Privacy

Last updated 5 September 2026

Cradl is a service for parents. You create an account, and Cradl reports on the creators, promotions and things that reach your child through the videos they watch. This page says what Cradl collects, what it does with it, and how you delete it. It is written to be read.

Cradl is operated by AMBE LLC, 30 N Gould Street, Suite R, Sheridan, Wyoming 82801, United States. Write to support@cradl.co with any question about this page.

What Cradl collects

Your account

• Your e-mail address and a password, stored hashed. Sign-in sessions.
• If you subscribe: your subscription status and the dates. Payment is handled by Stripe. Cradl never sees or stores your card number.

Your child

• A nickname, an age band and a time zone. Cradl does not ask for your child’s full name, birth date, school or photo.

From your child’s Android phone or tablet, with the Cradl app

The Cradl app is installed by you, with your child. Before anything is switched on, the app tells your child what it does, in words, and asks them to agree. The app stays visible on the phone, and a notification says that Cradl is monitoring YouTube and websites on the device.

• YouTube: which videos are played (the video, its title, its channel, when, and for how long), in the YouTube app and in the browser.
• Websites: which sites are visited in Chrome, Samsung Internet or Silk, by site name only (for example roblox.com) and time spent. Not the page, not the address beyond the site name, not searches.
• Apps and games, only if you turn on usage access: which apps are used and for how long each day. Not anything inside an app.
• The device: its model, which Cradl permissions are on, when the app last reported, and crash reports if the app crashes.

To do this, the Cradl app uses Android’s Accessibility Service to read the video and channel labels of the YouTube app and the browser’s address bar, and the notification listener to read YouTube’s own playback notification. It reads nothing else. It asks to be a device administrator only so it cannot be uninstalled without you; it uses no administrator policies.

Cradl does not collect: page content, messages, e-mails, passwords, anything typed, searches, location, contacts, photos, microphone, camera, or the content of any app.

From your child’s Google account, if you connect it

• If you sign in to your child’s Google account from the Cradl app on your own phone, Cradl reads that account’s YouTube history: the video, the time, the title and the channel. Nothing else from the account.
• The sign-in happens in your phone’s own web view. Cradl never sees the password. Google may sign the connection out at any time; Cradl tells you when it does.
• If you import a Google Takeout file instead, Cradl keeps only the video, time, title and channel of each YouTube play, and never the file.

From your own use of Cradl

• Which steps of the app you reached (for example, that a child was added or a report was opened), so we can see where parents get stuck. Never which videos, creators or things your child’s report contains.
• Error reports when something breaks.

The cradl.co website sets no cookies and runs no tracking.

What Cradl does with it

• Builds your reports: who had your child’s attention, what those creators promoted, what kept coming back, what changed, and what showed up on the phone.
• Investigates the creators and the things in the videos, using public information: the creators’ public channel and video details, public web pages, ratings databases, and AI services that summarise that public information. What your child watched is never sent to an AI service, and no service outside Cradl receives anything that identifies you or your child.
• Runs the account: sign-in, password reset e-mails, the subscription, support.

Cradl does not sell your data, does not show ads, and does not give your family’s data to anyone for their own use.

Who else handles it

These companies process data for Cradl, under contract, only to provide their service:

• Google Cloud hosts Cradl’s servers and database, in the United States.
• Stripe handles payment.
• Resend sends account e-mails such as a password reset.
• Sentry receives error reports.
• PostHog may receive the app-usage steps above, with your household identified only by a one-way hash.
• YouTube Data API and public web sources provide public creator and video information.
• Anthropic summarises public creator and video information. It never receives your child’s activity.

How long Cradl keeps it

For as long as your account exists. When you delete your account, everything about your family is deleted at once, and your subscription is cancelled. Copies in database backups expire within 30 days.

How you delete it

• In the app: Account → Delete account. Two taps, then everything goes.
• On the web: app.cradl.co/delete-account.
• By e-mail: support@cradl.co from the address on the account.

Deletion is immediate and cannot be undone. You can disconnect a connected Google account from the app at any time, and removing the Cradl app from a phone stops collection from that phone at once. To see a copy of what Cradl holds about your family, e-mail support.

Children

Cradl’s user is the parent or legal guardian. Children do not create accounts. The child app collects a child’s activity only because a parent installed it on the child’s device, told the child, and asked for it. If you are in a place where the law requires a parent’s consent for collecting a child’s information, installing Cradl on your child’s device is that consent, and you can withdraw it by removing the app or deleting your account.

Security

Everything travels encrypted. Passwords are stored hashed. Each family’s data is kept apart from every other family’s. Access to the production database is limited to what running the service needs.

Your rights

Wherever you live, you can ask to see, correct or delete your family’s data by writing to support@cradl.co. If you are in the European Economic Area or the United Kingdom, the legal basis for handling your account is our contract with you, and for the child’s device data it is your consent, which you can withdraw as described above. You can also complain to your local data-protection authority.

Changes

If this page changes in a way that matters, Cradl will tell you in the app or by e-mail before the change applies.