Staris Kids — Child Safety Policy

Version: 1.0 · Effective date: 27 August 2026 · Controlling language: English. We also publish this document in Portuguese, Japanese, French, and Spanish; where the law of your place of residence entitles you to rely on the version in your own language, that version prevails for you to the extent of any inconsistency.

1. Our commitment

Staris Kids exists to create warm, age-appropriate stories for young children. Protecting children is the first principle of the Service, and we have zero tolerance for child sexual exploitation or abuse. This policy explains what we prohibit, what we do when we become aware of it, and how the Service is designed to keep a Child safe. It applies to You (the Account Holder) — the adult (18+) parent or legal guardian who creates and controls the account — and it supplements the Terms of Use and the Community & Acceptable Use Policy.

2. Zero tolerance for CSAM — including AI-generated depictions

Child sexual abuse material ("CSAM") and any child sexual exploitation or abuse is absolutely prohibited. This includes:

Real imagery, text, or requests that sexualize a minor; and
Any AI-generated depiction — a story, illustration, character, or prompt — that sexualizes or exploits a minor, even though no real child was involved.

Because Staris Kids is a generative service for a young-child audience, this prohibition covers all Content alike — the prompts and instructions you write, any Uploaded Photo, characters, and the Generated Content the AI produces. "The AI made it" is never an exception.

3. What we do when we become aware

If we obtain actual knowledge of apparent CSAM or child sexual exploitation connected to the Service, we will:

Report it to the appropriate authorities in the relevant jurisdiction as required by law, and preserve the related records for the period the law requires.
Cooperate with law enforcement and respond to lawful requests.
Permanently ban the offending account and any linked accounts, remove the Content, and provide no appeal for child-sexual-exploitation violations.

What we do not claim. We report on knowledge and cooperate with authorities; we do not represent that we proactively scan all Content for CSAM. Story text is screened by automated moderation, and generated images pass an automated content-safety screen for overtly unsafe content (see §4) — but these are safeguards, not CSAM-detection systems (image screening is a general safety floor that cannot reliably detect CSAM) and are not guaranteed to catch everything. This reporting obligation applies regardless of whether the Service ever offers a sharing feature.

4. How the product is designed to protect children

Several deliberate design choices reduce risk for a Child:

Adults-only, parent-controlled account. The Service is made for children to enjoy, and the account is for grown-ups only — it is listed in the App Store Kids Category and takes part in Google Play's Designed for Families programme, and both programmes' children's-app rules bind us. The Account Holder must confirm they are 18 or older and the parent or legal guardian; no account can be created without that attestation, and the parental role is recorded (see the Consent & Eligibility Policy).
No child accounts. We provide no child account, no child sign-in path, and no means for a Child to submit information to us directly, and children should not create or independently operate an account. A Child experiences Content through the adult's supervised account, and the adult decides what is created and shared with the Child.
Robust text moderation, plus an image safety screen. Story text — both what is submitted and what the AI generates — is screened by automated moderation designed to block sexual content, sexual or exploitative content involving minors, hate, graphic violence, and self-harm, and an extra-gentle mode is available. Generated illustrations also pass an automated content-safety screen that blocks overtly unsafe images before they are shown. Automated filtering is commercially reasonable but not guaranteed to catch everything; we recommend the parent review each story before sharing it with a Child.
Sharing is parent-gated, limited, and time-bound. An Account Holder can share a story they created with a person they choose, by sending an unlisted link themselves; we never collect the recipient's contact details and never send a message on their behalf. The Share control sits behind a grown-up check, and before a first share the App requires the Account Holder to confirm they have permission to share any identifiable person shown in the story, including any child who is not their own, and states plainly that anyone holding the link can read it until it expires and that links can be forwarded. Every link expires after 10 days, can be revoked sooner, and deleting the story or the account removes it everywhere immediately. A shared story is read-only and cannot be re-shared from the App. Sharing does not alter the story — it is the same Content that already passed our checks at creation. There is no feed, gallery, profile, comment or discovery surface. The web page is excluded from search engines, its link preview never shows the story or its pictures, and it carries its own reporting path for someone without the App. An Account Holder can decline future share links from a specific sender.
Photos are minimized, and there are two kinds. A raw Uploaded Photo (a photo turned into a cartoon character) is never stored — used only transiently to create a cartoon likeness, then discarded; what is kept is the generated cartoon portrait and a limited written description of facial and appearance characteristics, retained so the character stays visually consistent across stories (Privacy Policy §8; Data Retention & Deletion Policy §4). Memory Story photos — the pictures a parent attaches to a story about a real event — are a different use: they are analysed once for the occasion, people, place and objects (never with facial recognition or biometric identification, and never to build a likeness), and they are deleted automatically once that single reading is done — normally within seconds of upload. Neither kind is ever displayed to anyone outside the account (see the Privacy Policy §3(c) and the Consent & Eligibility Policy §6–§6b).
No advertising, no behavioral tracking, and no sale of personal data — for the Child or the Account Holder alike.

5. Internal-controls posture

Behind the scenes, we hold ourselves to the practices that regulators have singled out when other children's products failed. At a high level, this means we:

Verify the adult and obtain parental consent before collecting a Child's information, and honor deletion requests — rather than skipping age assurance or ignoring erasure (the failure that drew enforcement against a comparable app).
Vet every service provider that touches a Child's data, strip location metadata (such as EXIF geolocation) from uploads before processing, and bind our providers (including OpenAI) by contract — so that no provider silently collects a Child's data (the lesson of the third-party-SDK geolocation enforcement action).
Classify the audience honestly and minimize by default — set data-collection defaults to the minimum and describe the product accurately, rather than defaulting collection on or mis-classifying the audience (the failing behind large children's-privacy enforcement actions). We build to the children's-privacy regimes that govern our markets — the United States (COPPA, and Illinois' BIPA for facial analysis), Australia (Privacy Act / APPs and the incoming Children's Online Privacy Code), Brazil (LGPD), Canada (PIPEDA / Québec Law 25), and Japan (APPI). We may also consider an independent child-safety/privacy certification.

These practices are detailed in our internal compliance materials and in the Privacy Policy and Data Retention & Deletion Policy.

6. How to report a child-safety concern

If you encounter anything in the Service that raises a child-safety concern — including possible CSAM — report it to us immediately at support@cleverlabs.com.au (attention: Child Safety), our designated child-safety point of contact. Tell us what you saw and, where possible, how to locate it in your account. We treat child-safety reports as the highest priority and respond within a reasonable timeframe; where the law requires, we escalate to the appropriate authorities and law enforcement. If a child is in immediate danger, contact your local emergency services first.

7. Changes

We may update this policy. We will change the version and effective date above and, for material changes, give notice in the App or by email before they take effect. Continued use after the effective date means you accept the updated policy.