Mi-KidzAlert

Privacy Policy

Effective date: 12 August 2026 · Last updated: 12 August 2026

This Privacy Policy explains how personal data is collected, used, stored and protected in connection with Mi-KidzAlert, a kindergarten check-in and child safety system consisting of a mobile application for parents and teachers, an administrative web dashboard used by kindergarten staff, and server software installed at the kindergarten.

Mi-KidzAlert is developed by MIMOS Berhad ("we", "us"). Please read this policy together with the privacy notice issued by your child's kindergarten.

1. Who is responsible for your data

Your child's kindergarten is the data controller. Mi-KidzAlert is installed and operated by each kindergarten on its own server, at its own premises. The kindergarten decides what information is entered into the system, who may access it, and how long it is kept.

MIMOS Berhad is the technology provider. We supply and maintain the software. We do not operate a central database of children, and we do not receive, hold or have routine access to the records of any kindergarten using the system.

Because each kindergarten runs its own installation, the mobile app must be connected to a specific kindergarten before it can be used. This is done by scanning the QR code issued by your kindergarten, which contains the address of that kindergarten's server. All information you see and submit in the app travels between your device and that server only.

2. Information collected

2.1 Information provided by the kindergarten

Kindergarten staff enter and maintain the following records:

Category	Details
Child details	Name, date of birth, age, gender, class, enrolment status, expected pick-up time, profile photograph, and an optional tag identifier.
Facial data	One or more facial images of the child, and a mathematical representation of the face (a "face template" or embedding) derived from those images. See section 3.
Parent / guardian details	Name, email address, phone number and home address.
Teacher / staff details	Name, email address, phone number and assigned class.
Emergency contacts	Name, relationship to the child, phone number and email address of each contact nominated for a child.
Attendance records	Check-in and check-out date and time for each child, and daily attendance status.

2.2 Information you provide through the app

Your email address, used to sign in and to receive your one-time sign-in code.
Pre-marked absences — the dates your child will be away and any reason you supply.
Replies to absence notices sent by the kindergarten.
Authorized pickup entries — the name and vehicle registration number of a person you permit to collect your child, and the dates that permission applies.
Registered vehicle plate numbers belonging to you or your household.

2.3 Information collected automatically

Push notification token and the type of device (Android, iOS, or Huawei), required to deliver alerts to your phone.
Sign-in and session records — the time of sign-in, the IP address the request came from, and a device/browser identifier, retained to protect accounts against unauthorised access.
Security event records — for example repeated failed sign-in code attempts, recorded with the email address and IP address involved.
Notification history — a record of which alerts were sent to which parent and when.
Gate camera events — where the kindergarten uses vehicle recognition at its gate, the recognised plate number, the date and time, the camera involved, and a photograph captured at that moment.

The app does not use advertising identifiers. It contains no advertising, and no analytics or tracking software that profiles you across other apps or websites.

3. Facial recognition and children's data

Mi-KidzAlert identifies children at the kindergarten entrance using facial recognition, so that arrival and departure can be recorded automatically and parents alerted immediately.

Facial images are enrolled by kindergarten staff, with the consent of the parent or guardian.
Face templates and images are stored in the kindergarten's own server and are not transmitted to MIMOS Berhad or to any third party.
Face matching is performed on the kindergarten's own equipment. No facial data is sent to an external cloud recognition service.
A face template cannot be used to reconstruct the original photograph and is only meaningful within this system.
Facial data is used solely to identify the enrolled child for attendance and safety purposes. It is never used for advertising, profiling, emotion assessment for commercial purposes, or sold to anyone.

Parents and guardians may withdraw consent to facial enrolment at any time by contacting the kindergarten, which will delete the stored facial images and templates for that child. Attendance may then be recorded by other means.

The Mi-KidzAlert app is intended for use by adults — parents, guardians and kindergarten staff. It is not directed at children and children do not hold accounts.

4. How the information is used

To record when a child arrives at and leaves the kindergarten.
To notify you when your child is checked in or checked out.
To alert you when your child has not arrived and no absence was recorded.
To let you inform the kindergarten of an upcoming absence.
To verify that a person collecting a child is authorised to do so.
To let you view your child's attendance history and the kindergarten's holiday calendar.
To allow kindergarten staff to manage classes, attendance and enrolment.
To authenticate you when signing in, keep your session secure, and detect misuse of accounts.

