Privacy Policy
Bassinet is a social platform for children ages 0–13. We take the privacy of every child on this platform seriously. This policy explains what we collect, how we use it, and the rights parents and guardians have over their child's information. We comply fully with the Children's Online Privacy Protection Act (COPPA).
Who We Are
Bassinet is operated by WareActics Corporation / Baby Learn Online Inc. ("Bassinet," "we," "our," or "us"). We build technology designed specifically for children and their families. Our platform, available as an iOS application, allows children in age groups from Baby (0–2) through Teen (12–13) to share 7-second video moments and connect with Pals their own age.
You can reach us at support@bassinetapp.com for any privacy-related questions or requests.
This App Is Designed for Children Under 13
Bassinet is directed to children under 13 years of age. We require verifiable parental consent before a child's account is activated. A parent or legal guardian must provide their email address and verify it before any child can use the platform. We do not knowingly collect personal information from children under 13 without confirmed parental consent.
If you believe we have collected information from a child without proper parental consent, please contact us immediately at support@bassinetapp.com. We will investigate and delete the information promptly.
Information We Collect
From the parent or guardian:
- Email address (used for account verification and notifications)
- Parental consent confirmation
From the child's account profile:
- Display name (no real name required — emoji is welcome)
- Age group selection (Baby, Toddler, Child, Preteen, or Teen)
- Profile picture (optional, uploaded by the parent or child)
- Color preference (1 of 8 app accent colors — no personal data)
Content created on the platform:
- 7-second video clips recorded and uploaded by the child
- Engagement actions (giving or receiving Gold Pops, Red Pops)
- Pal connections (linked accounts within the child's age group)
Technical information:
- Device type (iOS) and app version
- General usage patterns for platform security and stability
We do NOT collect:
- Precise geolocation data
- Payment or financial information
- Persistent advertising identifiers
- Behavioral advertising profiles
- Social security numbers or government identifiers
- School name, home address, or phone number
How We Use Information
We use the information we collect only for the following purposes:
- Creating and authenticating the child's Bassinet account (via AWS Cognito)
- Sending account verification emails and parental notifications (via AWS SES)
- Displaying the child's content on their timeline and to Pals
- Reviewing content before it is published (content moderation)
- Maintaining platform security, safety, and integrity
- Improving the platform's performance and reliability
We do not use children's information for advertising, do not build behavioral profiles, and do not share information with marketing or analytics companies.
COPPA Compliance and Parental Rights
Bassinet is built from the ground up to comply with the Children's Online Privacy Protection Act (COPPA). As a parent or legal guardian, you have the following rights:
- Review the personal information we have collected about your child
- Request correction of any inaccurate personal information
- Request deletion of your child's account and all associated data
- Refuse to allow further collection or use of your child's information
- Withdraw consent at any time (which will result in account deactivation)
To exercise any of these rights, contact us at support@bassinetapp.com. We will respond to all verifiable parental requests within 30 days.
Information Sharing
We do not sell your child's personal information. Ever. We share information only as necessary to operate the platform:
- Amazon Web Services (AWS) — cloud infrastructure, data storage, and email delivery. AWS processes data on our behalf under strict data processing agreements.
- Apple Inc. — app distribution via the App Store and TestFlight. Apple's own privacy policy governs their data practices.
We do not share information with advertising networks, data brokers, social media companies, or any third party for commercial purposes. We may disclose information if required by law or to protect the safety of a child on the platform.
Content Moderation
Every video uploaded to Bassinet is reviewed by our team before it appears on the timeline. No content is published automatically. This is one of our core safety commitments to parents and children.
Content that violates our Community Guidelines — including anything inappropriate, harmful, or not suitable for the relevant age group — will not be approved and will be permanently removed. Repeated violations may result in account suspension.
Data Security
We use industry-standard security practices to protect your child's information:
- All data is transmitted over encrypted HTTPS/TLS connections
- Account authentication is managed by AWS Cognito with Secure Remote Password (SRP)
- Media files are stored in private AWS S3 buckets — not publicly accessible
- Access to user data is restricted to authorized Bassinet personnel only
No method of electronic storage or transmission is 100% secure. If you have concerns about the security of your child's data, contact us at support@bassinetapp.com.
Data Retention and Account Deletion
We retain your child's account data only as long as the account is active or as required by law. When an account is deleted:
- All personal profile information is permanently removed
- All uploaded video content is deleted from our servers
- All Pal connections are severed
- Parent email address associated with the account is removed
To request account deletion, email us at support@bassinetapp.com with the subject line "Account Deletion Request." We will complete the deletion within 30 days.
International Users
Bassinet is operated from the United States. If you or your child are located outside the United States, please be aware that information we collect may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.
If you are a resident of the European Economic Area or United Kingdom, our legal basis for processing personal data is our legitimate interest in operating a safe platform for children and our obligation to comply with COPPA. You may have additional rights under GDPR — contact us to exercise them.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes — especially changes that affect how we handle children's data — we will notify parents via the email address associated with the account at least 14 days before the changes take effect.
We encourage parents to review this policy periodically. Continued use of Bassinet after a policy change constitutes acceptance of the updated terms.
Contact Us
For all privacy questions, data requests, or COPPA inquiries:
WareActics Corporation / Baby Learn Online Inc.
Email: support@bassinetapp.com
Platform: bassinetapp.com
We respond to all privacy requests within 30 days. For urgent child safety concerns, please include "URGENT — CHILD SAFETY" in the subject line of your email.