Children's Privacy Policy

This policy applies to children under 13 who receive notes within a parent or guardian-created family space.

A child who is 13 or older creates their own login and is treated as an adult member. When a family admin adds a child aged 13 or older, we ask for their birth month and year. For how data is handled for members 13 and older, please see our main Privacy Policy.

Under-13 children are receive-only. They have no account, no login, no password, no session, and no device access. They cannot send anything, and nothing is collected from an under-13 child online. The child never signs in and takes no action in the app.

What exists about an under-13 child is provided by the parent or guardian who created the profile or is generated automatically: the child's first name, an assigned display color, which family space they belong to, their role in it, and the date the profile was created, for example. The profile also carries internal settings that control how it works, such as its account type and the fact that sending is disabled. We do not collect birth dates, email addresses, passwords, logins, device identifiers, or location data for under-13 children.

A parent or guardian may choose to attach a photo to a note, or scan a physical, handwritten note created by their under-13 child and upload it into the family vault. These uploaded images may contain the child's likeness, handwriting, and first name.

These images are provided entirely by the parent, not collected directly from the child online. In this scenario, the under-13 child remains receive-only, has no account, and takes no action in the app. While a scanned note displays the name of the family member tagged as its author, the app records no information about who appears in a photo attachment. There is no tagging, labelling, or identification of people in photos, and the app therefore cannot tell which photos show a given child.

For scanned notes authored by adult members, we offer an optional feature to read the handwritten words. This is never automatic: it only runs when a member taps to read a specific note's handwriting. When used, a copy of the image is sent to Google (specifically Google's Gemini model, accessed through Floot's AI service) solely to convert the handwriting into text. No account information—such as the sender or recipient's name, email, or family details—is sent with the image. Floot has confirmed to us that these requests are routed through Google's paid Vertex AI or Gemini API tier — never a free or consumer tier — and that neither the image nor the resulting text is used to train or improve Google's models, and neither is reviewed by human annotators at any point. Floot has also confirmed that it does not use data from customer applications, including these images, to train any models. Per Floot, Google may retain this content on its side for up to 90 days. These statements reflect Floot's representations to us rather than terms we have independently verified. The resulting transcript reproduces the note as written, including misspellings, odd capitalization and mistakes, because the original errors are part of what is being preserved; they are not corrected or tidied up. The transcript is generated by AI, not by a person, and can occasionally misread a word, a symbol, or an emoji. It cannot be edited or corrected by hand. The original image is always kept and displayed with the transcript, so the note itself remains the record. The text is stored with the note in the family vault and deleted together with it. Notes attributed to a child are never sent to any AI or transcription provider, and child profiles cannot use the feature.

These images are not shared outside your family space except with contracted service providers operating on our behalf to deliver the app (such as our media storage provider), and are never sold, used for advertising, or shared with advertisers, analytics providers, or other third parties.

Solely to deliver tucks between family members and maintain the child's vault within their family space. Never for advertising. Shared only with service providers operating on our behalf under contract, and never with advertisers, analytics providers, or other third parties.

Because no information is collected from the child online and the child has no account, there is no separate in-app consent step. The parent or guardian creates the child's profile inside their own family space and controls it at all times.

Parents and guardians can at any time:

• View the notes they have sent to their child
• Delete any or all content associated with their child — including scanned notes attributed to that child, which immediately removes the record, the stored image file from our storage provider, and any transcript text
• Remove any individual note in their family space, which permanently and immediately removes that note and its attached media from our systems
• Remove the child's profile from the family entirely, which permanently hard-deletes their first name, profile, and all notes attributed to them

When a family admin deletes a child's content, the record, transcript text, and the stored media files are permanently and immediately removed. These controls are available in Settings → Children's accounts or by contacting hello@givetuck.com.

Child content is retained as long as the family space is active. When a parent deletes child content or removes the child account, it is permanently and irreversibly removed from our systems. Residual copies may persist briefly in routine infrastructure backups maintained by our service providers and are overwritten in the ordinary course of their retention cycles.

For any COPPA-related requests — reviewing the information held about a child, deleting a child's content, or removing a child's profile — contact us at hello@givetuck.com or through the Need help? form in Settings.