NabtaKids Privacy Policy

Effective date: 01 November 2026 | Last updated: 01 November 2026

In short: NabtaKids is a family app. A parent sets it up, builds a curated video library for their child, and controls everything. On our Premium tier, that parent can optionally invite one other parent to help manage and monitor the same children — see Section 2e for exactly what that does and doesn't share. The child never creates an account, never enters any personal information themselves, and never sees advertising. We collect only what's needed to run the service — we do not sell data, and we do not use it for advertising of any kind.

1. Who We Are and Who This Policy Covers

NabtaKids ("we," "our," "the app") is a parental-control application, developed and operated by MRU-Electronics, that lets a parent build a closed, curated library of YouTube videos, channels, and playlists for their child, and gives the child a simple, locked-down way to watch only what's been approved for them.

NabtaKids is a mixed-audience family app: a parent (an adult) creates and manages the account, and a child may use a separate, paired device to watch content the parent has approved. On our Premium tier, a second parent may also be granted access to help manage the same children under their own, separate account — we refer to this as Family Access throughout this policy. This policy explains what information each of these roles involves.

2. Information We Collect

2a. From the parent, directly

Mobile phone number, password, and first name, used to create and log into the parent account — first name is required so that, if this account uses Family Access (Section 2e), it can identify a parent by name rather than leaving them blank/anonymous to the other parent
A PIN code the parent sets, used to protect Parent Mode on their own device
Language preference (English or Arabic) — each parent on an account, including a secondary parent under Family Access, sets their own independently
Subscription/billing status (see Section 4 — actual payment handling is done by Apple, Google, and our billing partner, not by us directly). Only the account holder — the parent who originally subscribed — has billing information associated with them; a secondary parent granted Family Access has none.

2b. About a child, provided by the parent — never entered by the child

A parent creates a profile for their child. The child never types, searches, or enters anything into the app themselves — there is no text input, search box, or messaging feature anywhere in Kid Mode. The information in a child's profile is:

First name
Age (a number between 2 and 12)
Gender (as selected by the parent)
An avatar (chosen from a built-in set by the parent or child together)

We also record, automatically, which of the parent-approved videos a child watches and for how long, so a parent can see a usage summary and so screen-time limits the parent sets can be enforced. This watch-history data is visible only to the account holder managing that child's profile, and — if Family Access (Section 2e) is in use — to any secondary parent that account holder has specifically granted access to.

2c. Device information

When a parent pairs a device to a specific child ("Child Device"), we store a record of that pairing — the device's type/platform, when it was paired, and when it was last active — so the parent can view and revoke paired devices at any time from their own device. A Child Device does not require, and cannot be used to create, any login of its own. On our Premium tier, a child may have more than one Child Device paired at the same time (for example, a tablet at home and a phone for the car) — the same information is recorded for each one.

2d. Automatically collected technical information

Like virtually all apps, our servers automatically log standard technical information with each request (IP address, general device/OS type, app version) for security, debugging, and abuse-prevention purposes. This is not linked to advertising and is not shared with any advertising service.

2e. Family Access — sharing with another parent (Premium)

An account holder on our Premium tier can optionally invite one other parent to help manage and monitor the same children. This is always between two separate, independently-registered parent accounts — it is never a shared login. Here's exactly what that involves:

The invitation itself: the account holder generates a short-lived, single-use invite code tied to the specific mobile number they're inviting. The invited parent redeems it from their own, already-logged-in account — we do not create an account on anyone's behalf as part of this process.
What becomes visible to a secondary parent, once accepted: the account holder's children's profiles and approved libraries, the ability to add and approve new content for them, and their watch-history/usage summaries.
What stays visible only to the account holder: a child's profile details (name, age, avatar) cannot be edited by a secondary parent; usage limits and schedules cannot be changed by them; paired devices cannot be managed by them; and they cannot invite or remove any other parent. Billing and subscription information is never shared with a secondary parent.
Notifications: a secondary parent receives notifications about the children's activity (e.g. a new video awaiting approval, a usage limit reached) — never notifications about the account's security or billing, which go only to the account holder.
Revocation: the account holder can remove a secondary parent's access at any time from Settings, taking effect immediately. Once removed, that parent can no longer see or act on the account holder's children in any way.

