Privacy, in plain language.

Who this policy covers

This policy applies to the PARE Parent app, PARE Kids app, parent web portal, and public PARE Media website (together, the “Services”). The Services are operated by BrightPrompt Consulting LLC, which publishes them under the PARE Media name. For the purposes of COPPA, BrightPrompt Consulting LLC is the operator. Questions and privacy requests go to support@paremedia.com. The PARE Parent and PARE Kids apps are distributed on the App Store by Logan Moore, so that is the seller name Apple shows on the listing and on receipts.

PARE is built around a caregiver-managed household. A parent or legal guardian creates the household and child profile, pairs the child device, and controls the child’s approved viewing space.

Information we collect

Parent and household information

• Name, email address, password hash, household name, and authentication records.
• Optional sign-in information supplied by Apple or Google when that sign-in method is used.
• Preferences, approved and blocked channels or videos, schedules, keywords, and parent decisions.
• App Store subscription information needed to verify household access, such as the Apple product identifier, original and latest transaction identifiers, purchase and expiration dates, trial or offer status, renewal or billing-grace status, revocation status, and a random household account token used to bind the purchase to the correct PARE household. PARE does not receive or store your payment-card number.
• First-party campaign source, medium, campaign, content, and landing-page labels supplied when a parent creates the household. PARE retains these adult acquisition labels with the household so a verified App Store trial, purchase, renewal, or refund can be measured without attaching advertising data to a child profile.
• Legacy parent-created music ratings and comments, plus related reports and blocked-author choices retained from earlier releases.

Child profile and activity information

• A parent-provided child display name, child PIN credential, household membership, and pairing status.
• Search terms, selected search results, video requests, approval outcomes, and approved-content history.
• Video identifiers, viewing start and end times, seconds watched, and player readiness or error events.
• Legacy kid-created music playlist names and the YouTube video identifiers included in those playlists.

Device and service information

• Push-notification device tokens, app and device information, network type, and event timestamps.
• Standard request and diagnostic information such as IP address, browser or app user agent, and server logs.
• YouTube video and channel metadata, including titles, thumbnails, descriptions, and channel identifiers.
• Aggregate public-site events containing the event date, page path, and first-party campaign source, medium, campaign, or content labels supplied in the page URL. These event rows do not store a user, household, child, IP-address, or device identifier. Temporary browser-session storage carries the first source to parent registration and suppresses duplicate page events within that tab.

Optional public website analytics

With your permission, PostHog receives public page visits, calls to action and completed adult website actions with a random browser and session identifier, device category, language, coarse referral category, recognized campaign identifier and the hostname of an external referring website. Referring hostnames never contain a page path or query string. We do not send form contents, email addresses, child activity, private household information or authentication codes. Session recordings and automatic element capture are disabled. This optional measurement does not run in the native apps or private family workspaces. See website analytics details for browser storage, retention and withdrawal information.

Voice search

If a child chooses voice search, PARE Kids requires Apple’s on-device speech recognition. The microphone audio and draft transcript stay on the device and are not stored by PARE. When the child submits the resulting words, that text is handled like a typed search term and is sent to PARE and YouTube to return results. If on-device recognition is unavailable, voice search is unavailable and the child can type instead.

We do not ask children to provide an email address, phone number, precise location, photo, or contacts.

How we use information

• Authenticate accounts, pair devices, and keep each household’s information separated.
• Verify whether PARE Family is active and unlock or restrict the Parent app, web portal, and paired Kids devices for the household.
• Let a child search, request, and watch content within the controls set by the caregiver.
• Show parents requests, search and watch history, schedules, and content-control settings.
• Deliver security and service emails plus requested push notifications.
• Send a weekly household activity summary only to a parent who turns it on for their own account. Every summary includes a link that turns future summaries off.
• Protect the Services, enforce limits and parental controls, diagnose failures, and prevent misuse.
• Maintain and improve core reliability using aggregated or service-level diagnostics.
• Measure public guide readership and the adult path from campaign to parent account, trial, paid subscription, renewal, or refund. Child profiles, searches, requests, and viewing activity are never joined to marketing attribution.

Music and community-review entry points are unavailable in the current apps and portal. Legacy approval counts, ratings, comments, and playlists may remain in service records until the retention or deletion steps below are completed.

We do not sell personal information. PARE does not use third-party advertising or behavioral advertising.

