Privacy Policy

Your family's trust is the whole reason AllPureKids exists, so we want to be plain and honest about what we do with your information. This policy explains, in everyday language, what we collect, what we deliberately do not collect, how we use it, how we keep it safe, and the choices you have. We wrote it the way we'd want it written for our own families.

Who we are

AllPureKids is a browser-installed world for kids, built around Pip — a calm companion who lives inside the experience and gives you, the parent, a clear view of what happens inside Pip.

What we collect

We only gather what we genuinely need to run Pip and show you an honest picture of what happened inside it. That includes:

• Your account email. So you can sign in, so we can reach you about your account, and so we know who the parent is.
• Family and child first names and ages. First names only, plus an age or age range, so Pip can shape an age-appropriate world and so your dashboard feels like your own home. No last names required.
• Device pairing details. Basic information about the devices you connect — a device name, type, and the pairing status — so Pip knows which tablets belong to your family.
• Activity inside Pip. When Pip steps in on something — a link, a video, a message that crosses your family's line — we record that moment and a short reason. This is what appears in your family's history. Pip does not log routine activity that it doesn't step in on.
• Usage sessions. Simple records of when a device was active inside Pip, so your screen-time summaries make sense.
• Creative content your child saves inside Pip. Things like a story your child writes or a beat they make sync to your account so you can see them from your own device. Camera and Photos content, by contrast, stays only on your child's tablet and is never sent to us.

If you join our early-access list or download the guide

Before you ever create a family account, you might just visit our website or fill out the Family Screen Guide / early-access form. That's a separate, smaller category of data:

• Your email, and optionally a first name. So we can send you the guide and, if you check the separate marketing box, keep you updated — never preselected, and you can uncheck it any time.
• How you found us. Referral/campaign parameters (UTM tags) and the page you came from, so we understand which channels are actually reaching families.
• Standard request logs. Your IP address and browser user-agent are logged briefly by our hosting provider (Vercel) for every request, the same way any website's infrastructure logs traffic — for abuse prevention and debugging, not to build a profile of you.
• Anonymous page-view analytics (Vercel Analytics). Only on the adult marketing pages — the homepage, the interactive demo, and the early-access page. It never loads on any page a child uses; that's enforced in code, not just policy.

This marketing/lead data is kept until you unsubscribe or ask us to delete it — email hello@allpurekids.com and we will remove it. It is never sold, and the marketing-consent checkbox is always separate from — and never required for — actually receiving the guide.

What we do NOT collect

This part matters just as much. Some doors we keep firmly shut, by design:

• No camera or microphone surveillance. Pip never uses the camera or microphone to watch or listen to your child. The camera only turns on when your child starts a camera activity — like a video call with family members you've approved — and Pip's safety checks never look through it. Video calls happen directly between devices; we don't receive or store the video or audio itself.
• No biometrics. No faces, no fingerprints, no voiceprints — nothing that identifies a person by their body.
• No child logins. Children never create a password or sign in. A tablet pairs to your family with a code you generate, once.
• No child location tracking. We do not follow where your child is or where they go.

How we use what we collect

We use your information for a short, simple list of purposes and nothing more:

• To run Pip, so it can check the things your family adds against your boundaries.
• To show you, the parent, a clear and honest picture of what happened inside Pip.
• To keep your account working — signing you in and letting you manage your family.

That's it. We do not build advertising profiles, and we do not use your family's activity to sell you things.

How we store and protect it

We store your family's data with reputable hosting and database providers, behind access controls so only your signed-in account reaches it — our team does not routinely browse individual families' activity. Most stored data — messages, saved creative content, activity history — is not separately encrypted beyond our providers' standard protections, and we'd rather tell you that plainly than let you assume otherwise.

How long we keep it

Today, most activity data stays until you delete your account, at which point it's removed — there isn't yet an automatic expiration window for routine activity, and we're not going to claim one we haven't built. We may add a shorter retention period as Pip develops.

Who we share it with

Let us be clear and unambiguous: we never sell your family's data, and we never use it to train AI.

To make Pip work, we rely on a small number of trusted service providers (subprocessors) — currently Vercel (hosting) and Neon (database, hosted in the United States). Our providers may only handle your data to deliver the service to you, under agreements that hold them to these same commitments.

Today: Pip's safety checks run on a deterministic, rule-based system. Nothing your family adds is sent to any AI model right now.

In development: we're building AI-assisted contextual checks on Anthropic's Claude models, called through their official API, for the kind of judgment rules alone can't capture.

Before activation: before that connection goes live, this page and our Privacy Policy will say so plainly, and we'll collect consent first wherever it's required. When it is live: Anthropic does not use commercial API inputs or outputs to train their models by default, and their standard API data retention may run up to 30 days.

Your rights as a parent

This is your family's information, and you stay in control of it:

• Access and export. You can view your family's history any time from your dashboard, and export a full copy of your family's data as a file whenever you want, from Settings.
• Correction. If a name, age, or other detail is wrong, you can fix it.
• Delete everything. You can delete your family's account from Settings, with a confirmation step so it can't happen by accident. When you do, your family's data is removed from our active systems right away. Our hosting provider keeps routine backups for disaster recovery, and those expire on their own schedule rather than being kept indefinitely.

Children

AllPureKids is built for parents to use on behalf of their children, and children never sign in themselves. Because we care deeply about protecting the youngest members of your family, we've written a dedicated explanation of how we handle children's privacy. Please see our Children's Privacy (COPPA) page for the full details.

Changes to this policy

As AllPureKids grows, we may update this policy. When we make a meaningful change, we'll update the date at the top and, where it matters, let you know directly. We'll always aim to keep it as plain and honest as it is today.

Contact us

If you have a question about your privacy, or you'd like to exercise any of the rights above, we'd be glad to help. Email us at hello@allpurekids.com and a real person will get back to you.