Parent Rights & Controls

PHASE B — DOCUMENT 7: PARENT RIGHTS & CONTROLS

Status: draft for review. Public location: kidchat.io/trust/parents. This document maps each right to the control that delivers it. A right with no control is marked, not advertised.

A. YOUR RIGHTS, AND WHERE TO EXERCISE THEM

Nothing here may be published as available until its control is live.

B. ACCESS IS PROTECTED AND RECORDED

Reading your child's transcripts requires your Parent PIN or re-authentication, and each access event is recorded in an audit log. (C-12) Your child is told, permanently and in words they understand, that you can read their conversations. (C-11) We never describe a child's KidChat conversations as private from the account holder.

C. RETENTION AND DELETION

• Live conversation data: 30-day rolling retention by default. (C-04)
• Parent-requested deletion: removed from active production systems as soon as reasonably practicable.
• Backups: target maximum purge window of 30 additional days after deletion from active systems, subject to technical validation of our infrastructure providers. [TECHNICAL VALIDATION REQUIRED — BACKUP RETENTION]
• Backup data is not restored into normal production use except for legitimate disaster-recovery or security purposes. If a restore occurs, deletion requests are re-applied where technically required.
• We do not publish "deleted within 30 days from all systems" until vendor behavior has been verified and evidenced. Until then, published copy says: deleted from active systems, with backups purged on a rolling cycle.
• Safety and privacy event records keep the minimum metadata only — category and timing, not the sensitive value. (C-07)
• Aggregate product metrics survive deletion only where genuinely de-identified and not reasonably linkable to a child.

D. WITHDRAWING PERMISSION

One control: "Withdraw permission and delete my child's data." It ends the child's access immediately, starts deletion, records the withdrawal, and confirms by email with the completion window. It is never harder than giving consent, never requires a phone call, and is never buried under billing.

E. HOW TO REACH A HUMAN

During Alpha these aliases may route to the same authorized operator; the responsibilities behind each remain separately documented and separately owned.

Response times: 20 business days in Mexico (derechos ARCO), 30 days in the United States.

F. DERECHOS Y CONTROLES PARA MADRES, PADRES Y TUTORES — español (México)

• Puede consultar el historial completo, los resúmenes de sesión y los indicadores de seguridad en el Modo Padres, protegido con su NIP; cada acceso queda registrado y su hija o hijo sabe que usted puede leerlo.
• Puede configurar límites de tiempo por día, ventanas horarias y descansos, y otorgar tiempo extra con su NIP.
• Derechos ARCO: acceso, rectificación, cancelación y oposición, además de la revocación del consentimiento, escribiendo a privacy@kidchat.io. Respondemos en un máximo de 20 días hábiles. Puede acudir al INAI.
• Las conversaciones se eliminan a los 30 días; usted puede borrarlas antes. La eliminación en respaldos ocurre en un ciclo posterior, sujeto a validación técnica.
• Las funciones de eliminación, exportación y revocación se publican solo cuando el control técnico esté en operación.

G. JURISDICTION DIFFERENCES