Privacy Policy

Last updated: March 29, 2026

1. Introduction

Influenced ("we," "us," or "our") operates the Influenced web application and browser extension (collectively, the "Service"). The Service enables parents and legal guardians to monitor and positively influence the social media algorithms that shape their children's online experience.

This Privacy Policy explains what information we collect, how we use it, how we share it, and your rights regarding that information. We are committed to protecting the privacy of both parents and children who are the subject of data collected through our Service.

By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Information We Collect

2.1 Parent Account Information

When you create an account, we collect:

  • Full name
  • Email address
  • Password (stored in hashed form; we never store plaintext passwords)
  • Billing information (processed and stored by Stripe; we do not store full payment card numbers)

2.2 Child Profile Information

When you create a child profile within the Service, we collect the following information as provided by you, the parent:

  • Child's first name (or nickname/alias of your choice)
  • Child's age

We do notcollect your child's email address, social media credentials, passwords, or any information directly from your child. Children do not create accounts or interact with the Service directly.

2.3 Social Media Feed Data

Our browser extension captures metadata about social media content visible in your(the parent's) browser session. This data is collected from the parent's device and browser, not directly from a child's device or account. The metadata we capture includes:

  • Content identifiers (video IDs, post IDs) from supported platforms
  • Content titles, descriptions, and category labels
  • Creator/channel names and handles
  • Content type and format metadata
  • Timestamps of when content appeared in the feed
  • Platform name (YouTube, TikTok, Instagram)

We do not capture the actual media content (video files, images, audio). We only capture metadata about the content.

2.4 Influence Action History

When you take actions through the Service to influence your child's algorithm, we record:

  • The type of action taken (like, save, follow, subscribe, unlike, unfollow)
  • The target content or creator
  • The platform on which the action was taken
  • The date and time of the action
  • Which child profile the action was associated with

2.5 Automatically Collected Information

When you use the Service, we automatically collect certain technical information:

  • Browser type and version
  • Operating system
  • IP address (used for security and fraud prevention)
  • Pages visited within the Service and time spent
  • Extension version

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Analyze social media feed data to generate insights about your child's algorithmic feed
  • Execute influence actions on your behalf to shape your child's algorithm
  • Track the effectiveness of influence actions over time through trend analysis
  • Process payments and manage subscriptions
  • Send transactional emails (account verification, password resets, billing notifications)
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations, including COPPA, GDPR, and CCPA

We do not use your information to serve advertisements. We do not sell your information to third parties. We do not use child profile data for any purpose other than providing the Service to you, the parent.

4. Children's Privacy (COPPA Compliance)

Influenced is designed for use by parents and legal guardians. The Service is not directed at children under 13 (or under 16 in certain jurisdictions), and children do not create accounts or interact with the Service directly.

4.1 Verifiable Parental Consent

All data collected about children is provided by their parent or legal guardian through the parent's own authenticated account. Account creation requires the parent to be 18 years of age or older. By creating a child profile, you represent and warrant that you are the parent or legal guardian of the child and that you consent to the collection and use of the information you provide about your child as described in this Privacy Policy.

4.2 No Child Accounts

Children cannot and do not create accounts on Influenced. There is no functionality within the Service that allows a child to register, log in, or provide information. All information about children is entered and managed exclusively by the parent.

4.3 Limited Collection of Children's Information

The only information we store about a child is their first name (or an alias chosen by the parent) and their age. We do not collect children's email addresses, phone numbers, physical addresses, social media credentials, photographs, or any other personal information directly from children.

4.4 Parental Rights

As a parent or legal guardian, you have the right to:

  • Review all information associated with your child's profile at any time through the dashboard
  • Edit or correct your child's profile information at any time
  • Delete your child's profile and all associated data (including feed data and influence action history) at any time
  • Refuse further collection of your child's information by deleting the child profile or closing your account

4.5 Data Not Collected from Children

To be clear, we do not:

  • Collect personal information directly from children at any point
  • Allow children to make their personal information publicly available
  • Condition a child's participation in any activity
  • Share children's information with third parties for marketing or advertising

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information to third parties. We share information only with the following categories of service providers, solely to operate the Service:

5.1 Infrastructure and Hosting

  • Vercel— Application hosting and serverless compute. Vercel processes requests and may temporarily log IP addresses and request metadata. See Vercel's Privacy Policy.
  • Supabase— Database hosting and authentication services. All user data, child profiles, feed data, and influence action history are stored in Supabase's managed PostgreSQL database with encryption at rest. See Supabase's Privacy Policy.