When information is shared

We disclose information only as needed to operate the Services or when the law requires it:

• YouTube and Google. Search and video requests use YouTube API Services. Loading or playing an embedded YouTube video can send device, network, and playback information to Google. Use of YouTube is also governed by the YouTube Terms of Service and Google Privacy Policy.
• Apple. Apple processes app distribution, PARE Family purchases and subscription billing, and may process a device token and notification payload when PARE sends an Apple Push Notification. PARE receives signed transaction and renewal status information from Apple to verify household access. Sign in with Apple and App Store purchases are governed by Apple’s privacy terms.
• Infrastructure providers. Hosting, database, email, and operational vendors process limited information on PARE’s behalf under service-provider arrangements.
• Legal and safety needs. We may preserve or disclose information when reasonably necessary to comply with law, protect users, investigate abuse, or defend legal rights.

We do not permit service providers to use household or child data for their own advertising.

Children’s privacy and parent choices

PARE Kids is directed to children under 13, so PARE is subject to the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, and the Federal Trade Commission’s COPPA Rule, 16 C.F.R. Part 312.

Before PARE creates a child profile, an authenticated parent or legal guardian with an active App Store entitlement must review the Parent Notice and give explicit consent. PARE records the notice version, time, adult account, and consent method. The parent account is the control point for the child’s profile and activity.

Parents can review a child’s profile, requests, searches, viewing activity, and approved content in PARE Parent or the web portal. Parents can change controls, remove individual records where the product provides that control, and delete a child profile. A parent can also request access, correction, or deletion by contacting us.

We do not knowingly collect a child’s information outside a caregiver-created and paired household. If you believe a child’s information was collected without appropriate parent or guardian involvement, contact us so we can investigate and delete it.

COPPA also gives a parent the right to refuse to permit any further collection or use of their child’s information and to direct us to delete it (16 C.F.R. § 312.6). Deleting a child profile in PARE Parent or the web portal does this immediately. A parent can also withdraw consent by contacting us from the parent account email; PARE does not condition a child’s participation on providing more information than is reasonably necessary (16 C.F.R. § 312.7).

Legacy parent community content

Earlier releases allowed authenticated parent accounts to post music ratings or comments. The current apps and portal do not expose posting, rating, reporting, or blocking controls. Previously submitted comments were displayed under the generic author label “PARE parent,” without the parent’s name, email address, child information, or household identity.

Do not include names, contact details, links, or information about a child in a review. PARE filters common contact details and inappropriate language, but no automated filter is perfect. Contact us if a review exposes personal information or creates a safety concern.

Retention and deletion

Account, household, approval, legacy playlist and review, and child activity information is kept while the household account is active because it provides the family’s history and controls. Subscription verification records are kept while needed to provide access, reconcile renewals or refunds, prevent one purchase from being attached to multiple households, and meet financial, fraud-prevention, or legal obligations. Parents can delete individual child profiles and request deletion of legacy community content. Cached YouTube metadata expires on a short operational schedule and is refreshed or removed according to YouTube API requirements. Application diagnostic logs are retained for up to 30 days unless a specific security, fraud, or legal matter requires a limited record for longer. Aggregate public-site acquisition and subscription-conversion events are retained for 180 days and then deleted by a scheduled retention job. First-party acquisition labels retained with a household are deleted with the household account. A conversion event stores an opaque transaction fingerprint to prevent duplicate counting, but not the Apple transaction identifier itself.

Parents can delete child profiles from the portal. A parent can delete an entire account in PARE Parent or from the portal’s subscription-access screen. If another parent remains in the household, the deleting parent’s credentials and personal legacy-review records are removed while shared household controls remain with the other parent. If the deleting parent is the final parent, the active household record, child accounts, activity, controls, legacy playlists, credentials, and community-review data are deleted together. A verified deletion request is completed from the active service within 30 days. Residual copies may remain in restricted provider backups until those backups age out and are not restored for ordinary product use. You can also follow the instructions on the support page. We may retain limited information only where required by law or needed to document the request and protect the Services.

Security

PARE uses access controls, encrypted network connections, hashed passwords, scoped authentication tokens, and operational safeguards intended to protect personal information. No online service can guarantee absolute security. Please contact us promptly if you believe an account or device has been compromised.

Your privacy choices

• Review and update parent or child profile information in the Services.
• Change notification permission in the device’s system settings.
• Turn optional weekly household activity emails on or off in parent settings.
• Manage or cancel PARE Family in Apple Account subscription settings.
• Request access, correction, or deletion by contacting us from the parent account email.
• Unpair or delete a child profile and revoke its access.

The public website does not use third-party advertising trackers or build child marketing profiles. The first-party aggregate public-site counts described above remain separate from optional PostHog analytics. Optional PostHog analytics stays off until you allow it, and browser Do Not Track or Global Privacy Control signals keep it off. Choose Analytics settings at the bottom of public pages to decline or withdraw at any time. Withdrawal removes the local analytics identifiers and stops new events; it does not erase events already received.

Changes and contact

We will update the effective date when this policy changes. Material changes affecting child information or a parent’s choices will be communicated through the Services or the parent account email when appropriate.