Legal

Privacy Policy

Last updated June 27, 2026Effective July 15, 2026

The short version

We're a marketplace for kids' classes, so we handle data for parents and for kids. We try to be straightforward about it:

  • We never sell your data or your kid's data.
  • We don't show ads inside the OnePass Kids app.
  • Kids' profiles are only visible to you and to the studios you book.
  • You can export or delete everything from your dashboard, anytime.

Who we are

OnePass Kids, Inc. ("OnePass Kids", "we", "us") operates a credit-based booking marketplace for children's classes, camps and events in South Florida. We're headquartered in Miami, FL. This policy explains what personal information we collect when you use our website or app, why we collect it, and the choices you have.

This policy applies to families (parents and their kids), studio partners, and visitors browsing our site. If you're a studio partner, your relationship with us is also governed by our Partner Agreement.

What we collect

We collect three buckets of information:

From you, directly

  • Account details — name, email, password, ZIP code, phone (optional).
  • Kid profiles — first name, age, any allergies or notes you choose to share with studios.
  • Payment info — handled and stored by Stripe; we only see the last four digits and card brand.
  • Anything you send us through support, like emails or chat transcripts.

Automatically, as you use the service

  • Bookings, cancellations and OnePass Credit history.
  • Device and browser type, IP address, approximate location (city-level).
  • Pages viewed and clicks, so we can fix what isn't working.

From third parties

  • Studios you book may share attendance or no-show status back to your account.
  • If you sign in with Google or Apple, we receive your name and email from them.

Children's information

OnePass Kids is designed for parents to book classes for their children. We do not knowingly allow children under 13 to create their own accounts. Where a parent or guardian adds a child to their account, we follow the U.S. Children's Online Privacy Protection Act ("COPPA") and equivalent laws.

What this means in practice:

  • The parent or legal guardian controls every kid profile, and can edit or delete it at any time.
  • We collect the minimum needed to deliver the service — first name, age, and any notes you choose to share.
  • We never ask a child for personal information directly.
  • We don't show targeted advertising to anyone using OnePass Kids, regardless of age.
  • We share a kid's first name and age with a studio only for classes you've actually booked at that studio.
For parentsYou can review, export, or delete any kid profile from Settings → Kids in your dashboard. If you delete a kid profile, we keep booking records for tax and dispute reasons but remove the kid's name and notes immediately.

How we use it

We use the information we collect to:

  • Run your account — show your OnePass Credits, bookings, kids, and history.
  • Process payments and pay studio partners.
  • Send confirmations, reminders and class updates.
  • Make the product better — fix bugs, measure feature use, decide what to build next.
  • Detect fraud, abuse, and policy violations.
  • Comply with legal obligations (tax, audit, lawful requests).

We do not use your information to build advertising profiles, train generic machine-learning models, or sell to data brokers.

When we share

We share information only in these situations:

WhoWhatWhy
Studios you bookKid's first name, age, your contact info, attendance statusSo they can greet your kid and contact you if class is canceled
StripePayment method, billing info, transaction amountProcess payments and payouts
Service providersOperational data (e.g. email, hosting, analytics)Run the product — all under written confidentiality agreements
AuthoritiesOnly what's legally requiredLawful subpoenas, court orders, fraud investigations
A buyer, if we're acquiredAccount data, transferred with notice to youContinuity of service under the same privacy commitments

We do not sell personal information. We do not share data with advertisers.

Cookies & tracking

We use a small set of cookies to keep you logged in, remember your ZIP, and measure how the site is used. We group them like this:

  • Essential — login session, security tokens. Cannot be turned off.
  • Functional — your last-viewed ZIP code, recently visited classes.
  • Analytics — aggregate page views via a privacy-respecting analytics provider. Opt out from Settings → Privacy.

We do not use third-party advertising or social-media tracking cookies.

Security

We protect data with industry-standard practices: encryption in transit (TLS 1.3), encryption at rest, single sign-on with hardware keys for our team, and least-privilege access controls. Payment data is handled entirely by Stripe (PCI-DSS Level 1).

No system is bulletproof. If we discover a security incident affecting your data, we'll notify you without undue delay and tell you what happened and what we're doing about it.

Data retention

We hold on to information only as long as we need it for the purposes above:

  • Active account data — for the life of your account.
  • Closed accounts — most personal data is deleted within 90 days of closure.
  • Booking and payment records — kept for 7 years to satisfy U.S. tax and dispute requirements, with kids' names redacted on request.
  • Support transcripts — 24 months.
  • Logs and analytics — 13 months in identifiable form, then aggregated.

Your rights

Depending on where you live, you have some or all of these rights over your data:

  • Access — get a copy of what we hold about you.
  • Correction — fix anything that's wrong.
  • Deletion — close your account and remove your data.
  • Portability — export your bookings and kid profiles as JSON.
  • Opt out — of non-essential analytics, from Settings → Privacy.
  • Lodge a complaint — with your local data-protection authority.

Most of these you can do yourself from Settings. For anything you can't, email privacy@onepasskids.com and we'll respond within 30 days.

International transfers

OnePass Kids is operated from the United States. If you use the service from outside the U.S., information we collect will be transferred to and processed in the U.S. and other countries where our service providers operate. We use standard contractual clauses and equivalent safeguards as required by law.

Changes to this policy

We'll update this page when our practices change. If the change is material, we'll notify you by email and through the app at least 30 days before it takes effect. The date at the top of this page always reflects the latest version, and previous versions are available on request.

Contact us

Questions, requests, or complaints — we want to hear them.

Privacy team

The fastest way to reach us is email. We respond within two business days.

MailOnePass Kids, Inc., 2950 NW 2nd Ave, Suite 400, Miami, FL 33127
DPOCamila Ortiz, Data Protection Officer