LockBox Privacy Policy
Kid Kingdom ("Kid Kingdom," "we," "us," or "our") provides the LockBox mobile application (the "App"). This Privacy Policy explains how information is accessed, processed, stored, disclosed, retained, and deleted when you use the App.
1. At a Glance
LockBox is designed as a local-only password vault. It does not require or create a LockBox account, and it does not use a Kid Kingdom backend or cloud synchronization service.
- Vault records, including platform names, account names, passwords, and notes, are encrypted and stored on your device.
- Kid Kingdom does not receive, upload, sell, rent, or use your vault records for advertising or profiling.
- LockBox contains no advertising, analytics, tracking, or third-party crash-reporting SDK.
- Optional voice search uses the speech-recognition service provided or selected by your operating system. Depending on your device, language, provider, and settings, audio may be processed on the device or transmitted to Apple, Google, or another system speech provider. Kid Kingdom does not receive or store that audio.
- If you contact us by email, we receive the information you choose to include in that communication.
2. Who We Are
The App is provided by:
- Kid Kingdom
- Postal addressee: KIDS KINGDOM USA
- 1840 Lombard St
- San Francisco, CA 94123-2910
- United States
- Privacy contact: hipckeyklapperpq027@gmail.com
For personal information contained in support communications sent directly to us, Kid Kingdom is the responsible business or data controller, as applicable under local law.
3. Information Processed Only on Your Device
Vault content
You may enter platform or website names, account names, email addresses, passwords, notes, and other free-form content. This content is encrypted before being written to the App's local database. It is used only to provide the vault, search, filtering, copy, editing, and deletion features you request.
Kid Kingdom does not have access to this content and cannot retrieve it from your device.
PIN and cryptographic material
Your six-digit PIN is used locally to derive a key-encryption key. LockBox does not store or transmit the PIN in plain text. Random salt, encrypted key material, local security preferences, and failed-attempt cooldown information are stored on the device. Device-bound secrets are stored using operating-system-protected storage such as Apple Keychain or Android Keystore-backed storage.
Biometric authentication
If you enable Face ID, Touch ID, or fingerprint unlock, biometric matching is performed by the operating system. LockBox does not receive, store, or have access to your face image, fingerprint image, or biometric template. The App receives only an authentication success or failure result. A vault key may be stored in operating-system secure storage subject to biometric access controls.
Preferences and operational state
LockBox stores settings such as language, theme, automatic-lock interval, whether biometric unlock is enabled, security metadata, and PIN retry cooldown information locally. These settings are not uploaded to Kid Kingdom.
Search text
Typed and speech-recognized search text is used to search your local vault. Search text is not sent to Kid Kingdom and is not saved as a separate search history by LockBox.
4. Optional Voice Search and Microphone Access
Voice search is optional. LockBox requests microphone and speech-recognition permission only when needed for this feature. You can deny or revoke these permissions and continue using typed search and all other core vault functions.
When you start voice search:
- the App sends microphone audio to the speech-recognition service made available by your operating system;
- recognition may occur entirely on your device or may require transmission to the system provider, depending on device capability, language, network availability, operating-system settings, and the provider selected on your device;
- Kid Kingdom does not operate the speech-recognition service and does not receive, store, or have access to the audio submitted to it;
- LockBox receives recognized text and uses it as a local search query; and
- stopping voice search, locking the vault, or leaving the feature causes LockBox to stop or cancel its active recognition session, subject to operating-system behavior.
System providers process information under their own terms and privacy policies. Relevant policies may include:
- Apple Privacy Policy: https://www.apple.com/legal/privacy/
- Google Privacy Policy: https://policies.google.com/privacy
Please review the privacy settings and speech-recognition options on your device. If you do not want audio processed by a system provider, do not use voice search.
5. Clipboard Processing
When you choose Copy, LockBox places the selected password or other value on the operating-system clipboard. LockBox attempts to clear copied sensitive text after approximately 45 seconds and also clears it when the vault is locked.
Clipboard behavior is controlled by the operating system. Other apps, keyboards, synchronization features, or devices may be able to access or retain clipboard content according to your system settings. Automatic clearing is a best-effort protection and is not a guarantee. Kid Kingdom does not receive clipboard content.
6. Information We May Receive
Support communications
If you email us, we receive your email address, message, attachments, and any information you voluntarily provide. Do not send your PIN, passwords, recovery secrets, or unredacted vault screenshots. We use support communications to answer requests, troubleshoot issues, protect the App, and comply with legal obligations.
App stores and operating-system providers
Apple, Google, device manufacturers, and operating-system providers may independently process download, purchase, device, diagnostic, crash, speech, or usage information under their own terms and privacy policies. LockBox does not include a Kid Kingdom analytics or crash-reporting SDK. Any information processed independently by a platform provider is controlled by that provider, unless it is expressly delivered to and retained by Kid Kingdom.
