Privacy Policy
Effective March 18, 2026
Introduction
Twiggle ("we", "us", "our") operates a child-safe messaging application. This Privacy Policy explains how we collect, use, and protect information when you use our service. We are committed to protecting children's privacy and complying with the Children's Online Privacy Protection Act (COPPA).
Information We Collect
Parent Accounts
Name, email address, payment information (processed by Stripe — we do not store credit card numbers).
Child Profiles
Display name, age group, picture password (stored as a salted cryptographic hash — we cannot see or recover it).
Messages
Text messages, voice recordings, photos, and video call data. All messages are encrypted at rest.
Device Information
Device identifiers and push notification tokens, used solely for delivering alerts and maintaining sessions.
Usage Data
App interaction data for service improvement. No child personal information is included in analytics.
How We Use Your Information
- Provide and operate the messaging service
- Scan messages for child safety using AI (see AI Processing Disclosure below)
- Send safety alerts to parents via push notification, email, and SMS
- Fulfill legal obligations including mandatory reporting to NCMEC
- We do NOT use your data for advertising, marketing, or user profiling
AI Processing Disclosure
Messages sent through Twiggle are automatically scanned by AI for child safety purposes. This scanning is powered by Anthropic's Claude.
- Message content is sent to Anthropic's API for safety analysis
- Anthropic processes this data under a data processing agreement
- Anthropic does not use Twiggle message data for model training
- AI scanning is mandatory and cannot be disabled — it is a core safety feature, not an optional setting
Messages in Twiggle are automatically scanned by AI (powered by Anthropic's Claude) for child safety purposes. AI scanning detects potentially harmful content including inappropriate language, threats, and illegal material.
Third-Party Services
We use the following third-party services to operate Twiggle. None of these parties receive your data for their own marketing or advertising purposes.
- Anthropic
- AI safety scanning of message content
- Cloudflare
- Infrastructure, hosting, storage, and encryption
- Resend
- Delivery of parent alert emails
- OneSignal
- Delivery of parent push notifications
- Twilio
- Delivery of parent alert SMS messages (when activated)
Children's Privacy
We comply with the Children's Online Privacy Protection Act (COPPA).
- We do not knowingly collect personal information from children under 13 without verifiable parental consent
- Parents must create and authorize all child accounts
- Children's personal information is encrypted at rest and never included in application logs
- Parents can review, modify, or delete their child's data at any time
- Upon consent revocation, child data is deleted within 30 days, except for content that must be legally preserved
Data Retention
- Active accounts: data retained while the account is active
- Deleted accounts: data removed within 30 days of deletion request
- Legally preserved content (mandatory-flagged material): minimum 1 year retention, as required by federal law
- Audit logs: minimum 3 years retention
Data Security
- Encryption at rest for all child personal information
- TLS 1.2 or higher for all data in transit
- Role-based access controls and comprehensive audit logging
- Regular security reviews and monitoring
Your Rights
You have the right to:
- Access the data we hold about you or your child
- Correct any inaccurate information
- Delete your account and all associated data
- Revoke consent for your child's data collection at any time
To exercise these rights, contact us at privacy@twiggle.app.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of any material changes via email. Continued use of the service after notification constitutes acceptance of the updated policy.
Contact
For privacy questions or to exercise your rights, contact us at privacy@twiggle.app.