Children’s Privacy Notice
Version 2026-05-29 · Effective 29-May-2026
This notice is for parents and guardians. It explains, in plain language, what Kaya collects about a child, how we protect it, and the consent you give when you create a Kaya Code — consistent with the U.S. Children’s Online Privacy Protection Act (COPPA).
What we collect about a child
Only what’s needed to run Kaya for them: a first name or nickname, a date of birth, and a preset avatar. No email, no password, no photo upload, and no precise location.
Verifiable parental consent
A child is added only by a parent or legal guardian. At the moment you create a Kaya Code, you tick a consent box and re-confirm your identity with your password. That step is how we obtain verifiable parental consent under COPPA before any child data is collected.
How a child signs in
Children sign in with a Kaya Code you issue — never an email or password. The code is shown to you once and is stored only as a secure hash; share it directly with your child and never post it publicly. You can pause, regenerate, or revoke it at any time.
Max-Privacy Mode
Children’s sessions carry no advertising, no profiling, and no third-party trackers, and a child’s data is never used to train AI models. Activity logs are deleted on a 30-day rolling basis.
Your rights as a parent
You can review the personal information we hold about your child, ask us to delete it, and refuse further collection by revoking the Kaya Code — all from your dashboard, or by emailing hello@ourkaya.com.