KangaToDo — Privacy & your data

This is the whole thing, in plain words. KangaToDo is made by Accelerated Experiences LLC. It is not affiliated with or endorsed by Skylight.

The short version. We never see your Skylight password. Photos of your kids are private, and delete themselves after 7 days. We don't sell anything, we don't advertise, and there are no trackers. One button in the app deletes every trace of your family.

What we keep

And why each thing has to exist.

Your Skylight sign-in: Your email address, and a connection token Skylight gives us when you sign in. Your password is used once and never stored — not encrypted, not hashed, not anywhere. The token is what lets the app write jobs onto your calendar.
Your children's names: Read from your own Skylight account so a job can be pointed at the right kid. We don't ask for birthdays, addresses, or anything else about them.
Photos of finished jobs: Only when you tick "needs a photo". They're stored privately, so the link alone opens nothing — the app fetches them through our server, which checks it's you or that particular child asking. They delete themselves after 7 days, automatically.
Which phones are joined: A code links one phone to one child. That phone holds a random token, not a name or a login. It's how a kid only ever sees their own list.
A phone number, only if you add one: Optional, and only used to text a reminder if the buzz doesn't reach them.
A PIN, only if you set one: Stored scrambled, never in plain text. It's a lock on the grown-up side, nothing more.

What we don't do

No advertising, and nothing is ever sold or shared with anyone.
No analytics, no tracking pixels, no third-party scripts watching you.
No photos in emails — an email links you to the app instead, because it's a picture of a child.
No accounts to create, no marketing list, no newsletter.
We don't read your calendar for anything other than showing you your own jobs.

Children

The part that matters most.

KangaToDo is set up by a parent, for their own children, using the parent's own Skylight account. A child never creates an account, never types an email address, and never gives us a name — their name comes from the account you already had.

The only thing a child can send is a photo of a finished job, and only when you've asked for one. Those pictures are private, are never used for anything else, and are gone within 7 days whether or not anyone deletes them.

You are in control of it. As the parent you can see every photo, unlink any phone, turn photos off entirely by not requiring them, and delete everything at any moment — with no email to send and nobody to ask.

Deleting everything

One button, and it really is everything.

In the app, open Kids and tap Delete everything & disconnect. That removes:

the Skylight connection and its token — you'd sign in again from scratch;
every photo, the actual pictures and not just the links to them;
every child record, phone number and joined phone;
every pending alert and the evening summary queue.

Nothing is kept back, and there is no archive or backup copy of it waiting somewhere. Jobs already written into Skylight stay in your Skylight account — they're yours, and you delete those in Skylight the same way you'd delete anything else there.

Open KangaToDo

Where it lives, and who can reach it

Data is held on Vercel's servers in the United States. Photos sit in private storage that needs a key we hold on the server; the app never hands that key to a browser or a phone. Access is limited to what's needed to run the app.

Honest about the limits. No system is perfect, and we won't pretend otherwise. What we can promise is that we hold as little as possible, for as short a time as possible, and that the delete button does what it says.

Questions, or ask us to delete something

Email hello@aexperiences.com. If you want your data gone and can't get to the button, say so and we'll do it.

Last updated 14 August 2026. If this ever changes in a way that matters, the app will say so rather than quietly updating this page.