Privacy and Legal
How D2 collects and protects information, how parents stay in control of their children’s data, and the terms that apply to the service.
Last updated:
1Privacy Notice
Who we are
D2 is a parent-controlled companion that helps children with household and school tasks, virtual rewards, savings goals and money skills. This notice explains what we process and why.
What we collect
Parents: email, display name, language and time zone. Children: a nickname and an age band only — never a legal name, birth date, address, school or precise location. Activity: tasks, approvals, virtual wallet movements, goals and XP. Paired child devices use an anonymous account identifier.
How we use it
To provide the service (tasks, approvals, virtual wallet, goals), keep accounts secure, show content in each person’s language and improve the product using aggregated, non-identifying metrics. We do not build advertising profiles.
Who we share it with
Only service providers that host or run D2 on our behalf (for example database hosting, web hosting and AI processing), under contracts that limit use to providing the service. We do not sell or rent personal data.
2Children’s Privacy & Parental Consent
Parental consent first
Only adults can create a D2 account. A parent or legal guardian must give consent before any child profile is created, and that consent is recorded.
Data minimisation
We ask for the minimum needed for the child experience: a nickname and an age band. Children cannot create accounts, add contacts or talk to other users.
No ads, no strangers
There is no advertising, no public profile, no messaging with other people and no unrestricted web browsing in the child experience.
Parent controls
Parents can review their child’s data, change AI and feature settings, unpair a device instantly and request deletion at any time.
3Data Protection & Your Rights
Your rights
Depending on where you live, you may access, correct, export or delete your data, object to or restrict certain processing, and withdraw consent at any time.
How to exercise them
Use the settings in the app or write to us. We may verify that you are the parent or account holder before acting on a request.
Retention
We keep data while the account is active. Virtual wallet history is append-only for integrity; when a family deletes its account, its data is removed or anonymised within a reasonable period, except where the law requires otherwise.
5Information Security
Protection by design
Data is encrypted in transit. Every family’s data is isolated with row-level access rules enforced by the database, and sensitive actions are authorised on the server.
Integrity
Virtual wallet movements are recorded in an append-only ledger that cannot be edited, and important actions are written to an audit log.
Restricted child sessions
A child’s device never uses a parent’s credentials. It receives a restricted session through a single-use pairing code, and parents can revoke it instantly.
6D2 AI & Your Data
AI suggests, parents decide
D2 can explain, coach and suggest. It cannot approve tasks, move money, approve purchases or change parental controls.
Safety filters
Messages pass through safety checks before and after the AI model. High-risk topics receive fixed, reviewed responses that encourage talking to a trusted adult, and personal information is not sent to the model.
Use of conversations
We do not use your family’s data for advertising, and we do not use it to train AI models. Messages are processed by our AI provider only to generate a reply.
7Virtual Money
Educational and virtual
Balances in D2 are virtual and educational. D2 does not hold, transfer or custody real money and does not offer bank accounts, cards or investments.
Parent-approved
Rewards and purchase requests are always approved by a parent. Any real-world payment between a parent and child happens outside D2.
8Terms of Use
Accounts
You must be an adult and the parent or legal guardian of the children you add. You are responsible for keeping your account secure and for the activity of the family profiles you manage.
Acceptable use
Do not misuse the service, attempt to access other families’ data, interfere with security, or use D2 for unlawful purposes.
The service
D2 is provided as is and may change as we improve it. We may suspend access in case of misuse. These terms may be updated and we will indicate the date of the latest version on this page.
9Reporting a Vulnerability or Safety Concern
Responsible disclosure
If you find a security vulnerability, please report it privately to us with steps to reproduce. Do not access or modify other people’s data.
Child safety
If you see content or behaviour in D2 that could put a child at risk, contact us right away. If a child is in immediate danger, contact local emergency services.
Questions?
Write to us about privacy, your data or these terms at contacto@sadata.io.
Back to home