KidBox Privacy Policy

Version 1.2 · Effective December 1, 2026 (1.1 adds usage statistics, section 4.7: only if a Parent agrees. 1.2 adds Voice, section 4.1: the Child's own recordings of what the Box says, only if a Parent agrees)

Moves Media Ltd.

Who we are: Moves Media Ltd., a British Columbia company, 2405 George Street, North Vancouver, BC V7P 2N4. KidBox is our product. Privacy Officer: Blaise Sack, info@kidbox.ca

1. The short version

KidBox is a box with buttons. A young child presses a button, records a short voice message and sends it to a family member their Parent has approved. That family member listens and replies in the KidBox app.

To do that, we have to keep the Child's voice recordings and a small amount of information about who sent what to whom. We use it to deliver messages and to run the KidBox. That is all. We do not show ads. We do not build a profile of your Child. We do not analyse anyone's voice. We do not sell or rent anyone's information.

Messages are deleted automatically after 90 days unless someone in the family saves one.

2. Words we use

In this policy:

• Company, we, us means Moves Media Ltd.
• KidBox or Box means the device.
• App means the KidBox web app at app.kidbox.ca.
• Service means the cloud service the Box and App use.
• Plan means the Free, 5 Grown-ups or Unlimited plan a Household is on.
• Parent means a parent or legal guardian who sets up a Box and is in charge of its Household. A Household can have more than one Parent.
• Child means the child who uses the Box.
• Family Member means an adult a Parent has approved to send and receive Messages, for example a grandparent.
• Household means one Box, its Parents, and the Family Members connected to it.
• Message means a voice recording sent through the Service.
• Saved Message means a Message someone has saved so it is kept past 90 days.
• Text Alert means a text message (SMS) telling someone a Message is waiting.
• Personal Information has the meaning it has in British Columbia's Personal Information Protection Act (PIPA) and in the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

3. The laws that apply

We are a British Columbia company and we sell KidBox only for delivery in British Columbia. PIPA applies to how we handle Personal Information. Because some information goes to service providers outside British Columbia and outside Canada (section 7), PIPEDA may also apply. This policy is written to meet both.

4. What we collect

4.1 About the Child

4.2 About Parents and Family Members

4.3 About the Box

4.4 On the Box itself

The Box keeps your Wi-Fi network name and password, a short-lived copy of the recording it is about to send, copies of the name recordings it speaks, copies of the family's Voice recordings, and a short activity log. These stay on the Box. A factory reset erases them. If a Parent removes the Box in the App, the Box erases the family's name recordings, its last recording and its log the next time it is online, and keeps only the Wi-Fi details so it can be set up again.

4.5 When you buy, and paid Plans

When you buy a KidBox we collect your name, delivery address, email and phone number. Payment for the Box, and for any paid Plan, is handled by Stripe. We never see or store your full card number. We keep a record of which Box went to which buyer, because Canadian product-safety law requires us to be able to reach buyers if there is a safety problem.

4.6 What we do not collect

No location. No contact lists. No advertising identifiers. No analytics or tracking tools in the App (see our Browser Storage Notice). The Box does not listen until a button is pressed. (Usage statistics, section 4.7, are counted on our own servers, and only if a Parent agrees.)

We do not use voice recognition, speaker identification or voiceprints. We do not use any recording to train or test any computer model.

4.7 Usage statistics (only if a Parent agrees)

If a Parent agrees, separately and clearly (a tick box when ordering or on our reply form, or a written "yes" by email), we count how KidBox is used in their Household, so we can understand how families use it and make it better. Today we ask only Founders.

• What we count, for each day: how many Messages the Child sent and received, how many were heard, how long they were, the hour of the day the Child recorded, how many different people the Child sent to and heard from, and how long replies took.
• What we never use for this: the content of any Message, anyone's name or phone number, or any recording. A Message's length is read from the size of its recording file. Nobody listens.
• How we keep it: under the Box's Founders Unit number, not the Child's or the family's name, and separately from the Messages. It is kept after the Messages themselves are deleted, so we can see how use changes over months.
• Who sees it: only us. We do not sell or share it, and we do not use it for advertising or to make decisions about the Child. If we ever publish anything from it, it will be totals across several Households that cannot identify anyone.
• Saying no, or changing your mind: saying no changes nothing else. A Parent can withdraw at any time by writing to the Privacy Officer, and we stop counting and delete the stored statistics within 30 days. "Delete all messages and recordings" in the App deletes them too.

