Picket
Picket privacy policy
Last updated: 28 October 2026
Picket is a video app for children that only plays the YouTube channels their parent approved. This policy says what Picket keeps, why, where, for how long, and how you can see it or delete it.
The short version
- We keep your email (to sign you in) and, for each child, a first name and an age. No last name, photo, birthday, school or location.
- We keep the channels you approve, the screen-time settings you choose, and how many minutes each child watched (7 days; per channel only if you turn that on, 30 days).
- Some things never leave the device: a child's favourites, where they stopped in a video, and whether you chose the Muslim packs or music-free suggestions.
- Picket shows no ads of its own, and has no tracking or analytics. We don't sell or share your data, and we don't use your children's data to train or run AI.
- Videos play in YouTube's own player, so YouTube (Google) also receives some information when a video plays.
- Settings > Erase my account deletes everything we keep about your family, at once.
Who we are
Picket is made by ZAYNOA Inc., in Canada. Email: hello@picketkids.com.
The person in charge of protecting personal information (Quebec's Law 25) is our founder, reachable at hello@picketkids.com.
What we keep about you, the parent
| What | Why |
|---|---|
| Your email address | To send you a sign-in code. We don't send newsletters or ads to it. |
| The date you agreed to this policy, and which version | To show you gave consent for your children. |
| Your parent PIN, scrambled (a one-way hash we can't read back) | So only a parent can leave a child's screen or give more time. |
| A count of wrong PIN or pairing-code tries | To slow down guessing. |
| A second parent's email, if you add one | So they join your family when they sign in with it. Kept until they do, or 14 days pass. |
Our database host also keeps short technical logs of sign-ins (such as the time and the device's IP address) for security, deleted after about a day.
What we keep about your children
| What | Why |
|---|---|
| A first name (up to 30 characters) and an age (1 to 12) | To show the child their own screen, and to fit the screen to their age. |
| The channels you approved for each child | So the child sees only those channels. |
| Screen-time settings: the daily limit, breaks, extra time you gave today, holidays you chose to hide | To apply your limits. |
| Minutes watched each day | To stop at your limit and show you the week. Kept 7 days. |
| Minutes watched per channel, only if you turn it on for that child | To show you which channels they watch most. Kept 30 days; turning it off deletes them. |
Picket never asks a child for any information. Everything above is entered by you, or counted by the app while your child watches.
Your child's own device
When you pair a child's device (a tablet, an old phone) by QR code or a typed code, that device gets its own sign-in: a random ID that is linked to that one child, never your parent account. We keep:
- which child it is paired with, when it was paired and when it was last used;
- the device's model name (for example "Lenovo TB-J606F"), so you can tell your devices apart in your settings.
Unpairing it from your phone deletes its sign-in. A sign-in that was started but never paired is deleted within a day. Pairing codes expire after 10 minutes.
The camera is used only to read the pairing code. Pictures are never saved or sent. Picket doesn't use the microphone, contacts or location.
What stays on the device only
These are kept in the app's private storage on the device and are never sent to us:
- a child's favourite channels and where they stopped in a video ("Keep watching");
- whether you chose to see the Muslim packs or music-free suggestions (a family's religion is sensitive, so we don't store it);
- whether this device opens as a parent's or a child's, and settings like sounds.
Deleting the app deletes them.
YouTube
Picket plays videos in YouTube's official embedded player, run by Google, and uses YouTube API Services to look up the channels and videos you pick. When a video plays, YouTube receives information from the device (such as its IP address and which video is playing), under the Google Privacy Policy. By watching, you also agree to the YouTube Terms of Service. Picket only plays videos marked "made for kids", where YouTube says it limits data collection and turns off personalized ads. YouTube may still show ads on some of those videos; that's up to YouTube and the channel, not Picket.
Picket never signs in to your Google or YouTube account.
The video list (channel names, video titles, lengths) is public YouTube information, not information about your family. We refresh it or delete it within 30 days, as YouTube's rules require.
Who helps us run Picket
We don't sell or rent personal information, and we don't share it for advertising. These companies process it for us, only to run Picket:
| Company | What it does | Where |
|---|---|---|
| Supabase | Hosts our database and sign-in | Canada (Montreal) |
| Resend | Sends the sign-in code emails | United States |
| Expo | Delivers app updates. When the app checks for one, Expo receives the device's IP address, the app's version and a random ID for that install, not linked to your family. | United States |
| Google (YouTube) | Plays the videos (see above) | United States and other countries |
| Cloudflare | Hosts the picketkids.com website. It sees visitors' IP addresses and keeps short security logs. | United States and its global network |
Information handled in the United States may be accessible to authorities there under its laws.
We would share information otherwise only if the law requires it.
How long we keep it
| What | How long |
|---|---|
| Your account, children's names and ages, channels, settings | Until you remove the child or erase your account |
| Minutes per day | 7 days |
| Minutes per channel (when turned on) | 30 days, or until you turn it off |
| A second parent's invite | Until accepted, or 14 days |
| A paired device's sign-in | Until you unpair it; an unpaired sign-in, 1 day |
| Pairing codes | 10 minutes |
| Sign-in logs at our database host | About a day |
Children's privacy (COPPA)
Picket is for parents to set up for their children. Before anything about a child is kept, the parent agrees on the consent screen. As a parent, you can at any time:
- see everything we keep about your child, on their page in the app;
- correct their name or age there;
- delete it: remove the child, or erase your whole account;
- stop further collection: unpair their devices, or erase your account.
We collect only what Picket needs to work, and never more as a condition of using it.
Your rights
Wherever you live, you can ask us what we keep about you, ask us to correct it, or ask us to delete it. Most of it you can do yourself in the app; otherwise write to hello@picketkids.com and we'll answer within 30 days.
If you're not satisfied with our answer, you can complain to:
- in Canada, the Office of the Privacy Commissioner of Canada;
- in Quebec, the Commission d'accès à l'information;
- in the United States, the Federal Trade Commission.
Keeping it safe
Your data travels encrypted. Each family can reach only its own data: the database itself checks every request (access rules tested on every change). A child's device can read only its own child's channels and limits, and never your account. If a breach ever puts your information at risk of serious harm, we'll tell you and the privacy regulators.
The website and the waitlist
picketkids.com is hosted by Cloudflare (see above). The website sets no cookies of its own and uses no analytics. Cloudflare may set a short-lived security cookie if it needs to check that a visitor isn't a bot.
If you join the waitlist, we keep your email in our database in Canada, only to tell you when Picket is ready, and perhaps to invite you to try it early. Nothing else. We delete it when you unsubscribe (every email has a link) or 6 months after launch.
Changes
If this policy changes in a way that matters, the app asks you to agree again before anything new is kept. The date at the top shows the latest version.