5. Sharing and disclosure

Personal data is not sold, rented or traded. It is shared only as follows:

Recipient	What is shared	Why
Apple Push Notification service, Google Firebase Cloud Messaging, Expo, Huawei Push Kit	Your device's push token and the text of the notification	To deliver alerts to your phone. Which service is used depends on your device.
Email delivery provider	Your email address and your one-time sign-in code	To send you the code needed to sign in.
Cloudflare	Network traffic between your device and the kindergarten's server	To provide the secure connection to the kindergarten's server.
Kindergarten staff	Records relating to children in their care	To operate the kindergarten and safeguard children.
MIMOS Berhad support personnel	Only what is necessary, only when the kindergarten requests technical support	To diagnose and resolve a fault, under the kindergarten's instruction.

Personal data may also be disclosed where required by Malaysian law, a court order, or a lawful request by a public authority, or where necessary to protect the safety of a child.

6. Storage, location and security

Records are stored in a database on the kindergarten's own server, located at or managed on behalf of the kindergarten in Malaysia. Protections include:

All communication between the app and the server is encrypted using HTTPS. The app upgrades any insecure address to a secure one before connecting.
Sign-in codes are stored only as an irreversible hash, expire after a few minutes, may be used once, and are rate-limited to block repeated guessing.
Session tokens are stored as hashes on the server and are rotated each time they are used; reuse of an old token revokes the entire session family.
On your phone, sign-in tokens are held in the device's secure storage — the iOS Keychain or the Android Keystore — not in ordinary app storage.
Access to the administrative dashboard is restricted to authorised kindergarten staff.

No system can be guaranteed completely secure. If a breach affecting your personal data occurs, the kindergarten will be notified so that affected parents can be informed in accordance with applicable law.

7. How long data is kept

Child, parent and staff records are kept while the child is enrolled and for as long as the kindergarten's own record-keeping obligations require, then deleted by the kindergarten.
Operational records such as gate camera events, captured photographs, notification history and system logs are automatically deleted after a retention period set by the kindergarten, which is 90 days by default.
Facial images and templates are deleted when the child leaves the kindergarten, or earlier if consent is withdrawn.
Expired sign-in codes and revoked sessions are cleared automatically.
Deleting a parent record removes that parent's linked children, emergency contacts, vehicle plates and pickup authorisations.

8. Your rights

Under the Malaysian Personal Data Protection Act 2010 you may:

request access to the personal data held about you and your child;
request correction of data that is inaccurate, incomplete or out of date;
withdraw consent to the processing of personal data, including facial enrolment;
ask that your child's data be deleted, subject to any record-keeping the kindergarten is legally required to observe;
limit the processing of personal data for particular purposes;
lodge a complaint with the Personal Data Protection Department (JPDP), Malaysia.

Because the kindergarten controls the data, please direct these requests to your child's kindergarten in the first instance. If you cannot reach them, or your request concerns the software itself, contact us using the details in section 12 and we will assist the kindergarten in responding.

9. Account deletion

To have your parent account and associated data removed, contact your child's kindergarten, which can delete the record from its dashboard, or write to support_mi-kidzalert@mimos.my with your name, your child's kindergarten, and the email address registered in the app. Requests are actioned within 30 days.

Signing out of the app removes your stored sign-in tokens and stops notifications to that device, but does not delete your kindergarten record.

10. Permissions used by the app

Permission	Why it is needed
Camera	Used only to scan the QR code that connects the app to your kindergarten's server. No photograph or video is recorded, stored or transmitted by the app.
Notifications	To deliver check-in, check-out, absence and pickup alerts.

You may decline or later revoke either permission in your device settings. Declining notifications means alerts will not reach you.

11. Changes to this policy

This policy may be updated from time to time. The effective date at the top of this page shows when it was last revised. Where a change materially affects how personal data is handled, the kindergarten will be notified so that parents can be informed.

12. Contact

For questions about this policy or about how Mi-KidzAlert handles personal data:

Mi-KidzAlert Service Desk
Email: support_mi-kidzalert@mimos.my
Telephone: 03-8995 5000 ext. 55299

For requests concerning a specific child's records, please contact that child's kindergarten directly, as the kindergarten holds and controls those records.