Children's Privacy (COPPA) and Families
Izzy is a general-audience app with an optional family feature. This page explains what that means for a child under 13 added to a family.
Last updated: August 5, 2026
Izzy is a general-audience ski-safety app. It is not directed to children under 13, and children under 13 cannot create an Izzy account for themselves. This page explains the one circumstance in which Izzy holds information about a child under 13 — a parent or guardian adding that child to a family — and what we do and do not do with it.
Children cannot sign up on their own
Anyone creating their own Izzy account must provide a date of birth, and an account whose date of birth is under 13 is rejected. This is enforced on our servers at the point the record is written, not just in the app's screens, and it applies both when an account is created and if someone later tries to change their date of birth. Where a person's age is unknown to us, our age checks treat them as a minor rather than as an adult — they fail toward protection, not toward access.
The only way a child under 13 appears in Izzy
A child under 13 exists in Izzy only as a member of a family created by their parent or guardian, and only after that adult has given consent. A child cannot be added by another child, by a friend, or by another adult in the family — only the parent or guardian who created and pays for the family can add a child, and our servers enforce that restriction independently of the app.
How we obtain parental consent
When a parent or guardian sets up a family and adds a member whose birthdate is under 13, the app presents a dedicated consent screen before any information about that child is collected. It states that US law (COPPA) requires the adult's consent, describes what will be collected, and asks the adult to affirm that they are the child's parent or legal guardian and to actively consent. The family cannot proceed without it.
This consent is self-attested by the adult — we do not independently verify their identity or that they are the child's parent or guardian beyond that affirmation. We are evaluating additional verification methods.
A parent or guardian may withdraw consent at any time — see Reviewing and deleting your child's information below. Withdrawing consent means we stop collecting information from that child and delete what we hold about them.
What we collect from a child
We collect the minimum the family safety features need, and no more:
- Display name and birthdate, provided by the parent. The birthdate is used to apply the protections on this page, not to profile the child.
- Family role and membership status, and the per-child permission settings the parent chooses — whether the child may message outside the family, connect with ski buddies outside the family, see other users on resort bulletins, and how much they may use the Izzy AI companion each day.
- Whether voice-activated SOS is enabled for that child.
If the parent chooses to give the child their own device login so the child can use the app on their own phone or watch, we then also collect, from the child's use of the app:
- Location while they are using location features, so the family can see them on the mountain and so SOS can tell ski patrol where they are.
- Activity statistics — runs, vertical, speed, distance, duration.
- Messages they send within the limits the parent set.
- Voice and text sent to the Izzy AI companion, to generate replies.
- Device information needed to deliver notifications, and fall-detection status if enabled.
We do not ask a child for a phone number, a home address, a photograph of themselves, or their school. We never require a child to disclose more than is reasonably necessary to use a feature.
Extra protections that apply to children
These are built into the product, not just promised here:
- We do not build an AI memory profile of a child. Izzy remembers facts about adult users on paid plans to personalize conversation. For anyone our systems classify as a minor, storing those remembered facts is blocked outright at the database level — on every plan.
- A child's profile is not visible to strangers. Personal details of a minor are visible only to people who share an active family with that child — never to other users at the resort.
- Diagnostic and crash reports from a child's device are discarded, on every reporting channel, rather than sent to our error-monitoring provider.
- A child's data ages out faster. See the retention table below.
- Age checks fail closed. If we cannot confirm that someone is 13 or over, they receive the protections of a minor.
No advertising, no behavioural profiling, no tracking
Izzy contains no advertising SDK, no analytics SDK, and no attribution or ad-measurement SDK of any kind — not for children and not for adults. There is no advertising identifier, no App Tracking Transparency prompt, and no cross-app or cross-site tracking, because there is nothing in the app that would do it.
We do not serve advertising to anyone. We do not show behavioural or interest-based advertising to children. We do not build advertising profiles, and we do not sell or rent personal information. We do not use a child's information to market to them, and we do not send children promotional or engagement-driving notifications.
Who we share a child's information with
We do not sell or rent personal information, and we do not disclose a child's information to third parties for their own purposes. We use a small number of service providers who process data only on our instructions and only to make the app work:
| Provider | What it handles for a child |
|---|---|
| Supabase | Our database, authentication and file storage — where family and profile data lives |
| Google (Gemini AI) | Voice and text sent to the Izzy AI companion, to generate a reply |
| Google (Maps) | Displaying the map |
| Apple Push Notification service / Firebase Cloud Messaging, via Expo | Delivering notifications |
| Apple App Store / Google Play, and RevenueCat | Subscription status. Children are not charged and do not purchase |
| Sentry | Crash and error diagnostics — excluded for children, see above |
Voice sent to Google's Gemini AI on our paid tier is not used to train Google's models and is not read by human reviewers. It is retained by Google for a limited period solely to enforce their prohibited-use policy.
We may also disclose information where the law requires it, or where it is necessary to protect someone's safety — which, for a ski-safety app, includes giving a location to ski patrol or emergency services during an SOS. That is the point of the product.
Reviewing and deleting your child's information
A parent or guardian who created the family can, at any time, in the app:
- Review everything we hold about their child, on the family roster screen.
- Correct the child's display name, birthdate, and every per-child permission setting.
- Remove the child from the family, which stops any further collection from that child.
- Refuse further collection while keeping the account — turn off the child's location sharing, outside-family messaging, and AI access individually, rather than removing them.
- Delete the entire family, by deleting their own Izzy account, which removes the family and every child profile in it. See our account deletion page.
Only the parent or guardian who created the family can do these things. Children cannot delete a family, and a child's account has no self-deletion control — that decision belongs to the adult who consented.
If you would like us to delete everything associated with your child, including any device login created for them, email solomon@izzywolf.com from the address on the family's account with the subject "Delete my child's data". We will confirm and complete it within 7 days.
How long we keep a child's information
| Information | Kept for |
|---|---|
| Location history | 60 days, then deleted automatically; a 90-day sweep runs as a backstop |
| Facts remembered by the AI companion | Not stored for children at all |
| Fall-detection diagnostic state | 90 days, then cleared |
| Profile, family membership and settings | Until the parent removes the child or deletes the family |
| Crash and diagnostic reports | Not collected from children |
Our commitment
We comply with the Children's Online Privacy Protection Act (COPPA), and Izzy is committed to following the Google Play Families Policy.
If you believe we hold a child's information without consent
Email solomon@izzywolf.com. If we learn we have collected personal information from a child under 13 without the consent described above, we will delete it promptly. If you are a parent or guardian and you believe your child provided us information without your consent, contact us and we will delete it and close the account.
Contact
Email solomon@izzywolf.com. We aim to reply within two business days.