Who is behind this policy
KidLoop is a pre-launch project without a registered company yet. This means there is no legal entity named here as data controller, and no supervisory-authority contact, because neither exists yet. Once we incorporate and register kidloop.be, this section will carry that information. Until then, read this as a statement of intent from the team building KidLoop, not a binding commitment from a legal entity.
Account data
To create a KidLoop account we collect an email address, a display name and a password; an avatar image is optional. The password is stored only as a salted hash, never in a form anyone here can read. We send one email to the address you give us, to confirm it is yours, and you cannot sign in until you have. We do not collect your phone number or any ID document.
Your postcode and city, not your address
We ask for your postcode and city and turn them into an approximate map point so we can show listings near you and sort search results by distance. We do not ask for or store your street address. If you arrange to meet locally for a swap or pickup, you and the other family agree on the exact spot yourselves, in chat; KidLoop never records it.
What we store about your child
A child profile holds exactly four fields about your child, all entered by you, never by them:
- A nickname you choose, never their legal name
- Their birth month, not their exact birth date
- Clothing size and shoe size
- Interests you type in, like ‘dinosaurs’ or ‘Lego’
Why this is minimal, and why we're allowed to hold it (lawful basis)
We ask for a birth month instead of a birth date, and a nickname instead of a full name, because that's enough to project when your child will likely need the next clothing size and to power search — and it's less than we'd need to identify a specific child from the data alone. Your child's profile is never shown to anyone outside KidLoop; we use it only to surface matching listings and to warn you before a size change. You, as the account holder, enter this data yourself as your child's parent or guardian, to use a feature you asked for. Our lawful basis is performance of our contract with you (GDPR Article 6(1)(b)) for the matching itself, and legitimate interest (Article 6(1)(f)) for related things like the size-transition alert.
Listings, photos, and transaction history
We keep the text, category, price or swap terms, and photos of anything you list. Listing photos must show the item itself — clothing laid flat or on a hanger, a toy, a book, a piece of gear — never a photograph of your child; we don't build features that ask for or expect one. We also keep a record of your purchases, sales, swaps and donations — what, when, with whom, and for how much — for as long as your account exists. Once real payments are live we expect Belgian accounting and consumer-dispute rules to require us to keep transaction records for a period after that too, likely around seven years, pending confirmation from an accountant; none of that retention has started yet, because no real payment has been processed through KidLoop so far.
Who sees your data
The other party to a transaction sees your display name, city and rating — never your email address or exact location. We intend to use an EU-based hosting provider and, once payments go live, a licensed EU payment institution that will handle card and bank details directly; KidLoop is not designed to ever store your full card number. We do not sell personal data, and we run no advertising trackers — see our cookie policy for the specifics.
Your rights
Under GDPR, you can:
- See the data we hold about you and your children
- Correct anything that's wrong
- Delete your account, your listings and any child profile
- Receive a copy of your data in a portable format
- Object to processing based on legitimate interest
An honest note on how we handle those requests today
We are a very small pre-launch team. There is no self-service ‘delete my account’ or ‘remove my child's profile’ button in the product yet — every request above is handled by a person, by hand, until that ships. We're naming that gap here so you know what to expect if you ask, rather than leaving it for you to discover.
Children using KidLoop directly
KidLoop accounts are for parents and guardians, not for children. We don't knowingly let a child create or use an account without an adult. If we learn that's happened, we'll suspend the account.
How to reach us
Because KidLoop has no registered company yet, there is no monitored support address to publish honestly. Before this policy leaves draft status, we will add a real contact channel, and a named contact for data-protection questions if the amount of child data we hold warrants one.
Also read: Terms of service · Cookie policy