Safety here is architecture, not moderation.
Who can reach a child is not a setting someone remembered to check. It is decided by relationships, enforced in code, and tested on every commit.
Four decisions, enforced in code
Each sentence below describes a rule the build enforces and a test that runs on every change — named the way the tests themselves are named.
Who can reach your child
A role never grants access by itself. Being "a coach" makes an adult eligible; reaching a specific child requires a real, current relationship with that child.
- Access is relationship-based: no relationship, no contact. The test suite calls this rule "no stranger can reach a child."
- An adult cannot direct-message an under-13 unless that child's own guardian is in the conversation.
- Minors have no public profiles. There is no toggle to make one — the option does not exist.
What a parent sees
Parents get accountability without surveillance: enough to trust what happened, never a transcript of a childhood.
- Receipts, not transcripts: you see that communication happened, with whom, and under which rule — not a feed of your child's words.
- When safety review touches an event, guardian and child each get their own plain-language safety card. No excerpts, no triggering keywords, no model scores.
- Photo and video consent is enforced where media lives: declined and revoked both refuse, and pending never permits.
When messaging is off
Guardian controls are not decoration on a settings page. They are read at the moment of sending, and doubt resolves toward silence.
- Controls are checked at send time, and an error fails closed — messaging off means silence, not erasure.
- Notifications and metadata never name a child to someone without a relationship to that child.
- Parental consent is verifiable and audit-logged, not a checkbox that vanishes.
Who stands on the sideline
The adults around the team clear a gate before they are assigned to one — and an unstarted check fails exactly like an expired one.
- Background-check and SafeSport clearance gate volunteer assignments. "Not started" is treated like "expired."
- Volunteer roles, rotas and clearances are managed in the same system that runs the season.
- Every query is tenant-isolated and role-gated, and those gates are attacked in tests on every change.
Trust Promise
Six commitments we make to every family.
No public profiles for minors
Ever. Period. Your child's information is never publicly accessible. We don't even allow it as an option.
No data selling
Your memories are not our product. We make money from subscriptions, not from selling your family's data to advertisers.
No rankings or comparisons
We celebrate growth and effort, not rankings. There are no leaderboards, no performance comparisons between kids.
Parent control
You decide what's shared and with whom. Every sharing permission is explicit and revocable.
Delete anytime
One click removes everything. Your data belongs to you, and we make it easy to take it all back.
Transparent technology
We explain how every feature works. No black boxes, no hidden algorithms making decisions about your kid.
Comparison
Safer than social media. By design.
| Feature | Social Media | Peer10 |
|---|---|---|
| Public by default | Yes | No |
| Algorithmic feeds | Yes | No |
| Stranger interaction | Yes | No |
| Performance pressure | Yes | No |
| Data monetization | Yes | No |
| Guardian-verified under-13 accounts | No | Yes |
| Parent oversight | No | Yes |
For Peer10, 'No' to harmful features is intentional — we deliberately exclude them.
Privacy Controls
You're in control.
Privacy tools that put parents in the driver's seat.
Sharing tiers
Family only, Team only, or Private. You choose the default and override for any content.
Granular permissions
Choose exactly what each person can see. Grandma might see highlights but not stats.
Revocable access
Remove anyone's access instantly. Changed your mind? One click revokes sharing.
Download everything
Export your complete data archive anytime. It's your data — you should be able to take it.
Delete everything
Request deletion any time. Your account is permanently deleted 14 days later, and you can cancel during that window.
Compliance
We take the legal stuff seriously.
Industry certifications and regulatory compliance for protecting families.
COPPA Compliant
Children's Online Privacy Protection Act
SOC 2 Type II
Audit engagement planned
GDPR Ready
European Data Protection
CCPA Compliant
California Consumer Privacy Act
COPPA: Our foundation, not a checkbox
The Children's Online Privacy Protection Act sets the minimum bar. We go further. Peer10 was designed from the ground up for children's data, not retrofitted.
We collect only what's necessary (name, age, team). We never show ads. We never build behavioral profiles. Parents have full visibility and control over every piece of data associated with their child.
Our engineering practices include privacy-by-default, data minimization, and automatic expiration of session data. Every new feature goes through a child-safety review before it ships.
We're here to help.
Our Trust & Safety team responds to every inquiry within 24 hours. If something doesn't feel right, let us know.