DRAFT — not legally published. Counsel review pending. Do not rely on this text as a published policy.
Publication Gate
Every public claim, its control, and whether it is safe to publish yet.
PHASE B — FINAL PUBLICATION GATE TABLE
Every material public claim across Phase B documents 1–10, mapped to its control ID and its publication status. A row that is not SAFE TO PUBLISH: YES may not appear in any published document, marketing page, or product surface.
Doc key: 1 Children's Privacy Notice · 2 Parent Privacy Policy · 3 Parent Consent · 4 Terms · 5 Child Safety · 6 Responsible AI · 7 Parent Rights · 8 Security/Trust · 9 Cookies · 10 AUP
| Public claim | Document | Control ID | Implemented? | Verified? | Safe to publish? | Launch blocker? |
|---|---|---|---|---|---|---|
| A parent must set up every child profile; children cannot sign themselves up | 1,3,4,10 | C-01 | Partial (parent account required; server-side binding pending) | No | No — not until server check exists | Yes |
| KidChat is for children aged 6–12 | 1,3,4,10 | C-02 | Partial (UI only) | No | No — needs server-side age gate | Yes |
| We ask for a parent's verifiable consent before a child can use KidChat | 3,4 | C-03 | No | No | No | Yes |
| Conversations are kept for 30 days and then deleted | 1,2,3,7 | C-04 | No (no deletion job) | No | No | Yes |
| A parent can delete a child's profile and its data | 2,3,7 | C-05 | No (cascade workflow pending) | No | No | Yes |
| We remove personal details before sending a question to the AI | 6 | C-06 | No | No | No — `[DO NOT PUBLISH UNTIL C-06/C-07 VERIFIED]` | Yes |
| We don't keep the private detail we removed | 6 | C-07 | No | No | No — `[DO NOT PUBLISH UNTIL C-06/C-07 VERIFIED]` | Yes |
| Children's conversations are not used to train general-purpose AI models | 2,3,6 | C-08 | No (contracts unsigned) | No | No — `[DO NOT PUBLISH UNTIL C-08 SUBSTANTIATED]` | Yes |
| We don't sell children's data or use it for advertising | 2,4,6,8,9 | C-09 | Yes (no ad tech present) | Pending dependency audit | Yes, after audit | No |
| No third-party analytics runs in Kid Mode | 8,9 | C-10 | Yes (none installed) | No automated assertion | Yes, after automated assertion | No |
| "Your grown-up / your parent or guardian can see your KidChat conversations" | 1,2,4,5,7 | C-11 | Partial (copy drafted, not persistent in product) | No | No — until the persistent child notice ships | Yes |
| Parent access to conversations is protected and recorded | 2,7,8 | C-12 | Partial (PIN exists; no audit log) | No | No — drop "and recorded" until the log exists | No (high priority) |
| If a child seems to be in danger, KidChat shows real help lines | 5 | C-13 | No (no directory, no fail-closed) | No | No | Yes |
| A person at KidChat reviews the most serious safety events | 5 | C-14 | Partial (owner named, no queue) | No | No — and never with an SLA or 24/7 wording | Yes |
| KidChat cannot call emergency services or contact anyone outside KidChat | 1,3,4,5,10 | C-15 | N/A (limitation) | N/A | Yes — must be stated | Must be stated |
| Voice features are turned off | 3,8 | C-16 | Partial (feature exists; server flag pending) | No | No — until endpoints are unreachable behind the flag | Yes |
| We encrypt data in transit and at rest | 2,8 | C-17 | Yes | Wording not yet matched to provider docs | Yes, once wording matches provider docs | No |
| We keep a record of what each AI request cost, without keeping what was said | 6,8 | C-18 | No (ledger not built) | No | No | No (high priority) |
| Available in Mexico; not offered to children in the UK or EU | 2,3,4 | C-19 | No (no geo control) | No | No — until the region block exists | Yes |
| KidChat uses AI and can be wrong | 1,4,6,10 | C-20 | N/A (limitation) | N/A | Yes — must be stated | Must be stated |
| Consent uses an approved payment-method verification flow or another legally accepted mechanism | 3 | C-21 (new) | No | No | No — [COUNSEL REVIEW REQUIRED — VPC IMPLEMENTATION] | Yes |
| Verification information is minimized and promptly deleted | 3 | C-22 (new) | No | No | No | Yes |
| Deletion from active systems as soon as reasonably practicable; backups purged on a rolling cycle | 2,7,8 | C-23 (new) | No | No | No — [TECHNICAL VALIDATION REQUIRED — BACKUP RETENTION]; never publish "deleted within 30 days from all systems" | Yes |
| privacy@kidchat.io (and safety/legal/security) reach a real, responsible human | 1,2,3,7,8 | C-24 (new) | No (aliases not live) | No | No | Yes — privacy@ must be monitored before the first real child's data is collected |
| Screen-time rules, allowed windows, breaks, and PIN-granted extra time | 7 | C-25 (new) | Yes | Yes (tested in product) | Yes | No |
| One family's data is isolated from another's (row-level security) | 8 | C-26 (new) | Yes | Yes | Yes | No |
| Session recaps, topics, and safety indicators visible to the parent | 7 | C-27 (new) | Yes | Yes | Yes | No |
| No certification or audited-compliance claim | 8 | — | N/A | N/A | Never claim | — |
SUMMARY
Safe to publish today: C-09 (after audit), C-10 (after assertion), C-15, C-17 (wording), C-20, C-25, C-26, C-27.
Launch blockers still open: C-01, C-02, C-03, C-04, C-05, C-06, C-07, C-08, C-11, C-13, C-14, C-16, C-19, C-21, C-22, C-23, C-24.
Open for counsel only: Resolved: KidChat is a technology service operated by NOXON, LLC, a Texas limited liability company. [COUNSEL REVIEW REQUIRED — PRIVACY CONTROLLER / RESPONSIBLE ENTITY ADDRESS], [COUNSEL REVIEW REQUIRED — GOVERNING LAW / DISPUTE RESOLUTION], [COUNSEL REVIEW REQUIRED — VPC IMPLEMENTATION], [COUNSEL REVIEW REQUIRED — MANDATORY REPORTING POSTURE].
No Phase B document may be published while its own gates and the rows above remain unresolved. Phase C does not begin until this table is reviewed.
Who operates KidChat
KidChat is a technology service operated by NOXON, LLC, a Texas limited liability company.
KidChat es un servicio tecnológico operado por NOXON, LLC, sociedad de responsabilidad limitada constituida en Texas, Estados Unidos.
NOXON, LLC — Texas, United States. privacy@kidchat.io · safety@kidchat.io · security@kidchat.io · legal@kidchat.io
© 2026 KidChat. Operated by NOXON, LLC.