COPPA & Your Child

The Children's Online Privacy Protection Act (COPPA) is a federal law that gives parents control over what information is collected from their children online. We wrote AllPureKids to honor that law not because we have to, but because it lines up with what we already believe: your child is a gift, and guarding them is your calling first. This page explains, in plain words, exactly how that works here. No fine print, no surprises.

You give consent first — always

Before a single thing happens with your child, we ask you for permission. When you set up your family account, we walk you through three quick screens: what we collect (this page, in short form), a one-time card check that confirms a grown-up — not a kid — is the one saying yes (no charge, nothing stored except proof it's real), and a final screen where you type your legal signature and confirm exactly what you're agreeing to. That verifiable consent is the key that unlocks everything else, and it's versioned — you can always see the exact wording you agreed to in Settings.

Device pairing is gated behind it. Until you have given consent, no device can be connected to your child's profile, and Pip does nothing. We would rather a couple of extra steps slow you down than ever collect information about a child without a parent saying yes — and you can change your mind or revoke it entirely, any time, from Settings.

Exactly what we collect — and nothing more

We practice data minimization, which is a formal way of saying we only ask for what Pip truly needs to help you, and we leave the rest alone. For your child, that is a short list:

• Their first name — so Pip can speak to your child warmly and personally, the way you would.
• Their age — so guidance is right for where they are, not too young and not too old.
• Device screen events — signals about what is happening on the paired device, so Pip can gently flag things that need a parent's eyes.
• Optional encrypted screenshots — only if you turn them on. When enabled, they are encrypted, kept for parent review alone, and expire automatically.

That is the whole list of what Pip — the safety monitor — collects. Pip has no camera or microphone access of its own, and never analyzes anyone's face or voice; it only ever watches the screen, and your child always knows when it's doing so. We do not ask for home addresses, contact lists, precise location, or anything we do not need to do the one job you hired us for.

Separately, your child's tablet includes its own Camera app for taking fun photos — this is not Pip, and it does not feed Pip. Those photos are stored only on the tablet itself and never uploaded to us or anyone else; there is no facial recognition or any other analysis of what's in them. Your child can delete a photo with a two-step confirmation (so it can't happen by accident), and you can review your family's data or ask us to delete everything, any time, from Settings.

Your child never has a login — you do

This is important, so we want to be clear: your child does not have an account of their own. There is no username for them to remember, no password, no profile they log into. What exists is a device profile that belongs to you and is controlled entirely by you, the parent. You decide when it is on, what it watches for, and when it goes away. Pip is a parent-only tool from the first screen to the last.

Your rights as a parent

COPPA gives you real, enforceable rights over your child's information, and we make them easy to use. At any time, you may:

• Review the information connected to your child's device profile.
• Delete that information, permanently, whenever you choose.
• Refuse further collection — pause or turn off Pip and stop new data from being gathered, while keeping your account.

You are never locked in, and asking us to stop is always honored. Choosing to protect your family differently is your right, and we will never make it hard or make you feel bad for it.

No advertising to children. Ever.

We will never show behavioral advertising to your child, and we will never build an advertising profile of them. Your child's information is not a product to be packaged and rented to marketers. Pip exists to help you parent, not to sell anything to your kid.

How long we keep things — and how we let go

We do not hoard data. Screen events and any optional screenshots follow a 30-day auto-expiry: once that window passes, they are deleted automatically, with no action needed from you. And if you close your account, we perform a hard delete — a permanent removal of your child's information from our systems, not a hidden archive. When it is gone, it is gone.

Never sold, never used to train AI

Your child's information is never sold to anyone, for any price. It is never used to train AI. Pip is built on AI technology from Anthropic, but what happens inside your family stays inside your family — it is not folded into any model, not shared to make software smarter, not treated as fuel. It is kept encrypted, used only to serve you, and then let go.

How to exercise your rights or reach us

Most controls — reviewing, deleting, pausing collection, and closing your account — live right inside your parent dashboard, so you can act the moment you want to. If you would rather talk to a real person, or you have a question this page did not answer, we would love to hear from you.

Email us at privacy@allpurekids.com. We will verify that you are the parent or guardian on the account and then help you review, delete, or stop collection right away. Guarding your children is your first calling; helping you do it well is ours.