About This Notice

MyDD.ai ("we," "us," or "our") operates MyDD.ai website and chatbot located at chat.mydd.ai. We are committed to protecting children's privacy online. This notice explains our information practices regarding children under 13.

Operator Contact Information:
MyDD.ai
1400 Maryland Ave.
Havertown, PA 19083
Email: privacy@mydd.ai

For questions about the FTC's Children's Online Privacy Protection Act (COPPA), visit:
https://www.ftc.gov/tips-advice/business-center/privacy-and-security/children%27s-privacy

Information We Collect from Children

We collect the following personal information from children under 13:

How We Use Children's Information

We use collected information only for the following purposes:

1. Provide the Service: Deliver AI assistant responses and age-appropriate content recommendations
2. Safety & Security: Monitor conversations for concerning content, detect violations of Terms of Service, prevent abuse
3. Parental Communication: Send weekly activity summaries, safety alerts, and service updates to parents
4. Internal Operations: Improve AI responses, fix technical issues, conduct safety research, maintain security
5. Legal Compliance: Respond to law enforcement requests when legally required

We do NOT use children's information for:

• Behavioral advertising or targeted marketing
• Building user profiles for advertising
• Any purpose not disclosed to parents

Information Sharing & Disclosure

We do NOT sell, rent, or share children's personal information with third parties for their marketing purposes.

We DO share information with:

Parent's Choice:
You may consent to our collection and use of your child's information WITHOUT consenting to disclosure to third parties. However, this may limit functionality since we rely on service providers (cloud hosting, AI processing) to operate the service. Contact us to discuss options.

Verifiable Parental Consent

BEFORE
we collect, use, or disclose personal information from your child, we require verifiable parental consent. Here's our process:

No Collection Before Consent:
We do NOT activate accounts or collect any information beyond the parent's email and phone number until consent is verified.

Parental Rights & Access

Parents have the following rights at any time:

1. Review Information: Request to review all personal information we've collected from your child
2. Delete Account: Request deletion of your child's account and all associated data
3. Refuse Further Collection: Revoke consent and stop any further collection or use
4. Correct Information: Update or correct any inaccurate information
5. Receive Copy: Obtain a downloadable copy of all your child's data

To Exercise Rights:
Email: privacy@mydd.ai with subject "COPPA Parent Request"

We will respond within 10 business days. We may require identity verification to prevent unauthorized access.

Limitations:
We cannot delete information required for legal compliance, security purposes, or to complete transactions your child initiated.

Data Retention

We retain children's personal information only as long as necessary:

• Active Accounts: Information retained while account is active
• After Account Deletion: Most information deleted within 30 days
• Backup Systems: Information in backups deleted within 90 days
• Legal Requirements: Some information retained longer if legally required (e.g., chat logs with safety concerns may be retained for child protection investigations)

Anonymized/aggregated data (that cannot identify your child) may be retained indefinitely for research and improvement.

Data Security

We implement reasonable security measures including:

• Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict employee access controls; only authorized personnel access children's data
• Security Monitoring: 24/7 monitoring for unauthorized access or breaches
• Regular Audits: Annual third-party security audits
• Staff Training: All employees complete COPPA and child safety training
• Incident Response: Documented procedures for data breaches

Despite these measures, no internet transmission is 100% secure. Parents should supervise children's online activities.

No Conditioning on Excessive Collection

We do NOT require children to provide more information than reasonably necessary to participate in our service. Children can use basic features with only a nickname and birth year.

Support for Parental Control Tools

We support common parental control software and settings. Our service is designed to work with filtering tools, and we provide guidance for parents on enabling additional protections.

Changes to This Policy

If we make material changes to how we collect, use, or share children's information, we will:

1. Update this disclosure with the new Last Updated date
2. Email all parents directly
3. Obtain new verifiable parental consent if required by law

Contact Us

Questions about our COPPA practices? Contact:

Privacy Team
MyDD.ai
1400 Maryland Ave.
Havertown, PA 19083
Email: privacy@mydd.ai

Chief Executive Officer:
Jacob Rozran

For general information about COPPA and children's online privacy, visit the FTC at:
https://www.ftc.gov/tips-advice/business-center/privacy-and-security/children%27s-privacy