Privacy

Privacy & child safety

Seeddu is built around data minimisation. This page describes what we collect, what we never publish, and how children are protected.

Seeddu never receives, holds, pools, or forwards money. Contributions always go directly to an external education account provider.

Children are beneficiaries, never users

A child never has an account, a login, a profile they control, or the ability to post, comment, or message. Only adults can sign in to Seeddu.

A parent or legal guardian creates and controls everything about a child's registry, including whether it is visible at all.

What is never shown publicly

Public and shared registry pages never include a child's full legal name, exact date of birth, school, classroom, teacher, home address, precise location, email, phone number, or any financial account reference.

Public pages show only a display name, an approximate age, an optional broad area, optional interests and aspirations, and a photo only if a photo has been approved for display.

No stranger contact

Seeddu has no public comments, no messaging with a child, and no way for a visitor to contact a child. Notes from givers are visible only to the parents who control the registry.

Sharing links

A share link is a high-entropy private token. It can be revoked and can expire. A link never bypasses privacy settings: if a registry is private, suspended, unapproved, or missing consent, the link reveals nothing.

Money and financial data

Seeddu never receives, holds, pools, or forwards contributions. Contributions are routed to an external education account provider chosen by the parent.

Seeddu does not store bank or card credentials, provider usernames or passwords, or account numbers.

Identity verification and content review

Verification and content review are recorded as abstract states. In this phase no identity provider or review provider is connected, so those states remain pending and no verified claim is made.

Seeddu does not retain raw identity documents.

Access and deletion

Parents can request access to, correction of, or deletion of their family's data by contacting support. Deleting a family removes its beneficiaries, registries, destinations, and share links.

Identity verification is an abstract state in Phase 1. No identity provider is connected, so verification stays pending. Photo and content review is architecturally in place but no review provider is connected, so submissions stay pending.