Child Protection Policy

Table of Contents

1. Scope
2. Legal Framework
3. Age Policy & Parental Consent
4. Data Minimization for Minors
5. AI Safety Guardrails
6. Parental Controls
7. Incident Response
8. Contact for Child Safety

This Child Protection Policy applies primarily to Déblo.ai (deblo.ai), which is specifically designed as an educational platform for students of all ages, including minors.

Other ZeroSuite developer tools and infrastructure products (0fee.dev, otpx.dev, 0sh.dev, 0seat.dev, 0cron.dev, 0sql.dev, 0diff.dev, FLIN) are not directed at children under 16. If we become aware that a child under 16 is using these developer services without appropriate authorization, we will take steps to restrict access and notify the account holder.

ZeroSuite's child protection practices are designed to comply with the following regulations and guidelines:

• COPPA (Children's Online Privacy Protection Act): As a Delaware C-Corporation, ZeroSuite complies with COPPA requirements for the collection and processing of personal information from children under 13 in the United States.
• GDPR Article 8: For children under 16 in the European Union, processing of personal data requires parental or guardian consent. Member states may lower this threshold to 13.
• Google Play Families Policy: Déblo.ai's Android application complies with Google Play's requirements for apps directed at children, including content standards and advertising restrictions.
• Apple App Store Section 1.3 (Kids Category): Déblo.ai's iOS application complies with Apple's requirements for apps in the Kids category, including data collection limitations and content guidelines.

Déblo.ai has no minimum age restriction, provided that verified parental or guardian consent is obtained for minors.

3.1 Children Under 13 (COPPA)

• Verifiable parental consent is required before an account can be created for a child under 13.
• Parents or guardians may register on behalf of their child.
• Parents may review all activity associated with their child's account at any time.
• Parents may request deletion of their child's account and all associated data at any time.

3.2 Children 13 to 15

• Parental or guardian consent is required in jurisdictions where GDPR Article 8 applies (EU/EEA).
• Parents retain the ability to monitor activity and request data deletion.

3.3 Users 16 and Over

Users aged 16 and over may create accounts independently, subject to the standard Terms of Service and Privacy Policy.

4.1 Data We Collect

For minor users of Déblo.ai, we collect only the minimum information necessary to provide the educational service:

• Name or username (chosen by parent or child)
• School level (grade/class, e.g., CP, CE1, 6ème, Terminale)
• Learning history within the application (subjects studied, questions asked, performance metrics)
• Device identifiers (for authentication and security purposes only)

4.2 Data We Do NOT Collect

• Precise geolocation data
• Government-issued identification documents or numbers
• Biometric data (fingerprints, facial recognition, voiceprints)
• Social connections, friend lists, or contact lists
• Photographs or videos of the child

4.3 Data Retention

Academic and learning data is retained for the lifetime of the account plus 30 days after account deletion. After this period, all data is permanently and irrevocably deleted.

No data from minor users is sold to advertisers or shared with third parties for marketing purposes.

Déblo.ai employs multiple layers of AI safety measures to protect minors:

• Content Filtering: All AI-generated content is filtered for age-appropriateness before being displayed to the student. Content related to violence, sexual material, drug use, or other inappropriate topics is blocked.
• Anti-Jailbreak Protections: Prompt injection and jailbreak attempts are detected and blocked. Users who repeatedly attempt to bypass safety filters may have their accounts flagged for review.
• Distress Signal Detection: Keyword detection systems monitor for indicators of abuse, self-harm, or other distress signals. Detected signals are escalated through our incident response protocol for human review.
• Zero Tolerance for CSAM: Any detection of child sexual abuse material results in immediate reporting to the National Center for Missing & Exploited Children (NCMEC) and account deletion.
• Restricted Content Generation: The AI system is prohibited from generating violent, sexual, drug-related, or otherwise harmful content, regardless of how the prompt is constructed.

Parents and guardians have access to the following controls for their child's Déblo.ai account:

• Parental PIN: A secure PIN code to lock and unlock spending and account settings, preventing unauthorized purchases.
• Weekly Activity Reports: Automated activity summaries sent to the parent's registered email address, including subjects studied, time spent, and performance metrics.
• Feature Restrictions: Ability to restrict access to specific subjects, features, or functionalities within the application.
• Spend Limits: Configurable spending limits for Déblo Pro in-app purchases, with parental PIN required for all transactions.
• Account Deletion: Parents may request complete deletion of their child's account and all associated data at any time.

7.1 CSAM Detection

If child sexual abuse material is detected on any ZeroSuite platform:

• Immediate report filed with the National Center for Missing & Exploited Children (NCMEC) in the United States
• Immediate suspension of the associated account
• Law enforcement notification in all relevant jurisdictions
• Preservation of evidence as required by law

7.2 Distress Signals

When distress keywords (indicators of abuse, self-harm, suicidal ideation, or other concerning behavior) are detected:

• The flagged interaction is routed for human review within 24 hours
• If an immediate risk is identified, the parent or guardian is notified
• Appropriate local authorities or crisis services are contacted when warranted

• Child Safety Inquiries: [email protected]
• Response Time: Within 72 hours of receipt
• Abuse Reports: [email protected]
• Security Incidents: [email protected]