Kids & your privacy.

What YellowHat Kids processes

With Android notification access enabled, YellowHat Kids processes notification titles and bodies from eligible apps selected by a parent to identify potentially harmful content. Nothing is monitored until at least one app is chosen during setup. Local records can include the source app, time, title, body and analysis result. A parent can also add ignored words that are removed before analysis without changing the original notification.

Locally stored notification titles, bodies and analysis reasons are encrypted with a key held in the app's secure storage. Local notification records expire after 30 days, or sooner during the normal app lifecycle.

Checks for disabled app notifications

On Android 13 or later, Kids periodically checks the app-level notification permission for selected launcher-visible apps that declare Android's notification permission. It does not inspect every installed package or the state of individual notification channels.

If permission is disabled for a selected app, Kids shows a protection warning on the child's device. For a linked device with an active Parent subscription, it can also create a protection alert that identifies the affected app. That alert is archived after the selected apps pass the check again.

YellowHat Offline AI stays on the device

YellowHat Offline AI checks notification content on the Android phone. After the initial model download and setup, checking and local flagged-item review can work without internet. Messaging apps may still need internet to receive messages. Parent alerts and remote controls require connectivity.

YellowHat Kids is free and does not require a Parent account, subscription or device link.

What is shared with YellowHat Parent

A linked device with an active subscription can send alert category, severity, source-app information and timing through YellowHat's service. The current Kids app end-to-end encrypts the alert title and analysis reason separately for each registered Parent installation, so YellowHat's server cannot read those fields.

Full notification text is excluded by default. A subscribed parent can explicitly enable end-to-end encrypted full-text sharing after a privacy warning. The choice applies only to notifications received after it is enabled. Turning it off stops future sharing but does not remove alert text already shared.

During the app upgrade transition, alerts submitted by older compatible Kids versions may use the previous unencrypted title and reason format. Parent alert rows, including older-format rows, expire after 30 days.

Connected features also use device identifiers, pairing and session records, settings and an installed-app catalogue to link devices, synchronize supported controls and deliver the service. For linked devices, the catalogue can include Android package identifiers, app names, selection state and version information.

Retention and removal

Local notification records expire after 30 days. Cleanup runs when storage opens, when a notification is saved and before analysis; if Kids is stopped, cleanup continues when it next runs. Parent alert rows also expire after 30 days.

Android's app storage controls or uninstalling Kids remove local app data. Revoking notification access stops future capture. These actions do not delete an associated Parent account or cancel store billing.

Permissions and family choices

A parent can change monitored apps and ignored words and revoke notification access in Android settings. Camera access is requested only to scan a Parent pairing code; a manual code is also available. Explain the setup to your child and review it together.

Requests and contact

For access, correction or deletion questions, email privacy@yellowhatapp.com. Identify the account or device without sending notification content, passwords, parent PINs, pairing codes or API keys. See the data deletion guide for the available in-app and device-level steps.

Read the Parent privacy notice for Parent accounts, encrypted alerts, push delivery and subscriptions.