Privacy Policy
Effective date: August 24, 2026
This Privacy Policy explains how Stream Jr collects, uses, shares, and protects information when families use the Stream Jr website, web app, mobile apps, and related services. Stream Jr is designed to help adults manage the YouTube videos and channels that children can search for, request, and watch.
1. Who operates Stream Jr
Stream Jr is operated by Process Konsult, LLC. If you have privacy questions or requests, contact us at info@processkonsult.com.
Business mailing address: Process Konsult, LLC, Ponte Vedra, Florida, United States.
2. Information we collect
Adult account information
When an adult signs in or creates an account, we may collect and store:
- Name and email address from Google sign-in.
- Date of birth entered during new-account age screening. We use it to determine eligibility and do not store it after account creation.
- Family account name and account number.
- Adult PIN status and a protected representation of the PIN used to enter Adult mode.
- Adult invite information, including invite email address, invite code, expiration, and acceptance status.
- Subscription or entitlement status if subscriptions, promo access, or similar access controls are enabled.
Child profile information
Adults may create child profiles. Depending on the profile type, we may collect and store:
- Child profile name for local child profiles.
- Invitation or account email address and a Google or Apple account identifier for account-enabled child profiles.
- Child profile settings, such as search access, category settings, parent lock, and daily watch limit settings.
- Custom categories configured by an adult for a child profile.
- Child invite information for Google- or Apple-enabled child profiles.
YouTube-related information
To provide parent-managed YouTube access, we may collect and store limited YouTube metadata, including:
- YouTube video IDs, channel IDs, titles, channel names, thumbnails, and public metadata returned by YouTube APIs.
- Approved, pending, and blocked decisions for videos and channels.
- Which adult made a decision and when the decision was made.
- Access requests submitted by a child profile.
- Watch history and search history used for parental review and safety controls.
- Blocked search terms configured globally, by family account, or by child profile.
Stream Jr does not download, re-host, sell, or redistribute YouTube videos. YouTube video playback is provided through YouTube playback surfaces, and YouTube remains the source of the video content.
Device and technical information
We may collect technical information needed to operate and secure the service, including:
- App session tokens and authentication status.
- Device push notification tokens for Android, web push, and future iOS support.
- Subscription, purchase, entitlement, or promo access status.
- IP address, device type, browser or app version, operating system, and similar diagnostic information.
- Server logs, error logs, crash reports, analytics events, and security logs.
Cookies, device storage, and similar technologies
Stream Jr and its service providers may store, access, collect, or recognize information directly or indirectly on or from a user's device, app, or browser using cookies, browser local storage, secure device storage, service workers, device identifiers, push-notification tokens, and similar technologies.
Stream Jr uses these technologies to:
- Store app session tokens, authentication status, and account or device preferences.
- Keep users signed in and route them to the appropriate Adult or Kid profile.
- Allow an Adult to register a Kid's device to the family Account without requiring the Kid to have a Google or Apple account.
- Support security, fraud prevention, troubleshooting, and service operation.
- Register devices and browsers for push notifications.
- Remember limited application state needed to provide Stream Jr features.
On the web, Stream Jr uses browser local storage for session and authentication information and may use browser storage and service workers for web push notifications. In the Android and iOS apps, Stream Jr may use protected device storage, such as the operating system's secure storage, to retain session, device registration, and preference information. A registered Kid device may access and switch among the Account's Kid profiles until the registration expires, the Adult revokes it, or the app or site data is cleared.
Third-party services used by Stream Jr may also place, access, or recognize cookies or similar technologies on a user's device or browser. Google Sign-In and YouTube playback may use cookies, local storage, device or browser identifiers, and similar technologies to authenticate users, maintain sessions, prevent abuse, provide and verify video playback, and remember user preferences. Payment providers such as Stripe, Google Play, or Apple may use similar technologies when an Adult accesses their checkout, billing, or subscription services. These providers process information under their respective privacy policies.