5. Consent

5.1 A Parent must agree before anything is collected from the Child. When a Parent sets up a Box in the App, we show a notice and ask for consent. The Box cannot be set up, and cannot send a single recording, until a Parent has agreed. We record who agreed, when, to which version of the notice, and for which Box.

5.2 Text Alerts that name the Child are a separate choice. They are off unless a Parent turns them on. Saying no changes nothing else (section 7.3).

5.3 If the notice changes, we will ask again.

5.4 Family Members. Our Family Member Notice and Terms tell Family Members what we collect about them and what the Parent can see. They apply when a Family Member uses KidBox.

5.5 You can withdraw consent at any time (section 9). We tell you what withdrawing changes before you confirm.

5.6 Usage statistics are a separate choice (section 4.7). They are off unless a Parent clearly agrees (section 4.7). Saying no changes nothing else.

6. How we use it

We use Personal Information only to:

(a) deliver Messages between the Child and approved Family Members, and other KidBoxes the Parent has connected; (b) let a Parent approve, remove and oversee who the Child can talk to; (c) light the Box and, if turned on, send Text Alerts; (d) keep Saved Messages, and delete everything else on schedule; (e) update the Box's software and tell a Parent if the Box has a problem; (f) keep the Service secure and investigate misuse; (g) take payment for the Box and any paid Plan; (h) answer your questions and requests; (i) keep the records the law requires (consent records, product-safety distribution records, breach records); (j) only if a Parent agreed, count how KidBox is used in their Household, to understand how families use it and improve it (section 4.7).

We will not use it for anything else without asking you first.

7. Who else handles it

7.1 We do not sell, rent or trade Personal Information. We do not share it with advertisers or data brokers.

7.2 We use a few service providers. They handle data only to provide their service to us.

7.3 Information outside Canada. The recordings themselves are stored in Canada. Three things can leave Canada: (i) Text Alerts, sent by Twilio in the United States, which contain the Child's first name and the recipient's phone number, and then pass to the recipient's mobile carrier; (ii) sign-in, handled by Google outside Canada; and (iii) payment details, handled by Stripe. We delete every text from Twilio's records within 2 days of sending it. Information held in another country can be accessed by that country's courts, police and security agencies under its laws. If you would rather the Child's name not leave Canada, leave Text Alerts off. The Box will still light up, and the App will still show new Messages.

7.4 Within the family. A Message goes only to the person, or the other KidBox, it was sent to. If a Parent connects the Box to another child's KidBox, that Box (and its Parents) can hear the Child's Messages to it and the Child's name recording. A Parent can see every Message to and from the Child, and every Saved Message in the Household, including saves made by Family Members.

7.5 When the law requires it. We give a Child's recordings to police, a court or anyone else only when a court order or warrant requires it, or when someone's life or safety is in immediate danger. We check that every request is genuine, give the least we can, and tell the Parent first unless the law or a court stops us, or telling would put someone in danger. We do not hand anything to foreign authorities without a Canadian legal process.

7.6 If the business is sold. If Moves Media Ltd. or KidBox is sold, Personal Information may pass to the buyer, only as PIPA allows, and the buyer must keep this policy's promises or ask you again.