3. Information We Do Not Collect

We do not collect any information directly from a child — everything about a child's profile is entered by their parent.
We do not display advertising of any kind, to anyone, anywhere in the app.
We do not use advertising identifiers, and we do not build advertising profiles of any user, adult or child.
We do not allow the child to search for content, message anyone, or enter free text anywhere in Kid Mode.
We do not sell personal information to any third party, for any purpose.

4. Third-Party Services We Use

We use a small number of third-party services to operate the app. Each is listed below with what it's used for and who it applies to.

YouTube IFrame Player API (Google/YouTube) — used to play videos the parent has approved. Playback runs in YouTube's Privacy-Enhanced Mode (youtube-nocookie.com), which limits cookie-based tracking compared to standard embedding. Video playback is subject to Google's Privacy Policy. This is the only third-party service that runs on a Child Device.
RevenueCat — manages subscription purchases on top of Apple's and Google's own billing systems (App Store / Google Play). Used only on the parent's device, during account/subscription management — never reachable from a Child Device.
Apple App Store / Google Play Billing — process any subscription payment directly; we do not receive or store payment card details ourselves.
Expo's push notification service — delivers app notifications (e.g. "new video pending review," "daily limit reached") to the parent's own device. Used only on the parent's device — a Child Device never registers for or receives push notifications.

We do not use any third-party analytics or advertising SDK beyond what is listed above.

5. How We Use Information

To create and operate parent and child profiles
To let a parent build, review, and approve a curated video library for their child
To enforce the screen-time limits and schedules a parent sets
To show a parent a summary of what their child has watched
To manage paired devices and let a parent revoke one
To let an account holder grant, and a secondary parent use, Family Access to the same children (Section 2e)
To process subscription billing, through the third parties listed in Section 4
To send the parent notifications they've opted into
To maintain the security of the service (e.g. detecting abuse of pairing codes or login attempts)

6. Data Sharing and Disclosure

We do not sell personal information. We share information only with the third-party service providers listed in Section 4, to the extent needed for them to perform their specific function, and only where required by law (for example, in response to a valid legal request).

Separately from third-party sharing above, a child's profile and activity data is shared within the app itself with a secondary parent, but only when the account holder has specifically granted that parent Family Access (Section 2e) — this is sharing between two parents in the same family, not with any outside party, and the account holder can end it at any time. No child's information is ever made visible to any parent outside the account holder's own explicitly-granted Family Access relationship.

7. Data Security

Passwords and PINs are stored hashed, never in plain text.
A Child Device authenticates using a narrow, purpose-limited credential that can only access that one child's approved library and usage status — it cannot reach account settings, billing, or any other child's information, and can be instantly revoked by the parent at any time.
A Family Access invite code works the same way — it's tied to one specific mobile number, expires quickly if unused, works only once, and the resulting access can be revoked by the account holder at any time without affecting anything else on either account.
Data is transmitted over encrypted (HTTPS) connections.

8. Data Retention and Deletion

We retain account and child-profile information for as long as the parent account remains active. A parent can remove a video from their child's library, remove a child profile, revoke a paired device, or (if they're the account holder) end a secondary parent's Family Access, at any time from within the app. To request full deletion of a parent account and all associated child data, contact us using the details in Section 11.

9. Children's Privacy

NabtaKids is designed so that a child can use the app's Kid Mode without ever creating an account, entering personal information, or interacting with anything outside the video library their parent has specifically approved. All information about a child (Section 2b) is provided by the parent, not collected from the child directly. We do not knowingly collect personal information directly from a child, and we do not use any information associated with a child's profile for advertising or marketing purposes.

The account holder — and, where Family Access has been granted, the secondary parent it was granted to — may review information associated with a shared child's profile. Only the account holder can correct a child's profile details or request deletion; either parent can contact us using the details below with any privacy question.

10. International Users

NabtaKids is built with Egyptian and Arabic-speaking MENA families as a primary audience, and is available more broadly. Information is processed on servers operated by our hosting provider and may be located outside your own country.

11. Contact Us

For any privacy question, or to make a request regarding your or your child's information (including access, correction, or deletion), contact:

support@mru-electronics.com

We aim to respond to privacy-related requests promptly.

12. Changes to This Policy

If we make material changes to this policy, we will update the "Last updated" date above and, where the change is significant, notify parents within the app.