Children's Privacy & Parental Consent

BoomBoom World is built for families. Children do not register accounts or interact with the Service independently. A parent or legal guardian creates the account, provides information about their child, and controls photo uploads and deletions.

We apply privacy-by-design principles aligned with the UK Age Appropriate Design Code and similar standards: data minimisation, private storage, no public child galleries, and clear parental controls.

With your permission, we may process:

• Your child's first name (for personalisation).
• Optional age band and pronoun preference.
• A photo you upload, stored privately in our EU-region storage.
• A face-crop derived from that photo for avatar generation.
• Illustrated avatar images.

We do not ask for a child's email address, phone number, or precise location.

Before we process your child's photo for avatar creation, you must confirm parental consent (currently version v1.0.0). By confirming, you state that:

• You are the parent or legal guardian of the child in the photo.
• You have permission to upload the photo for avatar creation.
• You understand photos are stored privately and can be deleted from Settings.
• Photos are used only to create your child's illustrated character, not for public display on our platform.

We record consent events (version, timestamp, and related metadata) for audit and compliance purposes.

If consent is withdrawn, delete the child profile or contact us. We will stop processing the photo for new generation and remove stored files as described in our retention policy.

Child photos are stored in a private storage bucket (European Union (London, eu-west-2)). Files are organised under your account identifier; database and storage policies ensure only your signed-in parent account can access your family's files.

When images appear in the app, we use short-lived signed URLs (currently expiring after one hour) instead of permanent public links. The full uploaded photo is not shown in the interface after character creation; only a face crop is displayed for character review.

Avatars are likewise private to your account. We do not publish child images on our marketing site or social channels without separate, explicit permission.

To create an illustrated character, a temporary signed URL of the face reference may be sent to our image-generation provider (such as OpenAI) solely to produce avatars for your character. Providers act as processors under our instructions and contractual safeguards.

We do not authorise providers to use your child's photo to train general-purpose facial recognition or unrelated commercial models as part of our standard service.

Uploaded photos are retained for a defined period (currently one year from upload, recorded as photo_retention_until) unless you delete them earlier. Deleting a child profile from Settings removes associated photos, avatars, and profile records, subject to short backup cycles and legal retention where required.

Full account deletion for parents is planned; until then, delete each child profile you no longer need and contact us to request broader erasure.

You may:

• Access information we hold about your child profile.
• Correct your child's name or preferences.
• Delete photos and profiles from Settings.
• Request a copy of consent records.
• Object to or restrict certain processing where applicable law allows.
• Lodge a complaint with the ICO (UK) or your local data protection authority.

Contact privacy@boomboom.world for help exercising these rights.

This notice supplements our Privacy Policy and Terms of Service. In case of conflict regarding children's data, this notice prevails.