YORE.
Listen in How it works Characters For parents Founder Log in Start free trial →
Start free trial →
Privacy & COPPA

Privacy Policy

Last updated May 9, 2026

Yore is built for kids and families. This is what we collect, why, who else sees it, and how to delete it. We've kept it short and plainspoken — if any of it is unclear, email [email protected].

In 10 seconds
  • No voice recordings stored. We transcribe in real time and discard the audio.
  • No ads, ever. No data sold or rented to anyone.
  • No third-party tracking on the kid surface (kids.helloyore.com).
  • Parent controls in Settings → Privacy — toggle each consent, export everything, delete the whole family.
  • Contact: [email protected]. The COPPA officer is Anthony Liu.

Who runs Yore

Yore is operated by Yore PBC, a Delaware Public Benefit Corporation. The privacy contact is [email protected].

For kids under 13 — COPPA

Yore is directed at kids and complies with the U.S. Children's Online Privacy Protection Act (COPPA). For any user under 13, we require verifiable parental consent before collecting personal information beyond what's strictly necessary to run the chat. The consenting parent is the person who creates the account.

Safety guardrails — what characters never do

Hard rules. Coded into every character — not toggleable, not negotiable. The same five apply to every kid, every conversation, every character on Yore.

  • Never ask your kid for personal information — last name, address, school, phone number, parents' names, or birthday. If volunteered, it's never echoed back and never written to memory.
  • Never describe explicit violence, sexual content, or substance use, even when the historical record contains it. Difficult moments are summarized, not dramatized.
  • Never give instructions for weapons, drugs, or self-harm — the request is acknowledged warmly and redirected to "ask a grown-up."
  • Never claim to love your kid or to be a real living friend. The characters know they're characters speaking through Yore.
  • Never agree to keep secrets from you. If a kid asks for one, the character gently declines and reminds them grown-ups can be trusted with anything.

What we collect about your kid

What's strictly necessary (no extra consent required)

  • Your kid's first name and age, entered by you during signup.
  • A 6-digit PIN we generate so your kid can sign in (sibling separation).
  • Your kid's voice, only in transit: when your kid speaks, the audio is sent to our transcription provider (Deepgram) and immediately discarded once it has been transcribed. We never store voice recordings.
  • Your kid's transcribed text, sent to Anthropic so a character can respond. By default this is held in memory during the session and not written to our database.
  • The character's reply (text + audio) — generated by Anthropic and ElevenLabs, played in your kid's browser.
  • The IP address of devices that sign in, so we can detect credential sharing across households (kept ≤30 days for that purpose only).

What's optional (you choose during onboarding)

  • Saving your kid's text in your parent dashboard, so you can review every conversation. Recommended for the best experience — without this, you can't see what your kid asks.
  • Letting characters remember things about your kid between sessions (small text snippets like "loves dinosaurs"). Recommended — without this, every session starts fresh.
  • Anonymized text for product improvement. Names, ages, and identifying details are stripped before any human or model sees it.
  • Aggregate usage data shared with academic research partners. Counts and patterns only — never identifying data.

You can change any of these in Settings → Privacy at any time. Withdrawing consent stops new collection immediately and gives you a one-click delete for past data.

Who else sees the data

We share data only with the service providers we need to run Yore:

ProviderWhat they receiveWhy
Anthropic Conversation text (kid's questions + character's replies), via the API The character's responses run on Anthropic's Claude models. Anthropic's API tier has a contractual no-training default — submitted data is not used to train their models.
Deepgram Voice audio, transient (discarded immediately after transcription) Speech-to-text transcription
ElevenLabs Reply text only (no kid voice or kid text) Text-to-speech — the character's voice playback
Cloudflare IP + request metadata for routing (no kid PII; no parent email shared with Cloudflare) DDoS protection + WAF at the edge; DNS
Render Encrypted HTTPS traffic; runs the application servers and routes requests Application hosting
Neon Database contents — accounts, conversations, memories, audit logs Encrypted database hosting in AWS US-East-1

