Parental consent

Siraaris built for children ages 7–9. Federal law (the Children's Online Privacy Protection Act, or COPPA) requires that we obtain verifiable parental consent from a parent or legal guardian before we collect any personal information from a child. This page explains exactly how that works in practice.

1. Children do not sign up

Only a parent can create a Siraar account. The kid app has no sign-in screen at all — children open the app and pick a profile that the parent has already configured. There is no path by which a child can register themselves, link a social account, or enter an email address.

2. The consent flow

2.1 The parent creates an account

The parent signs up at https://parents.siraar.app with their own email address and password. Authentication is handled by Clerk. We send a confirmation email and the parent verifies the address before continuing.

2.2 The parent reviews what we collect

Before adding a child profile, the parent is shown a clear, plain-language summary of what data we collect from a child (display name, avatar configuration, birth month and year, and in-app reading activity) and what we explicitly do not collect (last name, full date of birth, address, phone number, photos uploaded by the child, voice recordings, or precise location).

2.3 Verifiable consent

We combine two methods that are individually accepted by the FTC under COPPA:

• Email-plus. The parent receives a confirmation email and must click a unique, time-limited link to confirm the request to add a child profile. We send a second email after the consent is recorded so the parent has a written record.
• Payment-card verification. Adding a paid plan requires a transaction on a parent-controlled credit or debit card, which the FTC accepts as evidence that the person consenting is the parent. For free-tier accounts that do not include a payment, we rely on email-plus alone, which is also FTC-accepted for internal use of child data (i.e., when we do not disclose the data to third parties for advertising or profiling).

We never disclose a child's personal information to third parties for advertising or profiling. The Siraar kid app contains no third-party advertising SDKs, no analytics SDKs, and no behavioral tracking.

2.4 The child profile is created

Only after verifiable consent is recorded can the parent add a child profile. The child can then open the kid app on the family device and tap their profile.

3. Your rights as a parent

You can, at any time:

• Review what we have stored about your child, from the parent dashboard.
• Delete the child profile (soft-delete within minutes, hard-delete within 30 days).
• Refuse to permit further collection of your child's information (delete the profile, or close the parent account).
• Revoke consent you previously gave.

To exercise any of these rights, use the parent dashboard, or email [email protected]. We respond within 30 days.

4. Schools and group settings

Siraaris currently designed for home use only. We do not offer a school edition, and teachers should not create child profiles on a school's behalf without each child's parent or legal guardian completing the consent flow themselves.

5. International equivalents

For families outside the United States, the same flow satisfies the parental-consent requirements of the EU GDPR “information society services” rule (Article 8) and the UK Age Appropriate Design Code. Where the local age threshold is higher than the COPPA-13 line, we apply the higher threshold.

6. Changes

If we materially change how we obtain or record parental consent, we will notify the parent on file by email at least 14 days before the change takes effect, and we will not apply the change retroactively to data already collected.

7. Contact

Questions about consent, deletion, or COPPA in general: [email protected].