NC

Parental / Guardian Consent

Version 1.0 · April 2026

This document describes the conditions under which a minor may use the nocodeon.click platform, in accordance with Article 8 of GDPR and Serbia's Personal Data Protection Act.

1. Who can create an account for a child

Only a parent or legal guardian of the minor. Verification is done through a SCHOOL plan subscription (payment with the parent's card).

2. What this consent covers

  • Creating a sub-profile for the child within your family account (display name, age, PIN)
  • Storing the child's activity (projects, AI conversations, token usage)
  • Using AI services to generate code based on the child's input
  • Audit log of consent (timestamp, IP address, email verification)

3. What is NOT covered

  • The child CANNOT buy a subscription or TopUp on their own
  • The child CANNOT share data with third parties
  • The child CANNOT publish an app to Google Play without your approval

4. Your rights and obligations

As a parent/guardian:

  • You see all child activity in real time
  • You can set per-child token limits
  • You can temporarily lock the child's account
  • You can delete all the child's data at any time (right to erasure)
  • You are legally responsible for the child's activity on the platform

5. Child data protection

  • Data is stored in the EU (Frankfurt)
  • Encrypted in transit (TLS 1.3) and at rest
  • PIN is hashed (SHA-256 with salt)
  • We never share child data with third parties
  • AI vendors have zero data retention add-on

6. Withdrawing consent

You can withdraw consent at any time from the dashboard (Family → Remove child) or in writing to dpo@nocodeon.click. Deletion happens within 24 hours.

7. Audit record

Your consent is recorded with: timestamp, your email, IP address, and the sub-profile identifier. This record is retained for 1 year after account deletion (regulatory requirement).

8. Contact

dpo@nocodeon.click — Data Protection Officer NKnet Consulting d.o.o.