Privacy policy

Last updated: 28 August 2026

Kids on Weekends (“we”, “us”, “our”) is operated by Nimbco. We are committed to protecting your personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA).

This policy covers two separate things, which handle data very differently:

This website — where you can read our guides and join the mailing list.
The Kids on Weekends app — which needs no account and keeps your data on your device.

Part 1 — This website

What we collect

Email address — only if you choose to join our mailing list or contact us.
Which page you signed up from — a short label (for example home-early-access) recorded with your signup so we can tell which guides people find useful.
How you reached us — if you arrived through a tagged link (for example from an email or a social post), the campaign labels in that link are recorded with your signup.
Usage data — anonymised analytics about which pages are read, via Google Analytics.

How we use it

Purpose	Legal basis
Sending product updates and newsletters	Consent
Inviting you to the app’s closed beta, if you asked to join	Consent
Understanding which guides are useful, via anonymised analytics	Legitimate interest
Responding to your support requests	Legitimate interest

We do not sell your personal data. We share it only with:

Buttondown — newsletter delivery (your email address, if subscribed). Buttondown’s privacy policy: buttondown.com/legal/privacy.
Google Analytics — anonymised usage analytics.
Apple — if you join the closed beta, we send your email address to App Store Connect so Apple can send you a TestFlight invitation. Apple’s privacy policy: apple.com/legal/privacy.

All providers are contractually bound to process data only as instructed.

Affiliate links

Some guides link to booking partners such as Klook. If you follow one of those links, the partner may set cookies and will see that the visit came from us. We may earn a commission on bookings made through them, at no extra cost to you. We do not pass your personal data to these partners.

Retention

Newsletter subscribers can unsubscribe at any time using the link in any email we send. We remove unsubscribed addresses from our active list.

While the Kids on Weekends closed beta is running, we also keep a copy of your email address, the page you signed up from, any campaign labels from the link you arrived through, and whether your beta invitation has been accepted, on our own server. We keep the address in readable form because we need it to send you an invitation and to check whether it arrived. We delete these records within 90 days of the closed beta ending, and sooner on request.

Part 2 — The Kids on Weekends app

Summary

The app requires no account and no sign-in to use.
Your saved places, agenda, and preferences are stored on your device.
Your GPS location never leaves your device — it is used only to sort places by distance.
Data leaves your device in only five cases, all described below: (1) loading the places catalogue, (2) searching for a place by typed address, (3) if you choose to plan together with a partner via a shared household code, (4) sending anonymous crash and error reports so we can fix problems, and (5) on Android beta builds only, sending once the Google Play “install referrer” that records which of our pages you came from. The app also asks our server whether the app version you are running is still supported; that request contains no information about you.

What data the app handles

1. Places catalogue and version check (network)

The app downloads a read-only catalogue of Singapore family-friendly places and events from our server so it has something to show you, and separately asks the same server for the minimum app version we still support, so it can tell you when an update is required. Neither request includes any personal information about you.

2. Location — “Near me”

GPS position: If you turn on “Near me” and grant location permission, the app reads your device location to sort places nearest-first. This location stays on your device and is not transmitted to us or anyone else.
Typed address search: If instead you search for a place to plan around (for example “Sentosa”), the text you type is sent to your device’s operating-system geocoder (Android Geocoder / iOS CLGeocoder) to convert it into map coordinates. The OS may process this request over the network. We do not receive or store this query.
Map preview: The app may load a Google Maps view — to preview a “Near me” anchor you are choosing, and to show where a place or event is when you open its details. This is subject to Google’s Privacy Policy.

3. Saved plans and partner sync (optional)

Your shortlist, agenda, visited/someday/discarded markers, and custom days are stored locally on your device. If you choose to plan together with a partner by creating or joining a household with a shared code, this saved plan data (not your GPS location) is uploaded to our sync server so both devices show the same shared plan. If you never enable partner sync, none of this data leaves your device.

4. Crash and error reporting

The app uses crash and error reporting via Sentry (sentry-flutter). If the app crashes or hits an error, technical diagnostic information (such as the error, a stack trace, app version, and device model) is sent to Sentry to help us fix problems. This does not include your saved places, your location, or personal identifiers. See Sentry’s Privacy Policy.

5. Install attribution (Android beta builds only)

Beta builds distributed through Google Play send us, once, the first time you open the app, the “install referrer” that Google Play provides — a short piece of text recording which of our own links or pages you tapped to install the app (for example utm_campaign=home-early-access). It is sent to our own server, along with the time it was recorded and the app’s version number.

This tells us which page of our website led to an install, so we can see how people are finding the beta. It contains no name, email address, device identifier or advertising identifier, and we do not store your IP address with it, so the record cannot be linked back to you or to your saved places. It is sent once and never again. Builds without this feature enabled — including every iOS build — send nothing.

Permissions the app requests

Location (ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION): only used for the optional “Near me” distance sorting, and only after you grant it.
Internet: to download the places catalogue, to check the minimum supported app version, to report the install referrer once on Android beta builds, and, if enabled, to sync a shared plan.

What the app does not collect

No name, email, phone number, or account credentials.
No advertising identifiers, and the app shows no ads. Android beta builds do send one marketing-attribution message — the Google Play install referrer described in section 5 — which records which of our links you came from. It is not an advertising identifier and identifies no person or device, but it is marketing-attribution data, so we name it here rather than let the line above imply more than it should.
No tracking of what you do inside the app: no analytics SDK, no screen or interaction logging.

Retention and deletion

On-device data can be removed at any time by clearing the app’s data or uninstalling the app.
Shared household plan data on our sync server is retained only while the household is in active use. We remove it on request, and we delete household data that has been inactive for an extended period.
Crash and error reports are retained by Sentry for a limited period for diagnostics and then deleted.
Install-attribution records (section 5) carry nothing that identifies a person or a device, so there is nothing in them to look up or delete on request. They are aggregate marketing statistics — how many installs came from each page — and we keep them for as long as those figures are useful. We do not set a deletion date on them, because there is nobody in them to protect.

Your rights

Under the PDPA, you may:

Access the personal data we hold about you and ask how it has been used.
Correct inaccurate or incomplete data.
Request deletion of server-held data.
Withdraw consent at any time — for example, by unsubscribing from the newsletter, revoking the location permission in your device settings, or leaving or disbanding a shared household. Withdrawing consent may limit features that depend on it; it does not affect processing that already took place.

To exercise any of these rights, contact us at privacy@kidsonweekends.com. We will respond within a reasonable time.

Children’s privacy

Kids on Weekends is designed for parents to plan outings for their children. It is not directed at children and does not knowingly collect personal information from children under the age of 13.

Overseas transfer of data

Some of the services we use process data outside Singapore — for example, newsletter delivery (Buttondown), analytics (Google), crash and error reporting (Sentry), and the map preview (Google). Where we transfer personal data overseas, we take reasonable steps to ensure the recipient provides a standard of protection comparable to that required under the PDPA.

Data breaches

If a data breach occurs that is likely to result in significant harm to affected individuals, or that meets the notification thresholds under the PDPA, we will notify the Personal Data Protection Commission and affected users as required by law.

Changes to this policy

We may update this policy from time to time; the “Last updated” date above will change accordingly. We will notify you of material changes by posting a notice in the app or sending an email to newsletter subscribers.

Contact

Nimbco / Kids on Weekends Singapore privacy@kidsonweekends.com