Yore is the COPPA-compliant operator for any data we collect about your kids. We use Anthropic, Deepgram, and ElevenLabs as service providers under COPPA's service-provider framework (16 CFR 312.4(d)(3)) — they process data on our instruction and are bound by their own terms to use submitted data only for providing their service to us. Specifically:

  • Anthropic's API tier has a contractual no-training default — submitted data is not used to train their models.
  • Deepgram processes voice audio in transit only; no recordings are stored by Yore, and Deepgram's standard terms permit submitted data to be used only for providing the transcription service to us.
  • ElevenLabs receives only the character's outgoing reply text — never the kid's voice, never the kid's input text — so its access to anything personal about the kid is, by design, none.

None of these providers receives any data they don't strictly need for their function. We do not sell or rent any data to anyone.

Before broader launch, we will obtain formal Data Processing Agreements (DPAs) with each provider that explicitly acknowledge the operator/processor relationship under COPPA. The friend pilot operates under each provider's standard terms, which we have reviewed for COPPA-compatibility. Voice recordings are never stored on Yore servers.

How long we keep it

  • Active families: kept while the family is using Yore. "Using" means a parent has signed in or a kid has had a conversation in the past year.
  • Inactive 1+ year: all conversations, transcripts, memories, and kid records are auto-deleted.
  • Account deletion: when you click "Delete my entire family" in Settings, we soft-delete immediately and hard-delete after a 90-day grace period (in case you change your mind).
  • Voice recordings: never retained. Discarded as soon as Deepgram returns the transcription.
  • IP-address sharing-detection records: 30 days, then deleted.

Your rights as a parent

You can, at any time, in Settings → Privacy:

  • Review all data we have about your kid (transcripts, memories, conversation list)
  • Toggle any of the four consent flags on or off
  • Delete all of one kid's data (transcripts + memories + everything except basic family record)
  • Export all of your family's data — JSON download per kid, or printable PDF for the whole family
  • Delete your entire family account

Security

Passwords are hashed with Argon2id. Session tokens are HMAC-hashed at rest. Sensitive content (kid names, conversation text, memories, summaries) is encrypted at rest with AES-GCM via AWS KMS in production. All traffic is HTTPS via Cloudflare edge. The dev/admin dashboard sits behind an admin-email allowlist. Your kid's PIN is stored hashed within your family's namespace only.

No advertising, no cross-site tracking

Yore has no ads. We don't share data with advertisers, data brokers, or social platforms. Our cookies are first-party only (sign-in session + family code) and do not follow your kid across the internet.

For aggregate site analytics on parents.helloyore.com and helloyore.com, we use Plausible Analytics — a privacy-focused analytics service that uses no cookies, collects no personal identifiers, and does not track individuals across sites. Plausible records only aggregate counts (pageviews, button-click tallies) for product improvement. It is never loaded on the kid-facing surface (kids.helloyore.com) per our L1.13 commitment.

Changes to this policy

If we change anything material, we'll email every active parent account 30 days before the change takes effect, and we'll require fresh consent from any parent of an under-13 kid before continuing to collect data under the new terms.

Contact

Privacy questions, deletion requests, or concerns: [email protected]. We answer within 7 days.

COPPA Compliance Officer

Required by 16 CFR §312.6 — formal COPPA inquiries, deletion requests, or compliance-related correspondence should be directed to:

Anthony Liu
Designated COPPA Compliance Officer, Yore PBC
[email protected]

For deletion requests, the parent dashboard includes one-click data deletion (Settings → Privacy → "Delete my entire family from Yore"). For non-self-service requests or any other COPPA matter, email above and we'll respond within 7 days.

YORE.
Every person worth knowing — in their own voices.
© 2026 Yore PBC · Delaware Public Benefit Corp · No advertising. Ever.

Yore

  • How it works
  • Characters
  • Listen in
  • For parents
  • Founder

Get in touch

  • [email protected]
  • Privacy
  • Terms