Safety & community guidelines

Five short rules every Yoce family agrees to. If anyone breaks them, we'll act.

1. Be kind. No hateful, threatening, or harassing language to anyone, ever.
2. Keep it real. Don't impersonate other people. Don't pretend to be an adult if you're a kid, or a kid if you're an adult.
3. No grown-up content. No nudity, sexual content, graphic violence, drugs, or gambling.
4. Don't share private things. Phone numbers, home addresses, school details, anything that could put a child at risk, even on the family wall.
5. Tell a grown-up. If anything inside Yoce makes a kid feel uncomfortable, the first move is always to tell their parent.

Yoce has no chat, no friend lists and no public profiles. The only people who can see a child's stars, wall posts or name are the adults a parent has invited into the family.

• No messaging. There is no way for anyone, inside or outside the family, to send a child a message through Yoce.
• No discovery. Families can't find each other, and children can't be found. There is no search, no suggestions, no shared feed.
• Parent-mediated adults. A second parent, a grandparent or a babysitter joins only by an invite the parent sends, and can be removed at any time.

• Kid-written text. Wall notes and daily-question answers are family-only, and a parent can edit or remove any post from their own account.
• Photos. Only adults can post photos, only to their own family wall, and a parent can delete them at any time.
• Audit log. Every action (star given, reward redeemed, post created, setting changed) is logged with timestamp and actor. Parents can review the family's full activity from Settings → Privacy.

Two paths, depending on where you are. Always go to the in-app option first for the fastest action.

• In the app. Open Settings → Help & support and describe what you saw. We review every report within 24 hours; serious reports (safety, hate, sexual content) within 4 hours.
• By email. Write to support@yoce.com with a screenshot and the family code. We answer every email — usually within one working day.
• If a child is in immediate danger, please contact your local emergency services first. Then email us — we'll preserve all relevant data for the investigation.

• Approval flow. Star requests and custom requests queue for parent approval before they take effect.
• Two parents, equal access. A second parent can be invited; nobody else can join a family.
• Trusted devices. Parents decide which devices can sign a kid in with a tap; everything else needs the kid's PIN.
• Full audit log + export. Settings → Privacy → Export shows everything we hold about your family, in JSON, anytime.
• Delete account anytime. A 30-day scheduled deletion at /account/delete or in Settings — you can change your mind within the window.

Yoce is built to comply with the U.S. Children's Online Privacy Protection Act (COPPA), the UK Age-Appropriate Design Code (AADC), and GDPR-K across the EU.

• Kids never have first-party accounts. Parents create accounts; they create kids inside their own family. Kids sign in with a simple username and PIN — no email, no phone number, no behavioural profile.
• Verifiable parental consent. Parents confirm consent at signup, then complete a second in-app confirmation at Settings → Privacy & Data within a 7-day grace window (the COPPA "Email Plus" second touch; no second email is sent). Until they do, adding or changing a child's data is paused.
• No ads on any kid surface. No third-party trackers. No behavioural analytics on the kid surface. The parent app uses cookieless Vercel Analytics, opted in via an explicit cookie banner.
• Data residency. Yoce data is stored in the United States (Supabase us-east-1, Virginia) to minimise latency for our US-targeted user base. Yoce is operated by Norton Brook (HK) Limited, a Hong Kong company; see the privacy policy for the PDPO + cross-border-transfer disclosure.
• No data sale. Ever. Yoce is free, ad-free, and has no third-party advertising relationships; we have no incentive to monetise your family's data.

Full details: /privacy and the kid-facing notice at /privacy/kids.

Most reports resolve with a quiet warning. The following will result in immediate account suspension pending review, and likely permanent removal:

• Any sexual content involving a minor — reported to authorities under our legal obligations.
• Threats of violence against a person.
• Coordinated harassment.
• Impersonating a parent to access a child's account.
• Using the app to facilitate any commercial transaction outside the parent's control.

If you are a safety researcher, journalist, or child-protection organisation, we'd love to hear from you. We publish security reports under coordinated disclosure and welcome external review of our moderation and consent flows. Write to support@yoce.com.

I started Yoce because I wanted my own kids on a place that was warm and small, not a place that sells their attention. That means I'm on the hook for every safety call we make.

If you ever feel that Yoce is missing something a family needs — or that we've got something wrong — please tell me directly: support@yoce.com.