Privacy Policy

Pikolo AI is made up of two parts: this parent web dashboard, used only by adults, and a separate child-facing mobile app that a parent pairs to a child's profile. This policy covers both.

Children never create an account, sign in, or interact with Pikolo AI directly outside of the paired app experience their parent has already configured. Every piece of information described below is provided by, or collected on behalf of, the parent — not the child.

Account information: when you sign up or sign in (via Google, through Clerk), we receive your name, email address, and Google profile photo.

Child profile information you provide: a nickname, an emoji avatar, age or birth year, a theme color, and a 6-digit PIN. The PIN is hashed with Argon2id before it ever reaches our database — we cannot see, recover, or display it in plain text, and neither can our support staff.

Content choices: the YouTube channels and playlists you approve for each child.

Activity synced from the paired mobile app: which approved videos were watched, for how long, and when; favorited videos; and basic device information (a device name you choose, platform, and a pairing credential) needed to keep that device connected to the right child profile.

Billing information: subscription plan and payment status. Card details are collected and processed directly by Lemon Squeezy, our payment processor — Pikolo AI's own servers never receive or store your full card number.

Waitlist signups: if you join our pre-launch waitlist, we store the email address you provide.

Pikolo AI is built around the assumption that a child using the paired app may be under 13. We comply with the Children's Online Privacy Protection Act (COPPA): a Pikolo AI account, and every child profile within it, can only be created and controlled by a parent or legal guardian who has verified their own identity through Google sign-in.

We do not knowingly collect personal information directly from a child. A child profile's name, avatar, and age are supplied by the parent, not the child, and a child cannot change account-level settings, add channels, or access this dashboard.

If you believe a child has provided us with personal information outside of a parent-managed profile, contact us at contact@pikoloai.app and we will delete it.

To operate the service: authenticating you, storing your children's profiles and settings, and syncing approved content to their paired device.

To show you analytics about watch activity — daily/weekly watch time, top channels, and top videos — so you can make informed decisions about what your child watches.

To send account-related and trial/billing notifications (e.g. a reminder before a free trial ends).

We do not use your family's data to serve third-party ads, and we do not build advertising profiles of children.

Pikolo AI uses the YouTube Data API to let you search for channels, and to fetch video and channel metadata (titles, thumbnails, durations, publish dates) for content you've approved. By using Pikolo AI, you are also agreeing to be bound by the YouTube Terms of Service.

Google's own Privacy Policy, describing how Google handles data in connection with the YouTube API, is available at policies.google.com/privacy.

We do not sell your data, and we do not share it with third parties for their own marketing purposes.

We share data only with the infrastructure providers necessary to run Pikolo AI, each under their own data-protection terms: Clerk (authentication), Supabase (database and file storage), Vercel (hosting), Lemon Squeezy (payment processing), and the YouTube Data API (channel/video metadata).

We may disclose information if required by law, or to protect the rights, safety, or property of Pikolo AI, our users, or the public.

Data is encrypted in transit (HTTPS/TLS) between your devices, our servers, and our infrastructure providers. Child PINs are hashed with Argon2id, never stored in plain text. Sensitive credentials, such as a paired device's access token, are treated as secrets and never exposed to the child-facing app beyond what's required for it to function.

No method of transmission or storage is 100% secure, but we design Pikolo AI to minimize what's collected and to protect it appropriately.

Deleting a child profile permanently removes their approved channels and playlists, watch history, favorites, and paired devices.

Deleting your parent account removes all associated data, including every child profile under it.

You can delete a child profile or your account at any time from the dashboard, or by contacting us at contact@pikoloai.app.

You can access, correct, export, or delete your family's data at any time from the dashboard.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA/CPRA — including the right to request a copy of your data or object to certain processing. Contact contact@pikoloai.app to exercise these rights, and we'll respond as required by applicable law.

If we make material changes to this policy, we'll update the date below and, where appropriate, notify you directly (e.g. by email).

Questions about this policy or your data? Email us at contact@pikoloai.app.