Privacy

Cradl is a service for parents. You create an account, and Cradl reports on the creators, promotions and things that reach your child through the videos they watch. This page says what Cradl collects, what it does with it, and how you delete it. It is written to be read.

Cradl is operated by AMBE LLC, 30 N Gould Street, Suite R, Sheridan, Wyoming 82801, United States. Write to hello@cradl.co with any question about this page.

What Cradl collects

Your account

• Your e-mail address and a password, stored hashed. Sign-in sessions.
• If you subscribe: your subscription status and the dates. Payment is handled by Stripe. Cradl never sees or stores your card number.

Your child

• A nickname, an age band and a time zone. Cradl does not ask for your child’s full name, birth date, school or photo.

From your child’s Android phone or tablet, with the Cradl app

The Cradl app is installed by you, with your child. Before anything is switched on, the app tells your child what it does, in words, and asks them to agree. The app stays visible on the phone, and a notification says that Cradl is monitoring YouTube and websites on the device.

• YouTube: which videos are played (the video, its title, its channel, when, and for how long), in the YouTube app and in the browser.
• Websites: which sites are visited in Chrome, Samsung Internet or Silk, by site name only (for example roblox.com) and time spent. Not the page, not the address beyond the site name, not searches.
• Apps and games, only if you turn on usage access: which apps are used and for how long each day. Not anything inside an app.
• The device: its model, which Cradl permissions are on, when the app last reported, and crash reports if the app crashes.

To do this, the Cradl app uses Android’s Accessibility Service to read the video and channel labels of the YouTube app and the browser’s address bar, and the notification listener to read YouTube’s own playback notification. It reads nothing else. It asks to be a device administrator only so it cannot be uninstalled without you; it uses no administrator policies.

Cradl does not collect: page content, messages, e-mails, passwords, anything typed, searches, location, contacts, photos, microphone, camera, or the content of any app.

From your child’s Google account, if you connect it

• If you sign in to your child’s Google account from the Cradl app on your own phone, Cradl reads that account’s YouTube history: the video, the time, the title and the channel. Nothing else from the account.
• The sign-in happens in your phone’s own web view. Cradl never sees the password. Google may sign the connection out at any time; Cradl tells you when it does.
• If you import a Google Takeout file instead, Cradl keeps only the video, time, title and channel of each YouTube play, and never the file.

From your own use of Cradl

• Which steps of the app you reached (for example, that a child was added or a report was opened), so we can see where parents get stuck. Never which videos, creators or things your child’s report contains.
• Error reports when something breaks.

The cradl.co website uses Meta’s advertising cookies only as described under Advertising cookies. The game at play.cradl.co has none.

What Cradl does with it

• Builds your reports: who had your child’s attention, what those creators promoted, what kept coming back, what changed, and what showed up on the phone.
• Investigates the creators and the things in the videos, using public information: the creators’ public channel and video details, public web pages, ratings databases, and AI services that summarise that public information. What your child watched is never sent to an AI service, and no service outside Cradl receives anything that identifies you or your child.
• Runs the account: sign-in, password reset e-mails, the subscription, support.

Cradl does not sell your data, does not show ads, and does not give your family’s data to anyone for their own use, apart from the advertising measurement with Meta described under Advertising cookies.

Who else handles it

These companies process data for Cradl, under contract, only to provide their service:

• Google Cloud hosts Cradl’s servers and database, in the United States.
• Stripe handles payment.
• Resend sends Cradl’s e-mails: password resets, permission e-mails, alerts and the weekly report.
• Sentry receives error reports.
• Meta receives advertising measurement from cradl.co, only as described under Advertising cookies.
• PostHog may receive the app-usage steps above, with your household identified only by a one-way hash.
• YouTube Data API and public web sources provide public creator and video information.
• Anthropic summarises public creator and video information. It never receives your child’s activity.

YouTube

Cradl uses YouTube API Services to read public information about the videos and channels your child watches: titles, channels, descriptions, YouTube’s own labels and public counts. By using Cradl you agree to be bound by the YouTube Terms of Service. How Google handles information is described in the Google Privacy Policy.

Cradl refreshes or deletes the information it reads from YouTube within 30 days. If you connected your child’s Google account, you can disconnect it in the app under Account, and choose to delete the history Cradl imported.

How long Cradl keeps it

For as long as your account exists, with two shorter limits: the raw list of websites visited is kept for 90 days, and error records on our side hold no names or family identifiers. When you delete your account, everything about your family is deleted at once, and your subscription is cancelled. The database is backed up daily; the backups are kept for 14 days and the recovery logs for 7, so a deleted family disappears from them within 14 days.

How you delete it

• In the app: Account → Delete account. Two taps, then everything goes.
• On the web: app.cradl.co/delete-account.
• By e-mail: hello@cradl.co from the address on the account.

Deletion is immediate and cannot be undone. If the subscription cannot be cancelled at that moment, nothing is deleted yet and the app asks you to try again in a few minutes, so an account is never gone while a subscription still runs. You can disconnect a connected Google account from the app at any time, and removing the Cradl app from a phone stops collection from that phone at once. To see a copy of what Cradl holds about your family, e-mail support.

Children

Cradl’s user is the parent or legal guardian. Children do not create accounts and are never asked for anything. Cradl collects from a child only after a parent has agreed and the agreement has been verified, as this section describes. It is Cradl’s notice to parents under the US Children’s Online Privacy Protection Act (COPPA).

