Privacy Policy

Last updated: 7 November 2026

Buddy is a helper app for children aged about 5 to 10. It is run by Sixsense FZ-LLC ("we"). You can reach us at contact@sixsense.mn. This policy explains, in plain words, what we collect, why, and how parents stay in control.

1. Parents are in charge

• Children never create an account. Only a parent or legal guardian aged 18 or over can create a Buddy account.
• Before a child can use Buddy, the parent must give consent by ticking a consent box when signing up, and then confirm their email address with a 6 digit code we send. Until the email is confirmed, Buddy does not answer any child. We record the date, time and version of the consent, and email you a consent receipt that explains how to withdraw it.
• The parent creates a child profile and protects the parent page with a PIN of 4 to 6 digits. The PIN is checked on our server and stored only as a salted hash. After 5 wrong tries the parent page locks for 15 minutes. If you forget the PIN, we email a code to the parent's email address so you can choose a new one.
• We designed this to follow the parental consent ideas of the US Children's Online Privacy Protection Act (COPPA) and the child consent rules in the EU and UK GDPR (often called GDPR-K, including the UK Age Appropriate Design Code). If you are not the child's parent or guardian, do not create an account.

2. What we collect (and nothing more)

• Parent: email address, a password (stored only as a secure hash by our login provider), a salted hash of the parent PIN, your time zone, your settings (daily minutes, allowed hours, pause, approved websites, voice on or off, outside links, how long chats are kept), and the consent date, version and email confirmation date.
• Child profile: a first name or nickname, an age range (5 to 6, 7 to 8 or 9 to 10) and the language they speak to Buddy. No birthday, photo, school, address or contact details.
• Chats: the text of what your child says or types to Buddy and Buddy's replies, plus a safety label when a message was refused or worrying. When a child shares things like a phone number, email, street address, link or password, our server hides it before saving it or sending it to the AI.
• Usage time: how many minutes each child used Buddy per day, so your time limit works.
• On the device only: saved beats, drawings you save, and small settings (like which child is using Buddy) stay in the browser on your device and are never sent to us.

We do not collect location, contacts, photos, camera, advertising IDs or device fingerprints. We do not ask children for personal information.

3. Voice

Voice input is off until a parent turns it on (when adding the first child, or later on the parent page). When it is on and your child taps the microphone, the speech features built into your browser turn speech into text. Depending on the browser, this may happen on the device or through the browser maker's speech service (for example Apple for Safari, Google for Chrome, Microsoft for Edge) under their own privacy terms, and that company may receive the audio. Buddy only receives the text. We never record or store audio. Spoken replies use voices on your device. Only if a parent turned voice on, and your device has no on-device voice for the language, an online voice from the browser maker may be used, which sends the reply text to that company.

4. How we use the data

• To answer your child: the chat text is sent to an AI model provider (Anthropic, with Google Gemini as a backup if Anthropic cannot answer) to write Buddy's reply. We send only the age range and the recent chat, never your email and never your child's nickname. Phone numbers, emails, links, addresses and passwords are hidden before anything is sent. We use these providers' developer (API) services, not their consumer chat apps. Anthropic's commercial terms say API data is not used to train its models by default.
• To keep your child safe: automatic checks look for upset, unsafe or grown up topics and show them as alerts on your parent page.
• To run your settings: time limits, allowed hours and approved websites.
• To send you a password reset code when you ask for one.

We do not sell data. We do not show ads. We do not use analytics or tracking scripts. We do not build profiles of children for marketing. We share data only with the service providers below, who process it for us.

5. Service providers

• Supabase (database and login hosting)
• Netlify (website hosting)
• Anthropic and Google (AI replies)
• Resend (password reset emails)

6. Links to other sites

Videos open on YouTube Kids, and approved websites open in a new tab. Those sites have their own privacy policies. Buddy only opens YouTube Kids, never regular YouTube, and only lists websites the parent approved. By default a grown up must type the parent PIN before any link leaves Buddy. A parent can switch that off on the parent page.

7. How long we keep data, and deleting it

We keep children's information only as long as it is needed for the reason we collected it, and never indefinitely. This is our written retention policy:

• Chats (what your child says and Buddy's replies): needed so the parent can read them and Buddy can follow the conversation. Deleted automatically every night once they are older than the number of days the parent chose: 7, 30 (the default), 90 or 180.
• Daily minutes used: needed for the time limit. Deleted after 90 days.
• Child profile (nickname, age range, language): kept while the parent account exists, so Buddy works. Deleted when the parent deletes the profile or the account.
• Parent account and settings: kept until the parent deletes the account.
• Sign up that is never confirmed by email: deleted after 7 days. Email codes expire after 15 minutes and are removed soon after.
• Audio: never stored by Buddy.

• On the parent page you can delete one child's chats, all chats, a child profile, or your whole account at any time, and download a copy of your data.
• Deleting your account removes your settings, child profiles, chats and usage records right away. Backups made by our hosting provider are overwritten within about 30 days.
• You can also email contact@sixsense.mn to ask for a copy of your data, a correction, or deletion. We may ask you to confirm you own the account.

8. Your rights

As a parent you can review your child's information (every chat is on the parent page), download it, change or withdraw your consent, stop further collection by pausing Buddy or deleting the profile, and ask us to delete it. Withdrawing consent does not affect what happened before. People in the EU, UK and similar places also have rights to access, correct, delete, restrict and move their data, and to complain to their data protection authority.

9. Security

Data travels over encrypted connections. Each family can only read its own records. The parent PIN and password are stored as salted hashes, the PIN is checked on our server with a lock after repeated wrong tries, and the server hands out chats and accepts parent changes only after the PIN was entered. Our service providers are asked to protect the data. No system is perfect, so please use a strong password and keep your PIN private. Some providers process data outside your country.

10. Changes

If we change this policy in a way that affects children's data, we will tell parents by email or in the app before the change applies, and ask for new consent when the law requires it.