8. How long we keep it

The full details are in our Retention Policy. In short:

• Messages and their recordings: 90 days, then deleted automatically, every night. This includes the audio file, not only the listing.
• Recordings the Box could not address (it did not know who they were for, and a Parent has not assigned them): 30 days.
• Saved Messages: until no one has them saved any more, or until a Parent deletes them, for as long as the Household account exists. See the Saved Messages Term.
• If a paid Plan ends, Messages follow the normal 90-day deletion, and Saved Messages stay while the Household account exists.
• If the Household account is closed, Saved Messages and everything else about the Household are deleted within 90 days of closing.
• The Child's name recording: until a Parent replaces it, deletes everything, or removes the Box.
• Voice recordings of the Box's lines: until a Parent records over one, chooses the standard voice, withdraws the Voice consent, deletes everything, or removes the Box.
• Text Alerts at Twilio: deleted within 2 days of sending.
• Consent records: kept while the Household exists and for 3 years after its information is erased or its account is closed, so we can show what was agreed and when.
• Purchase and distribution records: at least 6 years, for product-safety recalls.
• Deleted recordings in our cloud storage can be recovered by us for up to 7 days, then they are gone for good.
• Usage statistics (only if a Parent agreed, section 4.7): while the Household account exists. Deleted within 30 days of a Parent withdrawing, at once by "Delete all messages and recordings", and with everything else when the account is closed.

9. Your rights and choices

9.1 In the App, a Parent can at any time, on any Plan, including Free:

• see everything we hold about the Child ("See everything we hold");
• download it, including the recordings ("Download a copy");
• hear and save the Child's Messages;
• delete single Messages, including Saved copies, or delete everything about the Child ("Delete all messages and recordings");
• stop KidBox recording the Child, and turn recording back on (in the Box settings);
• turn Text Alerts on or off;
• remove the Box from the Household.

9.2 Each Family Member can turn their own Text Alerts off, change their display name and name recording, and remove their own saves, and delete their own account in the App ("delete account", next to "sign out"). What that deletes, and what is kept, is on our account deletion page.

9.3 You can also ask us, by writing to the Privacy Officer, to:

• give you access to your Personal Information, or your Child's, and tell you how it has been used and who it has been shared with;
• correct anything that is wrong;
• delete it, or close your account;
• withdraw your consent (we will explain what will stop working, and stop collecting).

We will confirm we have your request within 2 business days and reply within 30 days. If we need more time, which PIPA allows in some cases, we will tell you why and when to expect an answer. We do not charge for requests. We will check who you are first, usually by texting a code to the phone number on your account, so we never give a child's recordings to the wrong person.

9.4 If you stop KidBox recording, the Box can no longer send Messages. It cannot do its job without recordings. Stopping does not delete what we already hold. Use "Delete all messages and recordings" for that, or ask us.

10. How we protect it

• Recordings are never public. Every request to play one is checked against who is asking and which Household they belong to, and is given a private link that expires within minutes.
• One Household cannot see another's Messages. We test this against the live system.
• Each Box signs in with its own secret, which we store only in a scrambled (hashed) form.
• Text-message credentials and other secrets are kept in Google's secret store, never on a Box.
• Box software updates are signed, so a Box will only install software that really came from us.
• Information is encrypted in transit, and Google encrypts it at rest.

No system is perfectly secure. If a breach affects your family's information in a way that could cause real harm, or exposes a child's recording to anyone outside the Household, we will tell you directly and promptly, and report it to the privacy regulators as the law requires or recommends.

11. Children

KidBox is made for children aged 3 and up, used with a Parent. A child cannot set up a Box or create an account. All accounts are for adults. We do not knowingly collect Personal Information from a child except through a Box a Parent has set up and agreed to.

12. Changes to this policy

If we change this policy, we will post the new version with a new effective date. If we change what we collect, why, or who we share it with, we will tell Parents directly in the App and ask for consent again before the change applies to your family.

13. Questions and complaints

Contact our Privacy Officer first. We would rather hear it from you directly. We will confirm we have your complaint within 2 business days and give you a written answer within 30 days. It is free, and it will never affect your KidBox service.

Blaise Sack, Privacy Officer, Moves Media Ltd. info@kidbox.ca 2405 George Street, North Vancouver, BC V7P 2N4

If you are not satisfied, you can contact:

• Office of the Information and Privacy Commissioner for British Columbia: oipc.bc.ca
• Office of the Privacy Commissioner of Canada: priv.gc.ca