How we protect your child's information

ChildScribe is built for families. We understand that when you share stories about your child, you're trusting us with something deeply personal. We designed every part of this product with that trust in mind.

We comply with the Children's Online Privacy Protection Act (COPPA) and take seriously our obligation to protect the personal information of children under 13. This is not an afterthought or a legal formality -- it is a foundational design principle. Our privacy practices are intentionally conservative: we collect only what we need, we give you full control, and we never use your child's information for advertising, profiling, or any purpose beyond the service you signed up for.

It's important to understand how ChildScribe works, because our model is different from many apps that involve children's information.

Parents are the sole account holders. Only adults create ChildScribe accounts. There is no child login, no child-facing interface, and no way for a child to independently access or use the service.

Children do not interact with the app directly. ChildScribe interviews the parent, not the child. Our AI interviewer has voice conversations with you -- the parent -- about your child's life, personality, milestones, and everyday moments. The voice in the conversation is yours, not your child's.

Parents voluntarily share stories, memories, and photos about their children. The information we hold about your child comes entirely from what you choose to tell us during interviews and what you upload to the app. You decide what to share, when to share it, and how much detail to include.

This is parent-directed content creation. Think of ChildScribe as a modern version of a baby book or family journal -- you are the author, and we provide the tools. The difference is that our AI helps you capture more detail, organize it thoughtfully, and turn it into something beautiful.

All information about children is provided by the parent during account setup and through ongoing use of the service. We collect:

What we do not collect: We do not collect your child's email address, phone number, physical address, geolocation, social media identifiers, device identifiers, or any direct contact information. We do not collect information directly from children through any means. We do not use cookies, tracking pixels, or behavioral analytics to gather information about children.

Because ChildScribe is a parent-operated service, the act of creating an account and adding a child's profile constitutes parental consent under COPPA. By setting up your child's profile, you are affirmatively consenting to our collection and use of your child's information as described in this notice.

You maintain full control at all times. Only you -- the account holder -- can add information about your child, edit existing information, or share content with other family members. No one else can modify your child's profile or access their data without your explicit permission.

You can review everything we store. Every piece of information associated with your child is accessible to you at any time through the app. This includes all interview transcripts, journal entries, photos, and profile data. There is nothing hidden, nothing we collect that you cannot see.

You can delete everything at any time. You can remove individual interviews, specific journal entries, or your child's entire profile. Deletion is real -- it removes the data from our active systems, and from our backups within 30 days.

We use your child's information for two purposes, both directly related to the service you signed up for:

What we do not do with children's information:

• We do not use children's data for advertising or marketing of any kind.
• We do not build behavioral profiles of children.
• We do not sell, rent, or license children's data to any third party for any purpose.
• We do not use children's data to train general-purpose AI models.
• We do not share children's data with third parties for their own commercial purposes.

Active accounts. Children's data is retained for as long as you maintain an active ChildScribe account. Your data remains available for you to view, export, and use throughout your subscription.

Individual deletion. You can delete a child's profile at any time from within the app. This removes all associated data -- interview transcripts, journal entries, photos, and generated content. Removal from our active systems begins immediately, and backup copies expire within 30 days.

Account deletion. If you delete your account, all children's data associated with that account is removed. We complete the deletion from all systems, including backups, within 30 days of your request.

No stored audio. ChildScribe never stores interview audio. Your voice is transcribed in real time during the conversation and only the text transcript is kept — there are no recordings of your voice, or your child's, on our servers.

Export before deletion. Before deleting any data, you can export a complete archive of your child's information in standard, portable formats (JSON and original image files).

As a parent, COPPA gives you specific rights regarding personal information collected about your child. Under ChildScribe, you have the right to:

How to exercise these rights:

• In the app: You can delete a child\'s profile from the app at any time, and export your family\'s data from your account settings.
• By email: Send a request to support@legacyscribegroup.com. We will verify your identity as the account holder and respond within 5 business days.
• By mail: Write to us at the address listed at the bottom of this page.

We will never penalize you or degrade your service for exercising any of these rights.

We use a limited number of third-party services to operate ChildScribe. We carefully select these providers, require contractual privacy protections, and limit what data each service can access.

We do not use any third-party analytics, advertising networks, social media plugins, or tracking services in connection with children's data. We do not embed third-party content that could independently collect information about your child.

We implement technical and organizational safeguards appropriate for the sensitivity of children's data:

• All data encrypted in transit (TLS 1.2+), with every request scoped to the parent's account.
• Access to children's data is restricted to essential personnel only, under strict access controls.
• Authentication requires strong passwords and supports two-factor authentication.
• Server software and dependencies are kept up to date, with automated monitoring for unauthorized access.
• Incident response procedures with prompt notification if a breach affects your child's data.

If we make material changes to how we collect, use, or share children's information, we will notify you by email at least 30 days before the changes take effect. We will also update the "Effective" date at the top of this page.

If a change requires renewed parental consent under COPPA, we will obtain that consent before implementing the change. We will never retroactively apply a more permissive policy to data collected under a more restrictive one.

If you have questions about this COPPA notice, want to exercise your parental rights, or have concerns about how your child's information is handled, please contact us: