COPPA / GDPR-K Notice for Parents and Guardians

Last updated: April 28,2026

This Notice explains how Yup handles children's personal information and how parents and legal guardians can control it. This Notice is designed for:

  • Parents and guardians of children under 13 in the United States, under the Children's Online Privacy Protection Act and Rule ("COPPA").

  • Parents and guardians of children below the applicable digital consent age in the European Economic Area and United Kingdom, under GDPR / UK GDPR child consent rules, sometimes called "GDPR-K" in product contexts.

Please also read our Privacy Policy and Terms of Service.

1. Who Operates Yup

Controller / operator: Danylo Hennadiiovych Dubrovskyi, a sole proprietor registered in Ukraine
Address: 30 Hradonachalnytska Street, Apt. 4, Odesa, Odesa Oblast 65052, Ukraine
Privacy contact: privacy@yup.kids
Support contact: support@yup.kids

2. What Yup Is

Yup is a family app that helps parents and guardians create tasks, missions, routines, coins, rewards, and parent-managed store items for children. Yup is designed so a parent or guardian creates and controls the family account. Yup is not submitted as a Kids Category app and is directed primarily to parents and guardians. Children use child-facing parts of the app only with parent or guardian permission. The Yup website waitlist and contact form are intended for adults, including parents, guardians, investors, and partners. Children should not submit waitlist or contact form information.

3. Parent Consent

Before Yup collects personal information from a child where parent consent is required, we will ask the parent or legal guardian to give consent through the parent account or another consent flow. Parent consent method: parent account creation and parent-managed child-profile setup within the parent account, with consent records maintained in our systems. Where required by applicable law, we may request additional verification steps, including email confirmation or another verifiable parental consent mechanism, before enabling or continuing child-facing features. Examples of possible consent methods may include signed consent, email-plus where legally available, payment-card verification, identity verification handled by a compliant provider, video verification, knowledge-based verification, or another legally accepted method. The actual method used by Yup must be confirmed before launch. If consent is not provided, the child may not be able to use child-facing features that require personal information, and we may delete incomplete child profile information after a short period.

4. Children's Information We May Collect

Yup may collect the following child information:

  • First name, nickname, or display name.

  • Avatar, icon, or profile color.

  • Age, age range, birth year, or birthday if needed for age-appropriate features.

  • Tasks, missions, habits, routines, and completion status.

  • Coins, points, streaks, badges, reward balances, and progress.

  • Rewards created or approved by the parent.

  • Optional notes, comments, or uploaded content if those features are enabled.

  • Device and app data, such as app version, device type, logs, crash reports, IP address, approximate location from IP address, and push notification token if enabled.

Yup is not designed to collect children's precise location, contacts, biometric identifiers, government IDs, health data, school records, or financial account details.

5. How We Collect Children's Information

We may collect children's information:

  • From the parent or guardian when they create or manage a child profile.

  • From the child when they use child-facing features, complete tasks, choose avatars, or interact with missions and rewards.

  • Automatically from the device to operate, secure, debug, and improve the Service.

We do not ask children to provide more personal information than reasonably necessary to use the relevant feature.

6. How We Use Children's Information

We use children's information to:

  • Create and display child profiles.

  • Show tasks, missions, routines, coins, rewards, and progress.

  • Sync family account information across parent and child devices.

  • Send reminders or service notifications if enabled.

  • Help parents manage family routines.

  • Provide support.

  • Maintain security and prevent misuse.

  • Analyze reliability, crashes, and basic app performance.

  • Comply with legal obligations.

We do not use children's personal information for targeted advertising.

7. How We Share Children's Information

We may share children's information:

  • With the parent or guardian and family members inside the same family account, based on account roles.

  • With service providers that help us host, store, secure, support, analyze, and deliver the Service.

  • With app stores, payment providers, or push notification providers when necessary for the Service.

  • With authorities or other parties if required by law or needed to protect safety, rights, or security.

  • In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate protections.

We do not sell children's personal information. We do not disclose children's personal information for targeted advertising. If we ever want to disclose children's personal information to third parties for targeted advertising or similar purposes, we will request separate parent consent where required by COPPA or other law. Yup may use service providers reasonably necessary to deliver the website and app, such as app stores, hosting providers, analytics, crash reporting, push notifications, and support tools. Material third-party processors used in the live service will be disclosed in our Privacy Policy and store privacy disclosures as they are enabled in production.

8. Parent Rights

Parents and legal guardians may:

  • Review the personal information Yup has collected from their child.

  • Ask us to correct or update that information.

  • Ask us to delete their child's personal information.

  • Withdraw consent for further collection or use.

  • Refuse to allow further sharing of their child's information, except where sharing is necessary to provide the Service. To make a request, contact privacy@yup.kids.

We may ask for information to verify that you are the parent or legal guardian before we provide access, make changes, or delete information.

9. If You Withdraw Consent

If you withdraw consent, we will stop collecting, using, or disclosing your child's personal information except where we are allowed or required to keep limited information for legal, security, backup, or fraud-prevention reasons. Some child-facing features may stop working if the information is needed to provide those features.

10. Data Retention for Children

We keep children's personal information only as long as reasonably necessary to provide the Service, support the family account, comply with law, maintain security, and resolve disputes. Deleted child profile data is removed from active systems within 30 days, unless limited retention is required. Backups are deleted or overwritten on a regular schedule within 90 days. We do not keep children's personal information indefinitely.

11. GDPR / UK GDPR Child Consent

In the EEA and UK, children below the local digital consent age may need parent or guardian authorization when a service relies on consent to process their personal information. The age threshold varies by country and may be between 13 and 16 in the EEA. Yup will use parent or guardian authorization where required and will provide privacy information in clear language. Parents and guardians may exercise applicable GDPR rights for their child, including access, correction, deletion, restriction, objection, withdrawal of consent, and data portability, where available.

12. Security

We use reasonable safeguards to protect children's information, including access controls, encryption in transit, restricted internal access, and security monitoring. No online service is completely secure. If you believe your child's information may be at risk, contact us at security@yup.kids.

13. Contact Us

For parent consent, child privacy, or data deletion questions, contact: `Danylo Hennadiiovych Dubrovskyi, sole proprietor registered in Ukraine` `30 Hradonachalnytska Street, Apt. 4, Odesa, Odesa Oblast 65052, Ukraine` `privacy@yup.kids`

Support: support@yup.kids