Stream Jr does not use cookies or similar technologies to serve targeted advertising to children. Users can remove Stream Jr browser storage through their browser settings, remove locally stored app information by clearing the app's data or uninstalling it, and control third-party cookies through their browser or device settings. Removing this information may sign the user out, disable notifications, or prevent certain Stream Jr features from functioning.
3. How we use information
We use information to:
- Create and manage family accounts, adult users, and child profiles.
- Authenticate users and route adults or children into the correct app mode.
- Let adults approve, block, review, and manage videos, channels, search terms, child settings, and watch limits.
- Send notifications about access requests, approvals, blocks, account invites, and time-limit requests.
- Search YouTube using Stream Jr's backend API key and display YouTube results within the app.
- Cache YouTube search results to reduce API usage and improve performance.
- Maintain safety, prevent misuse, troubleshoot errors, and improve the service.
- Process subscriptions, purchases, promo access, and account entitlement status.
- Comply with legal obligations and applicable platform policies.
4. Google and Apple sign-in and YouTube API use
Stream Jr uses Google sign-in to verify adult users and Google-enabled child profiles. We use basic Google profile information, such as name and email address, to identify users and match invited users to the correct family account.
Stream Jr uses Sign in with Apple to verify Apple-enabled adult and child profiles. Apple may provide the user's name, verified account email, or a private relay email selected by the user. Stream Jr stores the stable Apple account identifier and available email information to authenticate the profile on later visits.
Stream Jr uses YouTube API Services to search for videos and channels and retrieve limited YouTube metadata. YouTube searches are performed by Stream Jr's backend using the application's API credentials, not by using a child's Google account credentials. Use of YouTube content and APIs is also subject to the YouTube Terms of Service and Google Privacy Policy.
5. Children's privacy and COPPA notice
Stream Jr is directed to families and may collect personal information online from children under 13 through Kid profiles created by an Adult. Before a newly created Stream Jr Account creates its first Kid profile, we present a direct child-specific notice and require the Adult to attest that they are the parent or legal guardian and affirmatively consent to the collection, use, and service-provider disclosures described below. The submitted form is our current parental-verification method. It records the parent name, consent choices, notice version and hash, date and time, IP address, forwarded network address when supplied by our proxy, browser or app user-agent, and available browser/device information.
We collect the Kid profile name and settings; an optional invitation or account email and Google or Apple account identifier for an invited profile; searches and whether they were blocked; requested, approved, and blocked videos and channels; viewing and watch-time activity; device session and push-notification identifiers; and ordinary security and diagnostic information. We use it only to provide parent-managed access, content-safety screening, parental history and decisions, watch limits, notifications, account security, troubleshooting, support, and legal compliance. We do not use child information for targeted advertising, behavioral profiling, or sale.
Child information is disclosed only to Adults on the same family Account and to the providers identified in Section 6 as necessary for hosting, Google/Apple authentication, YouTube functionality, notifications, email delivery, search-safety screening, and payment functionality used by the Adult. The consent form separately identifies and obtains agreement to these disclosures. We do not knowingly permit a child to create an independent Adult account.
A parent can review or request an export of a child's information, correct profile settings, revoke consent, stop further collection, or delete the Kid profile. Use Manage Account > Manage Kids to remove a profile, use Manage Account > Delete Account or the authenticated Delete Account route to delete the family Account, or email info@processkonsult.com. Revoking consent requires deletion or deactivation of the affected Kid profile because the service cannot operate that profile without the data described above.
