Privacy Policy

Who we are

NexoProof Reunite Kids is operated by NexoProof Intelligence LLC (“NexoProof,” “we,” “us,” or “our”). Questions about this policy or privacy requests may be sent to support_reunite@nexoproof.com.

Information we collect

Depending on how you use Reunite, we may process:

• Family account information: email address, authentication information, verified mobile number, account-security settings, and provider identifiers when Google or Facebook sign-in is used.
• Child Profile information: the finder-facing display name, help message, safety information selected by the Family, and optional photo or document uploaded by the Family.
• Reunite Item information: opaque QR identifiers, activation and lifecycle state, manufacturing/fulfillment records, replacement history, and association to the Family’s Child Profile after activation.
• Finder activity: scan/event time and delivery state. Precise coordinates are collected only when a finder deliberately chooses the location-sharing action and grants browser location permission.
• Communications: mobile-verification activity, safety-alert delivery records, support messages, and information you voluntarily send to support.
• Commerce and fulfillment: when ordering is enabled, order, shipping, payment-status and fulfillment information needed to process and support the transaction. Payment-card details are handled by the payment provider rather than stored by Reunite.
• Geographic reach, when enabled: originating IP addresses are processed locally to estimate country, state/region and city. We keep anonymous daily area totals to understand website and pin reach; these estimates are not precise scan positions or identified people. Raw IP addresses are not stored in geographic reporting. Event-linked approximate areas and voluntarily shared precise locations, accuracy estimates and map links normally have a five-calendar-year expiry from the event. Profile/account deletion can remove them earlier; anonymous broader totals may remain without automatic expiry.
• Technical and security information: session, rate-limit, audit, browser/request and security-event information needed to operate and protect the service.

How we use information

We use information to create and protect Family accounts; verify alert numbers; display the Family-approved finder page; send verification and finder alerts; maintain scan and delivery history; activate, revoke, replace and fulfill Reunite Items; respond to support requests; process purchases when commerce is enabled; prevent abuse; maintain security; and comply with applicable legal obligations.

Reunite Kids is not a continuous GPS tracker. The physical QR item does not continuously transmit a child’s location. Finder coordinates are processed only after the finder chooses the location-sharing action and grants permission on that finder device.

What finders can see

A valid, active Reunite QR may show only the finder-facing information the Family has saved for that Child Profile, such as display name, help message, optional safety information, optional sanitized photo/document when enabled, and a Family contact action. We do not encode a child’s name, Family phone number, medical information, order information, or activation secret directly in the QR code.

Service providers and disclosures

We use service providers to run Reunite, including infrastructure/database hosting, SMS delivery, authentication, email/support delivery, and payment processing when enabled. Current integrations may include Railway, Twilio, Google, Meta/Facebook, Resend, and Stripe. These providers receive only the information needed for their role.

Google and Facebook are used only for authentication. Reunite does not send child profiles, child photos, finder locations, scan history, QR/pin data, alert destinations, or safety information to social-login providers as part of authentication.

We may also disclose information when reasonably necessary to comply with law, protect users or the service, investigate abuse or security incidents, or complete a business transaction subject to appropriate safeguards.

Retention and deletion

When a finder chooses to share location, the Family receives that location and Reunite normally retains the recorded position, device accuracy and map link for five calendar years for safety support and authorized location review. This is one recorded position, not continuous tracking. Expired or purged positions are not reconstructed. At the founder’s direction, still-retained existing positions have also been extended to the five-year period; the original sharing/permission records are preserved separately from that administrative retention decision.

We record finder-page sessions and relevant actions such as call-button requests, location-sharing requests, notifications and product/registration link clicks. Session-linked records normally expire after five years or are removed on applicable Family/profile deletion; anonymous daily totals may remain longer. Reloads and new tabs count as new sessions. A call-button request does not establish that a call connected, and a scan or location share does not establish why a pin was scanned, that a child was missing, or that a reunion occurred. Basic event/audit metadata has no general age-based deletion rule; the deletion/redaction controls described below still apply.

We retain information only as needed to operate Reunite, provide support, maintain required audit/fulfillment records, protect the service, and meet legal obligations. Reunite includes self-service Child Profile and Family deletion controls. Deleting a Child Profile revokes its Reunite Items and removes finder access. Deleting a Family ends the account and triggers the product’s deletion/redaction workflow.

Optional profile photos are stored in private application storage. When a Family removes a photo or deletion requires removal, Reunite uses a durable physical-deletion workflow with retry handling. During the Version 1 pilot, historical photo-volume backups are intentionally not used so a completed Family deletion cannot be undone by restoring an older photo snapshot.

Access and data-deletion requests

A signed-in Family can remove a child or delete the entire Family from Reunite’s account/privacy controls. If you cannot access the account, email support_reunite@nexoproof.com with “Reunite Data Deletion Request” in the subject. We may need to verify that you control the account before making a sensitive change.

Facebook users: removing Reunite from Facebook’s connected-app settings stops future Facebook authorization but does not by itself guarantee deletion of the separate Reunite Family record. Use the Reunite self-service deletion control or the support process above to request deletion of Reunite-held account data.

Children and Family management

Reunite Kids contains information about children, but the account and setup experience is intended to be managed by a parent, guardian, or other responsible Family member. Children should not create or administer Reunite Family accounts on their own.

Security

We use technical and organizational safeguards including encrypted transport, server-side sessions, access controls, rate limits, audit records, protected secrets, and optional authenticator-app two-step verification. No online service can guarantee absolute security.

Changes to this policy

We may update this policy as Reunite changes. The current version will be published at this URL with its effective date.