Legal

Privacy policy

Effective 27 October 2026. Applies to the SafePlay website, parent dashboard and the SafePlay Kids app.

The short version

• SafePlay is a parent-controlled video app. Children never create an account, sign in, or enter any personal information.
• We collect the minimum we need to run the service: a parent's account details, the first name and optional birth year a parent gives each child profile, the channels a parent approves, and what was watched so the parent can see it.
• No advertising, no advertising identifiers, no profiling, no recommendation engine, no selling or sharing of data. Content only ever comes from the parent's own list.
• Videos play inside YouTube's own player using its privacy-enhanced mode; YouTube's privacy policy applies to playback.
• You can see, correct, export or delete everything from the parent dashboard. Closing the account permanently deletes the family's data.

1. Who we are

SafePlay is provided by APPS Design Agency, the company behind SafePlay (www.safetubeforkids.com) (“we”, “us”), the data controller for the personal data described here. Contact: info@appsdesignagency.co.uk.

2. What we collect, and why

From parents (the account holder):

• Email address, to create and identify the account.
• Either a password (stored only as a salted hash by our authentication provider) or Google sign-in. If you choose “Continue with Google,” Google authenticates you instead of a password, and shares your name, email address and profile picture URL with us as part of sign-in. We use the name the same way as a name you would type yourself; the profile picture URL is kept in your authentication record but is not shown or used anywhere in the product.
• Your name and a family name (optional if you sign up with email and password), shown in the dashboard and in the weekly digest.
• Billing status for the Family plan. Payments are handled by Stripe; we store the subscription status, renewal date and Stripe's customer and subscription identifiers — never card details.
• Digest preference and the emails we send you (account confirmation, password reset, the optional weekly digest).

About each child, entered by the parent:

• A first name or nickname, so the child recognises their profile. Choose whatever you like; it need not be their real name.
• An optional birth year (never a date of birth), used only to size the experience for their age.
• The parent's choices: approved channels, per-video decisions, Strict Mode and Shorts settings, and screen-time budgets.

Generated while a child uses the SafePlay Kids app:

• Watch history: which approved video played, when, and for how long — so parents can see what their child watched and screen-time limits can work. Kept for the last 14 days on the Free plan and for the life of the account on the Family plan.
• Requests for more time that the child sends to the parent, and the parent's answer.
• A device pairing record: a random identifier we generate for the device, the device name you chose, its platform, and when it was last used. This is not an advertising identifier and cannot identify the device to anyone else.

We do not collect location, contacts, photos, microphone or camera data, precise device identifiers (IDFA, advertising ID, IMEI) or anything a child types — the Kids app has no search box, no comments and no messaging. Its only text fields are the grown-up sign-in and the grown-ups PIN, and the PIN is checked on the device and never sent to us.

3. How we use it (and our lawful bases under UK GDPR)

• To provide the service you asked for — running the whitelist, playback, screen time and the dashboard (contract).
• To keep children safe and the service honest — a child's account-free device pairing, parental PIN, revocation from the dashboard (legitimate interests, with the child's best interests as the primary consideration under the ICO Children's Code).
• To bill the Family plan and meet accounting obligations (contract; legal obligation).
• To send the weekly digest only if you leave it switched on (consent — every digest has an unsubscribe link).
• Optional AI safety grades on the Family plan: we send a channel's public title, description and recent upload titles to an AI provider to produce a plain-English safety grade. Nothing about your child or your family is included in that request.

We never use personal data for advertising, profiling, or automated decisions with legal or similar effects on you or your child.

4. Children

SafePlay is designed for use by children aged roughly 3 to 12 under their parent's control. A child cannot create an account; a parent sets the device up and can remove it at any time. We have designed the service to the UK Age Appropriate Design Code (Children's Code): data minimisation, high-privacy defaults, no nudge techniques, no profiling, and a clear cue in the app that a grown-up can see what they watch. We do not knowingly collect personal information directly from a child. If you believe a child has provided us information without a parent's involvement, contact us and we will delete it.

For families in the United States (COPPA)

The SafePlay Kids app is available in the United States and is made for children, so the Children's Online Privacy Protection Act (COPPA) applies to it. This section is our notice to parents under that law. The rest of this policy applies as well.

