Safety & Compliance

How Twiggle protects children and families

Our Commitment

At Twiggle, child safety is not a feature — it is the foundation. Every design decision, every line of code, and every policy is built around protecting children. Safety cannot be toggled off, downgraded, or bypassed.

COPPA Compliance

• No child account can be created without verifiable parental consent
• Parent verification via account creation with credit card payment (FTC-approved method)
• Parents can review, modify, and delete their child's personal information at any time
• Parents can revoke consent and request full account deletion
• We collect only data necessary for the service to function
• Children's data is never used for advertising, marketing, or shared with third parties

AI-Powered Safety Scanning

All messages — text, voice, photos, and video calls — are scanned before delivery. Scanning is powered by Anthropic's Claude AI. Anthropic does not use Twiggle's data for model training.

Yellow Tier

Parent-configurable word filters and sensitivity settings. Parents can adjust or disable.

Red Tier

Immediate alerts for aggressive or threatening content. Cannot be disabled by any user.

Mandatory Tier

Legally required detection of CSAM, grooming, enticement, and trafficking. Cannot be configured or disabled by anyone — not parents, not administrators, not any system setting.

If scanning is temporarily unavailable, messages are queued — never delivered unscanned.

Mandatory Reporting

Twiggle is required by federal law (18 U.S.C. § 2258A) to report suspected child sexual abuse material (CSAM) to the National Center for Missing & Exploited Children (NCMEC) CyberTipline.

• Flagged content is immediately preserved with tamper-evident integrity
• No user — including parents and administrators — can modify or delete preserved content
• Reports are filed within required legal timeframes

Encryption & Data Protection

• All children's personal information is encrypted at rest
• All data in transit uses TLS 1.2 or higher
• Children's personal information never appears in application logs, error messages, or analytics
• Infrastructure hosted on Cloudflare's global network

Parent Rights

As a parent using Twiggle, you have the right to:

• Review all data collected about your child
• Modify your child's settings, contacts, and permissions
• Delete your child's account and all associated data
• Revoke consent at any time, immediately terminating messaging capability

Contact Us

For any privacy or safety questions, contact us at privacy@twiggle.app.