Privacy Policy

What We Collect

GentleGateAI collects only the minimum information needed to provide the service:

• Parent account information (email address, subscription status)
• Child profile settings (age preset, filter configuration — no identifying information about the child is required)
• Conversation logs for the parental dashboard (encrypted at rest and in transit)
• Usage metrics for improving the service

We do not collect children's real names, photos, location data, or any information beyond what is necessary to operate the filtering service.

Voice Input

GentleGateAI includes an optional voice input feature that allows children to speak their questions instead of typing them. This feature is disabled by default and must be explicitly enabled by a parent in the app's Settings.

How It Works

When enabled, voice input uses Apple's on-device Speech Recognition framework to convert spoken words into text directly on the child's device. Only the resulting text transcript is submitted to GentleGateAI's content filter — identical to how typed messages are handled.

Privacy Guarantees

• No audio is recorded. Spoken audio is processed in real time and discarded immediately after transcription completes.
• No audio is stored. We retain no audio recordings — not on the device, not on our servers.
• No audio is transmitted. Audio data never leaves the device. Only the converted text is sent to GentleGateAI's servers for safety filtering.
• On-device processing only. Speech-to-text conversion is performed entirely on the child's device using Apple's Speech framework. GentleGateAI's servers never receive or process raw audio.

Parental Control

Voice input is off by default. Parents can enable or disable it at any time in the app's Settings. Disabling voice input immediately stops all speech recognition activity. Voice input is also disclosed in the COPPA consent screen shown to parents during initial setup.

COPPA Compliance

GentleGateAI is designed to comply with the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §6501 et seq.). Key commitments:

• Verifiable parental consent is required before any child profile is created, via a two-step email confirmation process.
• We do not collect personal information from children under 13 without verifiable parental consent.
• Parents may review, correct, or delete their child's information at any time through the parental dashboard or by contacting [email protected].
• We do not condition a child's participation in the service on the collection of more information than is reasonably necessary.

Data Sharing

We never sell children's personal data to third parties. We do not share conversation content with advertisers. We may share data with:

• Service providers who help us operate the platform (under strict data processing agreements)
• Law enforcement, only when required by law or to protect child safety

Data Security

All conversations are encrypted in transit (TLS 1.3) and at rest (AES-256). Access to conversation data is restricted to the parent account holder and authorized GentleGateAI personnel for safety review purposes only.

Data Retention and Deletion

Parents may delete a child's account and all associated data at any time through the parental dashboard. Upon deletion, conversation history and profile data are permanently removed within 30 days. Account data for billing purposes is retained as required by law.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise any of these rights, contact [email protected].

Changes to This Policy

When our full Privacy Policy is published, we will notify all registered users by email. Material changes affecting children's data will require fresh parental consent.