Privacy Policy
Content Hub Kids mobile app · Last updated: 5 October 2026
Content Hub Kids is an app for children and families. It streams short animated series for kids. Because our viewers include children, this policy is written to meet children's privacy laws (including COPPA in the US and the GDPR in the EU), and we collect as little as technically possible.
Who operates Content Hub Kids
Operator (data controller): Costa Hub s.r.o.
Registered address: Školská 660/3, Nové Město, 110 00 Praha 1, Czech Republic
Company ID (IČO): 23882271
Telephone: +420 602 766 346
Contact: christian@costahub.co
What the app collects
- A random app identifier: generated inside the app on first launch. It is not derived from the device hardware, is not an advertising identifier, and is not linked to any name, email, or account. Reinstalling the app creates a new one. Parents can see it in the app (see "Parental choices" below).
- Viewing events: which episodes are watched and for how long, likes and saves, and playback errors, together with the app version and platform (iOS/Android). They also include ratings given to an episode or to the app, chosen from fixed answers and never free text.
- The network address the viewing events arrive from: used only to limit how many events one address can send in a day, and kept only as a salted one-way hash for at most two days, never as the address itself.
- Local preferences: settings and saved shows stay on the device only, and so does the daily watch-time limit while no parent is signed in. Watch progress is kept on the device too; while watch statistics are switched on, the app sends it along when it asks for recommendations, and it is used for that answer only, not stored.
The parent account (optional)
A parent may create an account in the Grown-ups zone to buy coins. For that we process the parent's email address (verified with a one-time code), the coin balance, the purchase history (store product, price, currency, store transaction id, refunds), whether the account is in the Family Club subscription and until when, the list of episodes unlocked with that account, and the parental controls the parent sets (approval for each unlock, a daily unlock limit, a daily watch-time limit, and an optional PIN, which is stored only as a one-way hash). The controls are saved with the account, so they apply on every device the parent signs in on, and so is the time zone the account's days are counted in. While a watch-time limit is set, we keep how many seconds were watched on the account today and yesterday, so the limit holds on every device; it does not say what was watched. It is kept for today and yesterday, then deleted (an automated daily job enforces this), whether or not the limit is still set. This data belongs to the parent, never the child: children do not create accounts, and nothing about what a child watched is linked to the parent's email. The legal basis is the contract with the parent (selling and honoring coins, refunds). The account and its balance can be deleted in the app at any time; purchase records are kept without the account id for accounting and refund disputes as the law requires.
Why we collect it (and nothing else)
Only for the app's own internal operations: showing better recommendations inside the app, understanding which shows children enjoy so we can make more of them, and fixing playback problems. We do not use this data for advertising of any kind, we do not build profiles for use outside the app, and we never sell or share it beyond the processors below.
What we deliberately do NOT do
- No ads and no advertising SDKs; no advertising identifiers (the Android AD_ID permission is explicitly blocked in the app build).
- No account, registration, name, email, or birthdate is required or collected from children. The only account in the app is the parent's.
- No precise location, no contacts, no camera or microphone access.
- No chat, comments, or social features.
- No third-party analytics or tracking SDKs: events go only to our own database.
Parental choices
- The gated Grown-ups area in the app has a switch to turn off anonymous watch statistics entirely. Turning it off also discards any unsent events.
- Parents may review or request deletion of the data associated with their child's device at any time. In the Grown-ups area, under Privacy, Ask about this device's data shows the device's anonymous app identifier and opens an email to christian@costahub.co with it filled in. That identifier is the only thing that ties viewing events to a device, so we need it to find them.
Where data lives and how long
Viewing events are stored on behalf of Costa Hub s.r.o. by our infrastructure processor Supabase on servers in the European Union and are automatically deleted after 90 days (an automated daily job enforces this). Before that, each day is added up into daily totals, such as how many devices watched a series that day, which carry no app identifier and are kept. The parent's sign-in is operated by Clerk (email address and one-time codes) and purchase receipts are validated by RevenueCat (keyed by an opaque account id; the payment itself is handled by Apple or Google and no card details ever reach us). App updates are delivered by Expo: when the app checks for an update, Expo receives the device's IP address and a random installation identifier created by the update service, separate from the app identifier above. If a parent turns on notifications, Expo also issues the device's push token, which we store with the parent account. Clerk, RevenueCat and Expo are US providers acting as our processors; transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.
To protect the service from automated abuse, our servers count how often each device network address and each parent account asks for a video or for a purchase check. The address and the account are kept only as a one-way coded value, never in readable form, and each count is deleted within 20 minutes of the last request.
Changes
If our data practices ever change, this page changes first and material changes for children's data will require verifiable parental consent where the law demands it.
Contact
See also the Terms of Use.