Your child will never meet a stranger here
Bóyǎ has no public profiles, no friend search, no DMs, no comment sections, and no chat rooms. The only people your kid can interact with on the app are people already in your household — siblings via duels, parents via the family dashboard.
- Sibling-only duels by default (household scope)
- No public leaderboards by username or photo
- No direct messages, anywhere in the app
- School tier exposes only within-classroom interaction, gated by the teacher
The AI tutor is scoped, not open-ended
老师 Lin (Teacher Lin) is a tutor, not a general chatbot. The system prompt restricts her to Mandarin instruction at the child's HSK level. She doesn't browse the web, can't share personal information, and won't engage with off-topic prompts — she'll redirect to the lesson.
- Topic-restricted system prompt audited per release
- No file uploads, no image generation, no web search
- Voice/video runs over LiveKit WebRTC — end-to-end encrypted
- No transcripts are sold or shared with third parties
What we collect, and what we don't
Bóyǎ collects only what's needed to run the app: account email (parent only), display name, profile color, learning progress, and aggregated time-on-task. We do not run third-party ad networks. We do not run third-party behavioral analytics on children's accounts. We do not sell data.
- Hosted on Supabase (US/EU regions, SOC-2 Type II)
- No Google Analytics / Meta Pixel / TikTok pixel on logged-in kid pages
- Parent owns the account; kid profiles cannot self-delete or self-pay
- Data export and account deletion on request — email hello@boyapp.io
COPPA-aligned by default
Bóyǎ is designed to be usable in the United States by children under 13 with verifiable parental consent. The parent creates the household account, sets up child profiles, and is the data subject of record. We do not knowingly collect personal information directly from a child without parent consent.
- Account creation requires a parent email and password
- Child profiles are sub-accounts under the parent household
- No outbound email, push, or SMS is ever sent to a child account
- Right-to-delete is honored within 7 days of a parent request
Anti-cheating and content moderation
Duels and quests are scored server-side; clients can't fake answers. User-generated content is limited to display names, which are filtered for slurs/PII at creation. AI tutor output is sampled and audited weekly for off-topic drift.
- No free-form chat input that other users can see
- Display-name filter blocks profanity and obvious PII patterns
- Server-authoritative scoring on all game modes
- Weekly internal audit of tutor transcripts (anonymized)