Our Security Commitment
How Kidzly protects your family's data at every step.
Data in Transit
All communications between the Kidzly app and our servers use TLS 1.2 or higher. Certificate pinning prevents man-in-the-middle attacks.
Data at Rest
Stored activity data, location history, and account information are encrypted using AES-256 on our servers. Database access is restricted to authorised internal services only.
Account Security
Passwords are hashed using bcrypt with a high cost factor. We support strong password requirements and plan to add two-factor authentication in a future release.
APK Integrity
Each APK release is signed with our private key. A SHA-256 checksum is published on the download page so you can verify the file has not been tampered with.
No Third-Party Trackers
Kidzly does not include advertising SDKs, analytics trackers, or third-party data brokers in the application or website. Your family's activity stays private.
Vulnerability Disclosure
We welcome responsible disclosure of security vulnerabilities. If you discover a security issue, please contact us at security@kidzly.online before public disclosure.
Report a Security Issue
Found a vulnerability? We take all reports seriously and respond within 72 hours.
security@kidzly.online