Children's Privacy Notice

Last updated: August 2, 2026

This notice explains what we collect from and about children under 13, how we use it, who we share it with, and the rights you have as a parent. It sits alongside our Privacy Policy and, where the two differ for a child under 13, this notice controls.

Built Different is built around parental control. Children never create accounts, never sign in on their own, and never hold data we did not get from you or generate from their use of the app.

Who is responsible for this data

[LEGAL ENTITY NAME] is the operator that collects and maintains children's personal information through Built Different. We are the only operator collecting personal information from children through the Service.

[REGISTERED ADDRESS]
[PHONE NUMBER]
hello@builtdifferent.com

What we collect about a child

Given to us by the parent when creating or editing a child profile:

• Display name — usually a first name or nickname — and, optionally, a last initial.
• Date of birth. This is the only sensitive field we hold about a child. We use it to derive their age band, to know whether they are under 13, and to show a birthday moment. It is encrypted before it is stored.
• Fitness level, goal, and a weekly activity target.
• A jersey number, if a coach adds the child to a team roster.

Generated as the child uses the app:

• Activity records — workouts completed, classes attended, active minutes, points, streaks, badges earned, and challenge or competition results.
• The cartoon avatar they build, meaning the outfit and accessory choices they save, and the images we render from those choices. The avatar is drawn by us; it is not a photograph and is not based on one.
• Preset reactions they send, which are chosen from a fixed list we provide.

Collected automatically:

• The device time zone, so deadlines, streaks, and birthdays land on the right local day.
• Basic technical information needed to serve and secure the app, such as the request time and error diagnostics.

What we do not collect

• No photographs, video, or audio of a child, and no ability for a child to upload any.
• No precise or approximate geolocation. The time zone is not a location.
• No weight, BMI, body measurements, medical history, or health records.
• No school, address, phone number, or email address for the child.
• No contact list, camera roll, microphone, or persistent advertising identifier.
• No behavioural advertising, no third-party ad networks, and no third-party analytics or tracking of any kind. We do not sell children's personal information, and we do not share it for targeted advertising.
• No open chat or free-text messaging between children.

We do not require a child to disclose more personal information than is reasonably necessary to take part. A child can use the workouts, earn minutes and badges, and build an avatar without a last initial, a jersey number, or a team.

How we use it

• To run workouts and classes and to credit the activity a child completes.
• To keep track of progress — minutes, streaks, badges, and goals — and to show it to the child and to you.
• To show family and team standings, as described in the next section.
• To send you, the parent, progress recaps and account messages.
• To keep the Service secure, to detect misuse, and to comply with the law.

We do not use children's personal information to build profiles for advertising, to train machine learning models, or for any purpose unrelated to running the Service.

What other people can see

A child's full date of birth is never shown to anyone but you. Their display name, optional last initial, avatar, and activity totals are visible in these places:

• To you and to other adults you have added to your family account.
• On family-versus-family leaderboards, families appear under a team name you choose — not under any child's name.
• If you join a team, to that team's coach and to other members of that team, on team rosters and standings. Joining a team is optional and you can leave at any time.

There are no public profiles, no child-searchable directory, and nothing about a child is published outside the app.

When a coach adds a child before you are involved

A coach can create a provisional roster entry for a child before that child's family has an account, so that a team roster can be set up. To do that the coach gives us a display name, an optional last initial, an age band, and an optional jersey number. Nothing else is collected, the child cannot sign in, and no data is collected from the child.

We use that limited information only to generate a claim code the coach passes to you. The profile becomes active only once you claim it, create your account, and give the consent described below. Until then it is a placeholder. If you do not want the entry to exist, email us and we will delete it.

A claim code is valid for 30 days. If it is never used, we erase the placeholder profile 30 days after the code expires — so an entry no family has claimed is deleted within about 60 days of a coach creating it, whether or not anyone asks us to.

Verifiable parental consent

Before we collect personal information from a child, a parent or legal guardian must create the account and accept our Terms of Service, Privacy Policy, this notice, and the Waiver & Safety Disclaimer. Consent is a condition of creating an account — it cannot be skipped — and we record the date, time, and version of what was accepted.

Only after that can a child profile be created, and only you can create it. Because membership is purchased through Apple with the payment method on your Apple Account, the purchase provides a further check that an adult is behind the account.

We use children's personal information only to provide the Service to your family. We do not disclose it to third parties for their own purposes, so we do not seek separate consent for that — if that ever changes, we will ask you first.

Who we share it with

We do not sell children's personal information and we do not give it to anyone to use for their own purposes. We use a small number of service providers to run the Service, each bound by contract to keep the information confidential and secure and to use it only on our instructions:

• Database and application hosting, which stores all of the data described above.
• Video hosting and delivery, for the workout library.
• Email and SMS delivery, used to reach you — never the child.
• Apple, which processes the membership purchase and tells us the subscription status.

We may also disclose information if the law requires it, to protect a child's safety, or to establish or defend legal claims. A current list of our service providers is available on request.

Your rights as a parent

At any time, you can:

• Review the personal information we hold about your child.
• Correct or update it.
• Get a copy of it, using the export option in the app.
• Delete a child profile, which removes that child's activity data with it.
• Refuse to let us collect anything further about your child, and withdraw your consent entirely, by deleting the profile or the account.

Most of this is available in the app under your account. For anything else, email hello@builtdifferent.com from the address on your account and we will respond promptly. We may need to confirm you are the account holder before acting on a request.

If you withdraw consent, your child can no longer use the Service — we cannot run workouts, credit activity, or track progress without the information described above.

How we protect it

• All data is encrypted in transit and encrypted at rest by our hosting provider.
• A child's date of birth is additionally encrypted at the field level with AES-256-GCM, and is decrypted only when it is returned to the parent who owns the profile.
• Access is restricted to the account holder, the adults they have added, and — for roster and standings information only — a coach whose team the child has joined.
• Internal access to children's records is limited to staff who need it.

No system is perfectly secure, but we design for the smallest amount of children's data we can operate on.

How long we keep it

We keep a child's personal information only as long as it is needed for the purposes described in this notice, and never for any other purpose.

• Deleting a child profile in the app marks it deleted immediately and removes it from view. It is then permanently erased, along with the child's activity records, after 30 days — a window that exists only so a deletion made by mistake can be undone.
• Deleting your whole account permanently erases your children's profiles and their activity data straight away.
• A placeholder profile created by a coach and never claimed is erased automatically, as described above. Nothing about a child is kept indefinitely.
• After erasure we keep a record that a deletion happened, for audit purposes. It contains no personal information about the child.

Changes to this notice

If we change our practices in a way that materially affects children's information — collecting a new category, or using it for a new purpose — we will notify parents and, where the law requires it, obtain fresh consent before the change applies.

Contact us

For any question or request about your child's information, email hello@builtdifferent.com, or write to [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. If you believe we have collected information from a child without the consent described here, tell us and we will delete it.