Safety & data
We collect as little as we can, and share it with no one
YubiKids is built to the rules for children’s apps in the US, Europe, the UK and Indonesia, and to Apple’s and Google’s requirements for kids’ apps. Here is everything, in plain words.
What we never do
- Show ads or let advertisers into the app
- Sell, rent or share personal data with third parties for their own use
- Put third-party analytics, ad or tracking code in the app
- Let children chat or share with anyone outside your family
- Ask for a child’s full name, photo, school or location
- Let children type messages that leave their device
- Use AI to chat with children
- Use pressure tactics: countdown sales, guilt messages or streaks that punish
What we collect and why
| Data | Why | Where it lives | How long we keep it |
|---|---|---|---|
| Parent email and sign-in IDs | Signing in, consent, receipts | Our servers | While your account exists, plus 30 days |
| Child nickname, avatar, birth year and month, language | Choosing the right age band and language | Our servers and the device | While your account exists, plus 30 days |
| Learning progress | Picking the next activity, your reports | Our servers (summaries), pseudonymous events | Detailed events 13 months; summaries while your account exists |
| Screen-time usage | Enforcing your limits across devices | Our servers | 90 days in detail, then daily totals |
| Drawings | Your child’s creativity | The device only, unless you turn on backup | Until you delete them |
| Device keys, notification tokens | Secure pairing, notifications to parents | Our servers | Until the device is unpaired |
| Purchase records | Billing and tax | Our servers | As long as tax law requires, with minimal fields |
Your controls
Consent first
We ask a parent or guardian for consent before any child profile is created, and ask again if our notice changes in an important way.
Export everything
Download all your family’s data as files from the app at any time.
Delete everything
Delete your account from the app. Access ends immediately, and all personal data is erased within 30 days.
Data stays in your region
Families in the EU have their personal data stored in the EU.
How we protect it
- Encrypted connections everywhere
- Each child device signs its requests with its own cryptographic key; there are no shared passwords
- Your parent PIN is stored only as a protected hash and never leaves the device in readable form
- Backed-up drawings are private and reached only through short-lived links
- No passwords are stored at all: you sign in with a one-time email code, Apple or Google
About AI in YubiKids
Activities, illustrations and voice-overs are created with AI assistance, following characters and a style our team designed by hand. Every activity is reviewed by a person before children see it, and every math answer is checked by code. Science, nature and geography facts are checked against a cited source. Children never talk to an AI. If you turn on weekly summaries, only anonymous skill scores are used, never your child’s name or drawings.
Built to meet these rules
We design YubiKids to meet the requirements below and have each region reviewed by legal counsel before we launch there.
- COPPAUnited States
- GDPREuropean Union
- UK GDPR & Age Appropriate Design CodeUnited Kingdom
- UU PDP & PP TunasIndonesia
- Apple Kids CategoryApp Store
- Google Play Families PolicyGoogle Play
Questions about privacy? Email privacy@yubikids.com