6. Providers and disclosures
We do not sell personal information. Stream Jr currently uses or is configured to use these providers:
| Provider and contact | Information and purpose |
|---|---|
| Oracle Corporation / Oracle Cloud Infrastructure 2300 Oracle Way, Austin, TX 78741, USA Oracle privacy |
Hosts the Stream Jr backend and database and therefore processes stored account and Kid information, network traffic, IP addresses, and server logs solely to provide and secure infrastructure. |
| Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Google privacy |
Provides Google Sign-In, YouTube API Services and playback, Firebase Cloud Messaging, Google Play billing when used, and Gmail/SMTP delivery. Depending on the feature, Google receives login identity, YouTube search terms and public content IDs, push tokens and notification payloads, Adult billing data, or email addresses and message content. |
| Stripe, LLC 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA privacy@stripe.com Stripe privacy |
Processes Adult customer identity, subscription selection, transaction, customer, and payment information for web subscriptions. Stream Jr does not send child search or viewing history to Stripe. |
| Apple Inc. One Apple Park Way, Cupertino, CA 95014, USA Apple privacy |
Provides Sign in with Apple for participating Adult and Kid profiles and processes Adult app-store account, purchase, and subscription information if Apple in-app subscriptions are enabled. Depending on the feature, Apple receives authentication requests and may provide a stable account identifier, name, verified email, or private relay email. Stream Jr does not send child search or viewing history to Apple for billing or authentication. |
| profanity.dev profanity.dev website The service does not publish a verified postal privacy contact. |
When PROFANITY_DETECTION=PROFANITY.DEV, receives the text of a search query and returns whether it detects profanity. No Stream Jr account or Kid identifier is intentionally included. |
| PurgoMalum purgomalum.com The service does not publish a verified postal privacy contact. |
Only when explicitly configured as the search-safety provider, receives the text of a search query and returns whether it detects profanity. No Stream Jr account or Kid identifier is intentionally included. |
Adult users on the same family Account can see its Kid profiles, requests, decisions, watch and search history, and settings. We may also disclose information when legally required or necessary to protect users, Stream Jr, or others. We do not currently use third-party advertising or analytics SDKs in Kid Mode.
7. Data retention
The scheduled retention job runs according to HISTORY_PRUNE_CRON and uses the same
HISTORY_RETENTION_DAYS value for time-limited records. The current default is 30 days.
- Kid search history and watch history: physically deleted after 30 days by default.
- YouTube search cache: physically deleted after its cache expiration time on the next scheduled retention run.
- Push tokens: physically deleted when not registered or refreshed for 30 days by default; removed immediately from the live database when their Kid profile or Account is deleted.
- Expired Adult and Kid invites: physically deleted within 30 days after expiration by default.
- Expired or revoked Kid device registrations and expired Apple web-authentication requests: physically deleted within 30 days after expiration or revocation by default.
- Expired app and onboarding sessions: physically deleted on the next scheduled retention run.
- Application/server logs: the production operational target is physical deletion after 30 days by default; the host journal lifecycle must be configured to enforce this period.
- Database backups: the production operational target is physical deletion after 30 days by default; the backup location's lifecycle rule must be configured to enforce this period.
- Kid profiles, consent evidence, settings, content decisions, custom safety rules, and watch-time records: retained while the profile and Account remain active because they provide the requested parental-control service.
Deleting a Kid profile removes its directly associated live-database records immediately. Deleting an Account removes its Adult memberships, Kid profiles, consent evidence, settings, history, decisions, invites, sessions, push tokens, and subscription-entitlement records from the live database immediately. Records in a backup age out within the backup retention period and are not restored except for disaster recovery; if restored, deletion requests must be reapplied. Information legally required for tax, payment, fraud, or dispute records may be kept by Stream Jr's payment providers for their legally required periods.
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No online service can guarantee perfect security, but we work to limit access to personal information and use safeguards appropriate to the nature of the information.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your information.
Adults can manage many family account settings directly in Stream Jr. You may also contact us to request:
- Access to account or child profile information.
- Correction of inaccurate information.
- Deletion of a child profile or family account.
- Disabling further collection or use of child profile information.
10. Advertising and tracking
Stream Jr does not currently sell personal information or use child profile information for targeted advertising. If this changes, we will update this Privacy Policy and provide any notices or choices required by law and platform policies.
11. International users
Stream Jr is operated from the United States. If you use Stream Jr from another country, your information may be processed in the United States or other locations where our service providers operate.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and provide additional notice when appropriate.
13. Contact us
Email: info@processkonsult.com
Mailing address: Process Konsult, LLC, Ponte Vedra, Florida, United States