• Who collects the information. APPS Design Agency, the company behind SafePlay (www.safetubeforkids.com), contact info@appsdesignagency.co.uk. We collect the information described here. When a video plays, Google (YouTube) also receives the usual technical data from the device, such as its IP address, through its own player, under Google's privacy policy (Section 5); we send Google nothing about your child.
• What we collect from a child's use of the app, and how. Only the items listed in Section 2 under “Generated while a child uses the SafePlay Kids app”: watch history, requests for more time, and a random device-pairing identifier. They are collected automatically while the app is used. Nothing a child types is collected: the app has no search box, comments or messaging, its only text fields are the grown-up sign-in and the PIN gate, and the PIN is checked on the device and never sent to us. We use them only to show you what was watched, to run the screen-time limits you set, and to keep the device paired to your account — never for advertising, profiling or recommendations.
• Disclosure. We do not disclose a child's information to anyone, sell it, or make it public. It is stored with Supabase in London (Section 5), which acts only on our instructions.
• How consent works. A child's profile and device can only be set up from a parent's account. The parent's email address is confirmed before the account can be used (by us, or by Google if you sign in with Google), and on the Family plan the card payment is a further confirmation. By setting up a child's profile and pairing a device, you consent to the collection described here.
• Your rights. You can review everything we hold about your child in the parent dashboard, delete it (delete the child's profile, or close the account), and refuse any further collection by removing the device from the dashboard — the app stops working on that device within eight hours at most, when its current session expires, or immediately if you remove the setup on the device itself with the grown-ups PIN. We never ask a child, or require a parent, to provide more information than the app needs to work.

5. Who we share data with

Only the processors we need to run the service, under contracts that restrict them to our instructions:

• Supabase — database, authentication and hosting, in the London (eu-west-2) region.
• Vercel — hosts this website and the parent dashboard, and provides anonymous, cookie-free page-view statistics for the public pages so we can see which guides are read. No cookies are set and no identifier is stored.
• Stripe — payments for the Family plan (Stripe is an independent controller for the payment itself).
• Resend — delivers our emails to parents.
• Google / YouTube — videos play in YouTube's embedded player in privacy-enhanced mode; we also read public channel and video metadata through the YouTube Data API. Google's privacy policy applies to playback and Google may set cookies once a video is played. If you choose to sign in with Google, Google also acts as your identity provider for the parent dashboard, sharing your name, email address and profile picture URL with us as described in Section 2.
• Anthropic — the AI safety grades described above (public channel information only).

We do not sell personal data and we do not share it with advertisers or data brokers.

Where data goes. SafePlay is run from the United Kingdom and is offered to families in many countries. Our database is in London. Some of our providers, such as Supabase, Vercel, Stripe, Resend and Google, may handle or access data in the United States or elsewhere outside the UK and the European Economic Area. Where they do, we rely on the safeguards UK and EU law recognise: an adequacy decision (including the UK–US data bridge, where the provider is certified) or standard contractual clauses (with the UK addendum where UK law applies). Email us for details of the safeguards. We apply the protections described in this policy to every family, wherever you live; your local law may give you further rights.

6. How long we keep it

• Account and child-profile data: for as long as the account exists.
• Watch history: 14 days on the Free plan; the life of the account on the Family plan. If a Family subscription lapses — a failed payment, a pause or a cancellation — we keep the full history for 30 days from that point before the Free-plan rule applies, so a payment problem or a change of mind doesn't lose it.
• Archived child profiles: 30 days, then permanently deleted with their history.
• Closing the account (Settings → Danger zone) permanently deletes the family, every child profile, all approvals and all history, and cancels any subscription. This cannot be undone.
• Billing records: as long as tax law requires.

7. Your rights

You can access, correct and delete your family's data yourself from the dashboard. You also have the right to object, to restrict processing, to data portability, to withdraw consent for the digest, and to complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority. Email us and we will respond within one month.

8. Security

Data is encrypted in transit and at rest. Every record is protected by row-level security so a family can only ever reach its own data. The Kids app holds only a device credential in the operating system's secure storage — never a parent's password.

9. Changes

We will post any change here and update the effective date; for material changes we will email account holders first.

Questions? Support · info@appsdesignagency.co.uk