notice should be read together with our Privacy Policy, Cookies Policy, and Data Retention & Deletion Policy.
1. Scope
This Notice applies to personal information collected from California residents through:
- the Kupola website;
- the Kupola parent-facing services and apps;
- the Kupola Jr. child-device services and apps;
- customer support interactions;
- communications relating to the Service; and
- other pages, tools, or features that link to this Notice.
2. Categories of Personal Information We Collect
Depending on how Kupola is used, we may collect the following categories of personal information described under California law:
A. Identifiers
Examples may include:
- name;
- email address;
- phone number;
- account identifier;
- device identifier;
- IP address;
- notification token.
B. Customer Records Information
Examples may include:
- family profile information;
- child profile information;
- support records;
- billing-related information, if applicable.
C. Internet or Other Electronic Network Activity Information
Examples may include:
- app usage information;
- phone usage information;
- website activity related to the Kupola website;
- feature interaction history;
- blocked or restricted app or website events;
- activity logs connected to schedules, limits, or related controls.
D. Geolocation Data
Examples may include:
- current location;
- recent location events;
- location history;
- geofence or place-related events;
- check-in, checkout, arrival, or departure events;
- no-show related events.
E. Sensitive Personal Information
Depending on the features enabled, we may collect sensitive personal information such as:
- precise geolocation data;
- account log-in or authentication-related information, where applicable.
F. Audio, Electronic, or Similar Information
Examples may include:
- support messages;
- communication records;
- screenshots, diagnostics, or attachments voluntarily submitted to support.
G. Inferences
We may generate limited inferences from activity patterns or feature usage only as needed to operate family safety, alerting, reporting, and related service functions.
3. Sources of Personal Information
We may collect personal information from:
- parents or legal guardians directly;
- child devices connected to the Service;
- account setup, settings, and permissions selected in the Service;
- feature activity generated through the use of Kupola;
- support communications;
- website cookies and similar technologies;
- service providers acting on our behalf.
4. Purposes for Collecting and Using Personal Information
We may collect and use personal information for the following business purposes:
- to create, secure, and manage accounts;
- to connect parent and child devices;
- to provide family safety, parental control, online safety, and related features;
- to provide alerts, notifications, reports, and event history;
- to operate location-based features selected by the parent;
- to provide SOS and other urgent safety-related functions;
- to apply app, website, schedule, and routine controls;
- to provide app usage, phone usage, installed app, and activity reporting;
- to support tasks, challenges, and related family workflows;
- to provide customer support;
- to maintain, improve, troubleshoot, and secure the Service;
- to detect and prevent fraud, abuse, and security incidents;
- to comply with legal obligations and enforce our policies and terms;
- to support website analytics, advertising measurement, campaign attribution, and related marketing activities.
5. Selling or Sharing Personal Information
Kupola does not sell personal information for money.
Kupola does not sell children’s personal information.
Kupola may use third-party analytics, advertising, and measurement tools in connection with its website and marketing activities, including tools that help measure ad performance, website traffic, conversions, and campaign effectiveness.
Whether a particular advertising or measurement activity is considered “sharing” under California law can depend on how the technology is configured and used. If Kupola engages in activities that constitute “sharing” for cross-context behavioral advertising under applicable California law, Kupola will update this Notice and provide any rights mechanisms required by law.
6. Disclosure of Personal Information for Business Purposes
We may disclose personal information to service providers, contractors, or processors for business purposes, including providers supporting:
- hosting and cloud infrastructure;
- authentication and account security;
- notification delivery;
- customer support;
- fraud prevention, monitoring, and security;
- billing or subscription administration, if applicable;
- website analytics, advertising measurement, campaign attribution, and related reporting, including Google services where applicable.
For example, push notifications may be delivered through Firebase Cloud Messaging on Android and Apple Push Notification service on iOS.
We may also disclose personal information where necessary to comply with law, enforce our rights, investigate misuse, or protect users, Kupola, or others.
7. Retention of Personal Information
We retain personal information according to the retention rules described in our Privacy Policy and Data Retention & Deletion Policy.
In summary:
- Parent and child profile data are retained until an account deletion request is submitted.
- Feature-related data is retained for 30 days.
- Support, billing, and account-related records stored by Kupola are retained only while the account remains active.
- After a deletion request is submitted, a 7-day grace period begins.
- If the deletion request is not canceled, the account and linked data are permanently deleted on the 7th day.
- Kupola maintains internal backups for up to 7 days for internal operational purposes, but deleted accounts are not recoverable for customer use.
- Kupola does not retain account-linked data after deletion is completed.
- Payment processors or platform providers may retain certain records under their own policies and legal requirements.
8. California Privacy Rights
Subject to applicable law, verification, and any exceptions, California residents may have the right to:
- know the categories of personal information we collect;
- know the categories of sources from which personal information is collected;
- know the business purposes for collecting, using, or disclosing personal information;
- know the categories of third parties to whom personal information is disclosed;
- request access to specific pieces of personal information;
- request deletion of personal information;
- request correction of inaccurate personal information;
- not be discriminated against for exercising applicable privacy rights.
9. How to Submit a Request
California residents may submit privacy-related requests by contacting us at:
Email: help@kupola.app
Where required, we may need to verify the identity of the requester before processing a request. If a request concerns child-related information, we may also require verification that the requester is the parent or legal guardian associated with the account.
If an authorized agent submits a request on behalf of a California resident, we may require proof of authorization and additional verification as permitted by law.
10. Sensitive Personal Information
Kupola uses sensitive personal information, such as precise geolocation, only as reasonably necessary to provide the family safety and parental control features selected by the parent or guardian.
We do not use sensitive personal information to infer characteristics about a consumer beyond what is necessary to operate the Service as described in our Privacy Policy.
11. Children’s Information
Kupola is designed to be set up and managed by a parent or legal guardian. We do not permit a child to independently create a parent account.
Where child-related features are enabled, the associated child information is processed as part of the family account experience, subject to the controls available to the parent or legal guardian and the practices described in our Privacy Policy and GDPR & COPPA Compliance page.
12. Changes to This Notice
We may update this Notice from time to time to reflect changes in our practices, services, or legal obligations.
When we do, we will update the “Last Updated” date at the top of this page.
13. Contact Us
If you have questions about this Notice or want to submit a California privacy request, please contact us at:
Email: help@kupola.app
