1. Home
  2. Introduction to Kids Web Services
  3. Parental consent and verification

Parental consent and verification

KWS is a parental consent management tool. It enables publishers to easily fulfill their obligation to obtain consent from a child user’s parent or legal guardian whenever their app or website requires personal information from the child. KWS also enables parents/guardians to manage their consent for apps or websites to process their child’s personal data.

With KWS, there are various ways for your app to obtain parental consent, dependent on the nature of your app’s permissions and the risk inherent in those permissions. For example, a parent can toggle permission for push notifications using ‘opt-out’ consent, whereas permission to access a kid’s GPS information generally requires parent verification.

The different types of parental consent are described below. To decide which type is appropriate for your app, contact your Implementation Manager.

This is the least stringent form of parental consent supported by the KWS platform. The app can process a child’s information without the explicit consent of the parent; however, it must notify the parent of its intent to process such information. The parent then has the right to opt their child out, stopping any further processing.

The steps in this flow are as follows:

  1. Parental email notification – When the app wants to collect personal information from a child, KWS triggers an email notification to the child’s parent, informing them of the app’s intent to collect that information.
  2. App processes data – If the parent does not opt their child out, the app continues to process the child’s data.
  3. Permissions management – Processing stops only when the parent explicitly revokes permission. The parent can revoke permission at any time.

Opt-in consent (sometimes referred to as ’email plus’ under COPPA) is the ‘intermediate’ form of parental consent, in terms of stringency. It is very similar to opt-out consent; the main difference is that the parent must give their explicit consent before the app can process their child’s data.

The steps in this flow are as follows:

  1. Parental email notification – When the app wants to collect personal information from a child, KWS triggers an email notification to the child’s parent, informing them of the app’s intent to collect such data from their child.
  2. Parent grants permission – The parent can give consent by following the call to action (CTA) within the email. By ticking a checkbox, the parent signifies that they grant the requested permission to their child. No further verification steps are required.
  3. App processes data – The app may now process the child’s personal information.
  4. Permissions management – At any point, the parent can revoke permission.

This is the most stringent form of parental consent on the KWS platform. This consent flow is similar to opt-in consent; the main difference is that the parent has to verify that they are an adult before they can grant the requested permission.

The step in this flow are as follows:

  1. Parental email notification – When the app wants to collect personal information from a child, KWS triggers an email notification to the parent, letting them know about the app’s intent to collect that information.
  2. Parent grants permission – The parent can give consent by following the CTA within the email. By ticking a checkbox, the parent signifies that they wish to grant the requested permission to their child.
  3. Verification – The parent is then asked to complete a one-time verification process to demonstrate that they are an adult. The method of verification varies, depending on the parent’s country of residence. See Parent verification methods below.
  4. App processes data – When verification is successfully completed, the app can process the child’s personal information.
  5. Permissions management – At any point, the parent can revoke permission.

Parent verification methods

Verification using a personal ID number

Parents who are resident in the USA, Brazil or Mexico can use their country’s personal ID register to verify their identity. The details they need to provide are as follows:

  • Brazil: CPF (Cadastro de Pessoas Físicas or Natural Persons Register) number and date of birth.
  • USA: Full name, last four digits of social security number, date of birth, and mailing address.
  • Mexico: Full name, mailing address and CURP (Clave Unica de Registro de Poblacion or Unique Population Registry Code) number.

Verification using a payment card

This method of verification is used for parents worldwide. (Parents in the USA, Brazil and Mexico can choose between personal ID verification and payment card verification.) Payment card verification is a one-time process in which the parent carries out a nominal transaction on their credit or debit card to prove that they are at least 18 years of age (the minimum age one can hold a payment card in most countries).

The steps in this flow are as follows:

  1. When prompted by KWS, the parent provides their payment (credit or debit) card number, CVV, and expiry date.
  2. A nominal sum is withdrawn from the parent’s account. Parents in the USA pay $1 (USD). Elsewhere, parents pay £0.30 (GBP).
  3. In the USA, the $1 charge is used to cover the costs of credit card verification if necessary. The remainder is sent to SuperAwesome’s Kid-Safe Fund, which invests in child-focused charities around the world. Elsewhere, the charge of £0.30 is refunded to the parent’s account within 7 days.

As an extra layer of rigour, this process leaves a paper trail (bank statements) that enables an adult to see if their child used their payment card to get this verification without their permission.

Example

  1. In this example, the parent is presented with two app features that require parental consent:
  1. The parent is asked to confirm that they are indeed the parent of the child:
  1. In the USA, parents are informed that the money ($1) drawn from their account will be given to a children’s charity:
  1. The parent provides their credit/debit card information and clicks Submit payment. The payment is processed instantly.
  1. When the transaction is successfully completed, the parent is returned to the Parent Portal’s permissions view where the permission is now enabled:

The parent can disable and re-enable this permission at any time without having to go through the CC verification process again.

Updated on 24/11/2020

Was this article helpful?

Related Articles