7. How We Use Information
Information processed locally is used only to provide the features you request, including encryption, unlocking, searching, editing, password generation, copying, language preferences, theme preferences, and automatic locking.
Support information received by Kid Kingdom may be used to:
- respond to your inquiry or request;
- investigate and correct technical or security issues;
- prevent abuse and protect our legal rights; and
- comply with applicable law.
Where applicable, the legal basis for support processing may be performance of a contract, your consent, our legitimate interests in supporting and securing the App, or compliance with law.
8. Disclosure and Sharing
Kid Kingdom does not sell personal information, share personal information for cross-context behavioral advertising, serve targeted advertising, or track you across apps or websites.
We may disclose information that we actually possess only in the following limited situations:
- to email, hosting, or professional service providers that process information on our behalf under appropriate obligations;
- when you direct or clearly request the disclosure;
- when reasonably necessary to comply with law, legal process, or a valid government request;
- to investigate fraud, abuse, security threats, or violations of our rights; or
- in connection with a merger, acquisition, financing, reorganization, or transfer of the App, subject to applicable notice and privacy requirements.
Because Kid Kingdom does not receive your local vault content, we cannot disclose or produce that content from a LockBox server.
9. Security
LockBox uses safeguards designed for a local password vault, including AES-256-GCM authenticated encryption for vault records, PBKDF2-HMAC-SHA-256 PIN-based key derivation, random salt and device-bound secret material, operating-system secure storage, biometric access controls when enabled, failed-PIN cooldowns, automatic locking, backup restrictions on supported platforms, and background-screen privacy protection.
No security measure is perfect. Device compromise, malware, rooted or jailbroken devices, weak device security, clipboard access, operating-system vulnerabilities, or disclosure of your PIN may expose your information. You are responsible for maintaining control of your device and PIN.
10. Retention and Deletion
Local vault information
Vault records remain on your device until you delete individual records, use the Reset Vault function, or the operating system removes the App's data. Reset Vault is designed to delete the encrypted local database content and local unlock material. The action cannot be undone.
For the most complete in-app deletion, use Reset Vault before uninstalling the App. Uninstallation behavior is controlled by the operating system. Some operating systems may retain certain secure-storage or backup artifacts after uninstall, although Kid Kingdom does not receive or control those artifacts.
Because there is no LockBox account or Kid Kingdom cloud vault, there is no server account to delete and no server copy for us to recover or erase. If you forget your PIN and biometric unlock is unavailable, your encrypted vault cannot be recovered; resetting the vault permanently deletes access to it.
Support information
We retain support communications only as long as reasonably necessary for support, security, legal, and recordkeeping purposes, generally no longer than 24 months after the last interaction unless a longer period is required by law, needed to resolve a dispute, or requested by you.
11. Your Choices and Rights
You can:
- decline or revoke microphone, speech-recognition, and biometric permissions in device settings;
- use typed search instead of voice search;
- disable biometric unlock in LockBox settings;
- delete individual vault records;
- reset the entire local vault; and
- uninstall the App.
Depending on where you live, you may have rights regarding personal information Kid Kingdom actually holds, such as access, correction, deletion, restriction, objection, portability, withdrawal of consent, or appeal. These rights generally relate only to support or business records we possess because we cannot access your local vault. Submit a request to hipckeyklapperpq027@gmail.com. We may need to verify the request and may retain information where required by law.
California residents: Kid Kingdom does not sell personal information or share it for cross-context behavioral advertising. We do not use sensitive personal information received through the App to infer characteristics about users.
EEA, United Kingdom, and Switzerland residents may also lodge a complaint with their local data-protection authority.
12. International Processing
Kid Kingdom is located in the United States. If you contact us, your communication may be processed in the United States or other locations used by our service providers. Where required, we use legally recognized safeguards for international transfers. Local vault content is not transferred internationally by Kid Kingdom because we do not receive it.
13. Children
LockBox is a general-audience utility and is not directed to children under 13 or the minimum age required by local law to consent to digital services. We do not knowingly collect children's personal information through the App. If a child sends personal information to our support email without appropriate authorization, a parent or guardian may contact us to request deletion.
14. No Advertising or Tracking
LockBox does not display third-party advertising, access an advertising identifier, create advertising profiles, or use data for cross-app tracking. The App does not request App Tracking Transparency permission on Apple platforms because it does not track users.
15. Changes to This Policy
We may update this Privacy Policy when the App, law, or our practices change. We will update the effective date and make the revised policy available in the App and at the public privacy-policy URL used in the relevant app store. If a change materially affects information we collect or how we use it, we will provide additional notice where required.
16. Contact Us
For privacy questions, complaints, or rights requests, contact:
- Kid Kingdom
- KIDS KINGDOM USA
- 1840 Lombard St
- San Francisco, CA 94123-2910
- United States
- Email: hipckeyklapperpq027@gmail.com