5.2 Payments

  • Stripe— Payment processing and subscription management. Stripe processes your payment card information directly. We do not receive or store full card numbers. See Stripe's Privacy Policy.

5.3 Email

  • Resend— Transactional email delivery (account verification, password resets, billing notifications). We share your email address with Resend solely to deliver emails you have requested or that are necessary for the operation of the Service. See Resend's Privacy Policy.

5.4 Legal Obligations

We may disclose your information if required to do so by law, in response to valid legal process (such as a court order or subpoena), or to protect the rights, property, or safety of Influenced, our users, or the public.

6. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher.
  • Encryption at rest: All data stored in our database is encrypted at rest using AES-256 encryption.
  • Access controls: Database access is restricted to authenticated users, and Row Level Security (RLS) policies ensure that users can only access their own data.
  • Authentication security: Passwords are hashed using bcrypt. We support secure session management with automatic expiration.
  • Infrastructure security:Our hosting infrastructure is protected by Cloudflare's bot management, WAF rules, and DDoS mitigation.

While we take reasonable measures to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and applicable local laws:

  • Right of access: You may request a copy of all personal data we hold about you and your child profiles.
  • Right to rectification: You may correct any inaccurate personal data. You can update your account information and child profiles directly through the dashboard at any time.
  • Right to erasure: You may request that we delete all personal data associated with your account. You can delete individual child profiles through the dashboard, or request full account deletion which removes all associated data.
  • Right to data portability:You may request a machine-readable export of your personal data and your children's profile data.
  • Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances.
  • Right to object: You may object to the processing of your personal data in certain circumstances.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time by deleting your account.

Legal Basis for Processing

We process your personal data on the following legal bases:

  • Consent: You provide consent when you create an account and agree to this Privacy Policy. For child data, you provide parental consent when creating child profiles.
  • Contract performance: Processing is necessary to provide the Service you have subscribed to.
  • Legitimate interests: Processing is necessary for fraud prevention, security, and improving the Service, where those interests are not overridden by your rights.
  • Legal obligation: Processing is necessary to comply with applicable laws and regulations.

To exercise any of these rights, contact us at privacy@influenced.app. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
  • Right to delete: You have the right to request deletion of your personal information. You can delete child profiles through the dashboard or request full account deletion.
  • Right to opt out of sale: We do not sell your personal information. We do not sell the personal information of minors. Because we do not sell personal information, there is no need to opt out, but we honor this right by design.
  • Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
  • Right to correct: You have the right to request correction of inaccurate personal information.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

  • Identifiers (name, email address, IP address, account ID)
  • Commercial information (subscription plan, billing history)
  • Internet activity (browser type, pages visited within the Service, social media feed metadata captured by the extension)
  • Information about minors (child name and age, as provided by the parent)

We have not sold any personal information. We have not shared personal information for cross-context behavioral advertising.

To exercise your CCPA rights, contact us at privacy@influenced.app. We will verify your identity before processing your request.

9. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the Service to you.

  • Active accounts: All data (account information, child profiles, feed data, influence action history) is retained while your account is active.
  • Account deletion:When you delete your account, all associated data — including child profiles, feed data, and influence action history — is permanently deleted from our systems within 30 days.
  • Child profile deletion: When you delete an individual child profile, all data associated with that profile (feed data, influence actions) is permanently deleted within 30 days.
  • Billing records: We may retain certain billing records (transaction amounts and dates, but not payment card details) for up to 7 years as required by tax and accounting regulations.
  • Security logs: We may retain security-related logs (IP addresses, login attempts) for up to 90 days for fraud prevention purposes.

10. Cookies and Tracking

We use the following types of cookies and similar technologies:

  • Essential cookies: Required for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled.
  • Analytics cookies: We may use privacy-respecting analytics (such as Vercel Analytics or PostHog) to understand how users interact with the Service. These tools do not use third-party tracking cookies and do not follow users across websites.

We do not use advertising cookies. We do not use third-party tracking pixels. We do not participate in ad networks or retargeting programs.

The browser extension does not set cookies. It communicates with our servers using authenticated API requests tied to your active session.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last updated" date at the top of this page
  • Notify you by email if the changes are material (particularly any changes affecting how we handle children's data)
  • Provide a prominent notice within the Service for significant changes

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the changes, you should discontinue use of the Service and delete your account.

12. Contact Us

If you have questions about this Privacy Policy, our data practices, or your rights, please contact us:

For COPPA-related inquiries or to exercise parental rights regarding your child's data, please use the same email address. We will respond to all privacy-related requests within 30 days.

If you are in the EU and are not satisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority.