Kids' privacy notice

Version draft-2026-10 · October 27, 2026

This notice is for parents. It says what Family Points collects about a child under 13, how, what we do with it, and what you can do about it. Nothing here is collected from a child without a parent first adding them.

Why you are reading this

United States law (COPPA) asks a service that stores information about children under 13 to tell parents directly what it collects and to get the parent's consent. This page is that notice. The full privacy policy covers everyone, including you.

What we collect about your kid, and how

You enter: a first name (up to 20 letters), a color and an icon from fixed lists, and a 4-digit PIN. The PIN is stored as a one-way hash.
Your kid types: a reason when they tap "I did something good", and answers in practice. Up to 200 characters each. These are the only things a kid can write in Family Points.
The app records: each points entry with its reason and kind, requests your kid sends you, stickers earned, practice lists and every practice answer with whether it was right, and when each of these happened.

We never collect a last name, birthday, photo, voice, location, contacts, school, or anything from a kid's device beyond the taps that make the app work.

What we do with it

We use it to run the game for your family: to show the balance and history, to let your kid ask for points or a reward, to award stickers, and to run practice. The parents in your family see all of it. If you link an LED board, it shows each kid's name, color, balance and goal on your home network.

What we never do

No ads, no trackers, no analytics.
No public profile. Nothing about your kid is visible outside your family.
No sharing with other families, and no sharing or selling for marketing.
Nothing your kid typed, and nothing that names your kid, is ever sent to the AI service. The AI help is a parent's tool, and only the parent's own words and photo go to it.

Who else sees it

Amazon Web Services hosts the database and servers in the United States (Northern Virginia) and sends our emails.
Anthropic's Claude, through Amazon Bedrock, receives only what a parent sends when asking for a practice list: the kind, grade, level, count, the parent's words, and the parent's photo, which is sent once and never stored. Never a kid's name, color, icon or id, and never a kid's answers.

Your rights as a parent

See it all: everything about your kid is in the app, in the kid's history and practice results.
Change it: the name, color, icon and PIN, at any time.
Stop collecting: remove your kid in the app. They can no longer sign in, and nothing new is recorded. Their history stays until you delete it, so you can restore them.
Delete it: "Delete permanently" on a removed kid erases everything about them. Deleting the family erases everyone's data, with 30 days to undo.
Ask us: email hello@getfamilypoints.app for a copy, a correction, or a deletion.

How you give consent today

You accept the terms and this notice when you join Family Points from an invite. You then add each kid yourself, inside your own account, and only you choose what to enter. We will ask a lawyer whether this is enough (question 2 below) before Family Points opens to the public.

Contact

SoftLabNY LLC · hello@getfamilypoints.app

Questions for the lawyer

These drafts were written from how the app works, not from a template. Before Family Points opens to anyone, a lawyer must answer these.

Kids' first names, icons, colors, PINs, points reasons and practice results are personal information from children under 13.
Verifiable parental consent: today the parent enters every kid inside the parent's own account, after accepting these pages at the invite. Is that enough, or do we need a consent method from the FTC's list?
The 2025 amended COPPA rule (compliance date April 2026): a written data-retention policy, a security program, and separate consent before disclosing to third parties. Is Anthropic, reached through Amazon Bedrock, a "third party" or a service provider?
The direct notice to parents (this site's kids' privacy page) and where the app shows it before a kid is added.
Free text typed by a kid (a reason for points, a practice answer) can contain personal information. Do we need filtering or a notice?
A parent's right to review and delete a kid's data: in the app today only by removing the kid (and "Delete permanently"); the account-deletion screen is not built yet, so deletion of an account is by email for now.