Last updated 8 November 2026
SafeKids TV is a parent-controlled viewer for YouTube videos. A parent approves each channel or video, and the child only ever sees what has been approved.
The short version: no email or password sign-up is required. Parents may enter a nickname to label a child profile; it stays on the tablet. The app does not show adverts. The approved list lives on the tablet, not on our servers. The longer version, including the parts where other companies are involved, is below.
We do not receive child profile nicknames or libraries on our servers. We do not ask for the following, from a parent or from a child:
SafeKids TV does not require an email address or password. Optional Premium linking uses a random family identifier and installation credentials stored in the secure keystore. These identify linked installations, not a child by name.
The parent PIN that protects the settings is stored in the device’s own secure keystore, is available only when the device is unlocked, and never leaves the tablet. We cannot read it, and we cannot reset it for you — if it is lost, the app has to be reinstalled.
The approved channels and videos, the age band, the daily time limit, bedtime windows, and how long has been watched today are all stored on the device itself. They are not uploaded to us, and we have no server that holds a copy.
For the weekly report in Parent Dashboard → Settings, the tablet also keeps the titles and channel names of the approved videos played in the last 14 days, with minutes watched per day. Older days are deleted automatically. This log stays on the device and is never sent to us, analytics, or YouTube.
Premium child profiles keep separate libraries, age bands, time settings, and watch logs. Profile nicknames also stay on the device and are not sent to RevenueCat, analytics, or YouTube. Restoring Premium on another tablet does not copy these libraries or settings.
Uninstalling the app removes them.
This is the most important thing on this page. Videos are not hosted by us. They are played from YouTube inside the app, and searching for a show queries YouTube as well.
That means Google and YouTube receive those requests directly, including the device’s IP address, and may set cookies or otherwise collect data according to their own policies, not ours. We do not control what Google collects, and we cannot delete it on your behalf.
If you would rather your child’s viewing was not visible to Google at all, no app that plays YouTube videos — including this one — can offer that.
The separate paid SafeKids TV Premium edition includes Premium with the app purchase. It checks the app license with Amazon rather than using RevenueCat subscriptions or Cloudflare linking codes. Amazon processes the account and device information needed for that license check.
Premium is sold through the Amazon Appstore. Payment is handled entirely by Amazon; we never see a card number or billing address.
We use RevenueCat to check whether a subscription is currently active. RevenueCat is given a random installation or linked family identifier and the identifier of the plan purchased. It is not given a name, an email address, or any advertising identifier.
When Premium linking is enabled, our Cloudflare-hosted service stores random family and installation identifiers, hashed access credentials, hashed and encrypted single-use codes, link dates, and an optional installation label chosen by the parent. Use a non-personal label such as Blue tablet. No child names, parent PINs, approved libraries, payment details or viewing history are sent to that service.
The service checks RevenueCat for the family’s Premium status. Cloudflare processes network requests, including IP addresses. Application rate limits store only hashed network identifiers temporarily; application request logging is disabled. Linking codes work once and only while Premium is active. Current 5-character codes expire after 24 hours; codes sent by support expire after 7 days. Some 8-character codes from earlier app versions have no time limit and are kept until used or revoked.
Because Amazon does not allow purchases in a child’s Fire profile, that profile can instead show its own 4-digit number for the parent to enter in the adult profile. The service stores only a hashed copy of that code and of a separate random secret kept on the child’s installation, which is what collects the link. These requests work once and expire after 2 hours. Collecting the link checks Premium again, exactly as entering a code does.
The purchasing parent can view linked installations and remove access in the Premium dashboard. Removal takes effect on the removed installation’s next successful online check; an offline tablet cannot receive a removal immediately. Contact us to request deletion of linking records. Removing a link does not cancel Amazon billing.
Updater-enabled versions may check our separate Cloudflare delivery service for compatible JavaScript and image improvements. These checks disclose the app version and its free, paid or QA delivery channel. Downloads are cryptographically verified and applied at a safe restart; native app updates still use the Amazon Appstore.
Cloudflare processes the network requests, including IP addresses. The update service does not receive parent PINs, child nicknames, approved libraries, purchase credentials or viewing history. Application request logging and optional Hot Updater analytics are disabled. The working app remains available offline.
To understand where the app is confusing or where parents get stuck, the app may record a small number of anonymous events using PostHog. These are tied to a random identifier generated on the device, not to any person.
The events recorded are limited to:
First openings and active-use counts are estimates per app installation in a Fire profile, not unique children or Amazon’s official install totals. Reinstalling or clearing app data may create a new anonymous installation. QA and LAT test builds are labeled separately.
No video titles, search terms, channel names, or anything a child watched are included in these events.
The app shows no adverts of its own and contains no advertising or tracking networks. Nothing about a child is used to target advertising, and we do not sell or share personal information.
Videos played from YouTube may themselves contain sponsored segments placed there by the video’s creator, which is outside our control. Reviewing a video before approving it is the way to catch that.
This app is intended to be set up and controlled by a parent or guardian. It is designed so that a child using it is not asked for any personal information at all — there is no sign-up, no child-entered profile information, no comments, no messaging, and no way for a child to reach anyone through the app.
Because we do not collect personal information from children, there is generally nothing held about a child for us to return or delete. If you believe we hold anything about your child, write to us at the address below and we will look into it and delete it.
If this policy changes, the date at the top of this page changes with it, and the updated policy is included in the next release of the app.
Questions about privacy, or a request to delete anything held about you or your child, can be sent to safekidstv.123@gmail.com.