COPPA Compliance

The Children’s Online Privacy Protection Act (COPPA) is a United States federal law enacted in 1998 and enforced by the Federal Trade Commission (FTC). It applies to online services directed at children under the age of 13 and to operators who have actual knowledge that they are collecting personal information from children under 13.

COPPA requires operators to: (a) provide clear notice of their data practices; (b) obtain verifiable parental consent before collecting personal information from children; (c) give parents the ability to review and delete their child’s information; and (d) maintain reasonable data security practices.

Parent-only accounts. Only parents or legal guardians can create Kychai accounts. Children cannot sign up on their own. All account management, billing, and data decisions are controlled by the parent.

No child personal information. We do not collect personally identifiable information (PII) from children. Child profiles are identified by a display name chosen by the parent. We do not ask children for their real name, email address, physical address, phone number, photo, or any other PII.

Verifiable parental consent. Before a child can use the Service, the parent must provide verifiable consent. We use a consent mechanism that meets FTC guidelines, including email-based consent with a confirmation step. We retain records of parental consent as required by law.

Data access and deletion. Parents can review all information associated with their child’s profile at any time through the Parent Dashboard. Parents may request deletion of their child’s data by contacting us at privacy@kychai.com, and we will process the request within 30 days.

No behavioral advertising. We do not serve behavioral or targeted advertising to children. We do not share children’s data with advertisers. We do not build advertising profiles based on children’s activity.

We collect only the minimum data necessary to provide the Service. For child profiles, this includes:

• Display name — chosen by the parent during profile setup. This is not the child’s real name.
• Usage data — information about how the child uses the Service, such as games created, templates selected, features used, and session duration. This data is used to power the Parent Dashboard and to improve the Service.
• Device information — basic technical information such as device type and browser type, used for compatibility and troubleshooting.

We do not collect:

• Real names, email addresses, or physical addresses
• Phone numbers
• Photos, videos, or audio recordings
• Precise geolocation data
• Social Security numbers or government identifiers
• Any information that could be used to directly identify a child

As a parent using Kychai, you have the right to:

• Review all information we have collected from your child by viewing the Parent Dashboard or contacting us.
• Delete your child’s data at any time by removing the child profile or contacting us.
• Refuse further collection by deleting the child profile, which will immediately stop all data collection for that profile.
• Control sharing — manage whether your child’s published games are visible to others, and revoke sharing at any time.
• Set time limits — configure daily and weekly usage limits through the Parent Dashboard.

We will never require a child to disclose more information than is reasonably necessary to participate in the Service.