Trust & Safety

Every account is set up with a confirmed parent or guardian (18+) who accepts responsibility for the account and consents to data processing on behalf of their child. This is a required step — the shop cannot be created without it.

We default to the most protective settings throughout. Cash on collection is off by default — a parent must actively enable it and is shown a safety reminder every time it is on. Our first-sale email emphasises skills learned, not money earned.

We only collect what is needed to run the service. We prompt young people not to include personal details (home address, school name) in their shop description. Free-text inputs sent to AI are automatically stripped of email addresses, phone numbers, and URLs before processing.

The dashboard has a dedicated Parent view with a setup checklist. Privacy-sensitive features (personalisation, cash payments) require explicit parental action to enable. The personalisation consent modal makes clear that a parent or guardian should make the decision for under-13s.

We do not use dark patterns. The post-sign-up screen presents both paths — subscribing now and setting up first — with equal visual weight and a clearly stated price. We do not hide the free option or use manipulative design to push families toward higher spend.

New shops are private until a parent actively publishes them. Cash payments are off by default. Analytics cookies are declined by default. Bank account details are not included in buyer confirmation emails unless the merchant explicitly enables this. Personalisation data is not collected unless the account holder consents.

Every product listing — on the website and in the iOS app — has a visible "Report this listing" button. Reports go directly to our admin team for review within 24 hours. We also moderate every product image at upload time using AI before it goes live on the platform.

All product images are checked by AI (Google Gemini) for age-appropriateness before going live. All product names and descriptions are moderated for inappropriate content at the point of saving — on both the website and the iOS app. Users can report any listing and we review every report.

Review request emails are only sent to buyers who explicitly opt in at checkout. We do not send marketing emails to buyers without consent. Order confirmation emails are sent only when a buyer provides their email address.

Buyer contact data (name, phone, email) is retained for 90 days after the order date, then deleted. Personalisation profile data is deleted immediately if consent is withdrawn. Order records are kept for 7 years for accounting purposes only.

When a parent enables cash on collection, a safety reminder is permanently displayed in the shop settings: the young person must take a trusted adult, meet in a public place, and never share their home address. The same guidance appears in every new-order notification email when cash or bank transfer is the payment method.