What Cradl collects from your child’s devices and account

• The YouTube videos they watch: the video, its title, its channel, when, and for how long, in the YouTube app and in the browser.
• The websites they visit in Chrome, Samsung Internet or Silk, by site name only (for example roblox.com), and the time spent. On YouTube in a browser, also the video.
• The apps and games they open, and for how long each day, only if you turn on Apps and games.
• On an iPhone or iPad: the YouTube history in the Google account you connect (the video, the time, the title and the channel), or in the Google Takeout file you import.
• If you set up the iPhone shortcut: when they open and close the apps it watches.
• The device: its model and system version, its time zone, which of Cradl’s switches are on, the versions of the apps Cradl reads, when it last reported, its internet (IP) address when it sends, and crash reports if the Cradl app crashes.

Never what they type, their messages, e-mails, passwords, searches, photos, contacts, camera, microphone or location. The nickname, age band and time zone of your child come from you, not from your child, and so do the first name and photo you give for a Cradl adventure.

How Cradl uses it

• To show you, and any parent you invite, which videos, creators, sites and apps get their attention, in the app and in e-mails to you.
• To look up public facts about those creators, videos and apps. The lookups never say who watched.
• To keep Cradl working and secure.

Who else gets it

No one else. Cradl does not sell your child’s information, does not use it for advertising or to train AI models, and does not make it public. Google Cloud stores it and Resend delivers the e-mails that mention your child; they handle it for Cradl under contract and for nothing else. Sentry receives error reports with their values stripped, and PostHog receives app-usage steps with your household identified only by a one-way hash.

Your consent, and how it is verified

Cradl asks for your consent before it collects anything from your child. You give it when you create your account, by ticking the box that says you are 18 or older, the parent or legal guardian of any child you add, and agree to Cradl collecting what they watch and use on the devices you connect. If you bought a Cradl adventure, you give it when you start the app trial, with the line above the Start button; buying the adventure alone is not consent. Consent is verified by the card used at checkout: the card you add when your free trial starts, or the payment for your adventure. It covers every child you add to your account. Until your consent is given and verified, nothing from your child’s phone or Google account is stored.

If your account has no card, Cradl e-mails you this notice with a link to agree, and e-mails you again a day later to confirm, with a link to withdraw.

Your rights

• See it: what Cradl collected is in the app. For a copy, write to hello@cradl.co from the address on the account.
• Stop collection: in the app, open Account, choose your child and tap Withdraw permission. Cradl stops collecting from them, deletes everything it collected for them and unpairs their phone; your child stays on your account. Removing the Cradl app from their phone stops collection from that phone at once, and you can disconnect their Google account in Account.
• Delete it: remove a child, or delete your account, in the app under Account, at app.cradl.co/delete-account, or by writing to hello@cradl.co.

How long Cradl keeps it

As described under “How long Cradl keeps it” above: for as long as your account exists, with the raw list of websites visited kept for 90 days and information read from YouTube refreshed or deleted within 30 days. Withdrawing your permission for a child, removing the child or deleting your account deletes it at once, and it leaves the backups within 14 days. The record of your consent (when you agreed, to which version of these words, and the payment that verified it) is kept for as long as your account exists.

Who to contact

AMBE LLC, 30 N Gould Street, Suite R, Sheridan, Wyoming 82801, United States. hello@cradl.co. Telephone: +1 (302) 307-1116.

Security

Everything travels encrypted. Passwords are stored hashed. Each family’s data is kept apart from every other family’s. Access to the production database is limited to what running the service needs.

Your rights

Wherever you live, you can ask to see, correct or delete your family’s data by writing to hello@cradl.co. If you are in the European Economic Area or the United Kingdom, the legal basis for handling your account is our contract with you, and for the child’s device data it is your consent, which you can withdraw as described above. You can also complain to your local data-protection authority.

Changes

If this page changes in a way that matters, Cradl will tell you in the app or by e-mail before the change applies.

Address suggestions at checkout

When you type a shipping address at checkout, the address text and selected country are sent to Google Maps to suggest matching addresses. We do not send your name, email, child’s details or payment details with these searches. You can enter the address manually. Google handles these requests under its Privacy Policy.

Advertising cookies (Meta)

On cradl.co we use the Meta pixel to see which of our Facebook and Instagram ads bring families to Cradl, and to show our ads to people who have visited. It runs unless your browser sends a Global Privacy Control signal.

It records the pages of cradl.co you visit, when a preview is made, when checkout starts, and a purchase with its amount. With a purchase we also send Meta your email address and country as one-way hashes, your browser’s IP address and user agent, and Meta’s own cookies, so Meta can match the purchase to an ad. We never send your child’s name or photo. Meta handles this data under its own privacy policy.

To opt out, turn on Global Privacy Control in your browser, or email hello@cradl.co.

Emails about your order

We email you your game link when you buy. If you start a checkout and don't finish it, we may send up to two emails with a link back to your child's preview; we keep that email and the preview link for 7 days, then delete them, or sooner if you buy. After a purchase we send a few emails about how the adventure went, a review request and the photobook offer. Every one of these has an unsubscribe link; unsubscribing never stops the email with your game link.

Reaction videos for the free photobook

If you bought an adventure, you can send us a video of your child’s first reaction and a few minutes of play, and we print their hardcover photobook for free. The book is given in exchange for the video: by sending it, you agree that Cradl may use it, including your child’s face and voice, on our website and social media to inspire other customers. You also give us a shipping address. If your purchase includes a photobook, the free book can feature someone else. We collect their name and the photo you upload to make that gift book, separately from your purchased adventure. You must have permission to use their photo; for a child, this means permission from their parent or guardian. Recipient photos are stored privately with your book request and are not part of the reaction-video sharing permission.

The video is uploaded directly to private storage at Google Cloud that only Cradl can open. We use the address only to print and ship the book through our print partner, Gelato. We never sell the video or use it for anything other than showing families what Cradl is like. To have a video removed from our storage, our website and future social media posts, write to hello@cradl.co. Deleting your account deletes the video too.