The short version.
LOUP is a children's device. We collect only the minimum data needed to operate it. We require parental consent before collecting anything from a child. We do not sell children's data. We do not share it with advertisers. We do not build profiles of children.
What is COPPA?
The Children's Online Privacy Protection Act (COPPA) is a US federal law that limits the data companies can collect from children under 13 without verifiable parental consent. LOUP is designed for children, and we comply with COPPA — not as a minimum standard, but as a design principle.
Parental consent
A parent or legal guardian must create the LOUP account and activate the device. No child account is created until a parent completes setup and consents to our data practices. Children cannot create standalone accounts or change their own settings.
What we collect from children
Very little, for specific reasons:
- Device identifier. A serial number that links the device to the parent account. Used to sync contacts and settings. Not used for advertising.
- Call logs. A record of who called whom and when — the same metadata any phone carrier retains. Not the content of calls. Voice is end-to-end encrypted and not stored by LOUP.
What we do not collect from children
Because of how LOUP is built, we cannot collect the following — and we do not attempt to:
- No messages. LOUP does not support texting. No message content is ever collected.
- No photos or videos. LOUP has no camera. No images are ever collected.
- No location data. LOUP has no GPS. We do not track, store, or share where a child is — ever, on any model.
- No browsing history. LOUP has no browser. There is no browsing history to collect.
- No app usage. LOUP has no apps. No usage data is collected.
- No biometrics. LOUP collects no face data, fingerprints, or voice prints.
- No behavioral profiles. We do not analyze how children use the device to build advertising profiles or behavioral models.
Third parties
We do not share children's data with any third party for advertising, marketing, or profiling purposes. We do not use third-party advertising SDKs on the device or in the parent app. The only third parties who may process data are infrastructure providers (AWS for hosting, Stripe for payments) operating under strict data processing agreements that prohibit them from using the data for their own purposes.
Parental rights
Parents may at any time:
- Review any personal information we have collected from their child.
- Request deletion of their child's data.
- Refuse further collection or use of their child's data by deactivating the device.
- Revoke consent by contacting us (see below).
We will respond to parental requests within 30 days and will delete data promptly upon a verified request.
Data retention
We retain call logs for 90 days to support billing and troubleshooting. They are then deleted. Account data is retained until you request deletion or deactivate your account.
Contact
For COPPA-related requests or questions: hi@loupkids.com