← Back to the PYP hubPYP · Safe by Design

Everything a children's app should refuse to do, refused.

A child never creates an account, never types into an open text box, never sees an ad or a leaderboard. Adult-created accounts, QR class-card login, and moderation on everything, the safety architecture in plain language.

Talk to us about your school

What you get

The safety architecture, in plain language

Adults create accounts, always

Never an open-web sign-up by a child.

School or parent creates the account
The adult consents first
The child just scans their class card

A 7-year-old can log in

Nothing to remember, nothing to mistype.

A printed QR class cardNo email, no passwordNo OTP

No ads, trackers or purchases

Nothing profiled beyond learning.

No advertising SDKsNo in-app storeNo third-party trackers

No comparison, no shame

A child is never ranked against another.

No leaderboardsMisses are invisibleStreaks never break visibly

No open text box

A child can't type into the open.

Taps, chips, drawings and voice notes onlyEverything is moderatedNo free-text input, anywhere

Adults see everything

Nothing about a child is hidden from their adults.

Teachers and parents view activity verbatimStated plainly in the consent noticeNo hidden data collection

Good questions

Who consents?

A school or a parent, an adult creates the account and grants consent before any child data exists.

What data, and who sees it?

Only learning activity, visible to the child's teacher and family. Strangers see nothing: there is no social surface at all.

Is there an AI?

A guide voice today; the Wonder companion ships later and is hard-railed to curated, curriculum content.

Compliance?

Built to India's DPDP child rules, with the same consent-first architecture behind everything above.

Safety isn't a setting. It's the architecture.

Talk to us about your school Explore every tool →