Teen Safety & Privacy

Your teen's chats with their AvA stay between them and the AI. Parents never see the words. Schools never see the words. We don't read them, store them in plain text, or share them with third parties for marketing. After 90 days they auto-delete from our systems entirely.

What parents do see: a monthly summary showing how often their teen practiced and which milestones they hit. Frequency, not content. Your teen can disable even this from their dashboard at any time — they own the visibility decision.

Every message sent and received is screened across 9 safety domains: self-harm, violence, sexual content, predatory grooming, illegal activity, hate, eating-disorder triggers, substance abuse and crisis indicators. Anything matching is blocked before it reaches the teen, with the trained-human Crisis Pathway triggered automatically when warranted.

Our AI Practice Partners (AvAs) are tuned with stricter guardrails than any general-purpose chatbot — no romantic content, no graphic descriptions, no "do anything" prompts. They never escalate, always redirect, and always remind your teen they can talk to a human.

Every screen has a Crisis button. One tap connects your teen to a trained mental-health professional within minutes — anonymously if they wish. We're not a clinical service; we triage, support, and connect them onward to local resources where it matters.

Crisis sessions are not visible to parents by default. We respect your teen's autonomy — but when there is imminent risk to life, we follow the duty-of-care protocols expected of any safeguarding-led service.

For school deployments: school admins see aggregate, anonymised wellbeing indicators across the cohort — never individual student conversations. They see "12 students flagged a low-mood day this week" but never which 12 or what they said.

For corporate (parent-as-employee) deployments: HR sees adoption and engagement metrics only. Never individual employee or family content. Aggregated, never personalised.

We carry SOC 2 Type II readiness and full GDPR + UK Age Appropriate Design Code compliance — both audited annually.

Hearts, badges, achievements, NFTs, embroidered patches — they are owned by your teen, not us. They can keep them, gift them to a friend, redeem physical badges to be mailed to your home, or save them with HiBFF for later. This isn't loyalty data we monetise — it's the digital proof of the work they did.

• We don't sell or share teen data with advertisers.
• We don't allow ads of any kind in the teen experience.
• We don't read conversations (except automated safety screening).
• We don't keep messages longer than 90 days.
• We don't expose teen identity outside their own household.
• We don't allow strangers to contact your teen — peer features are opt-in, school-mediated, and moderated.

• Request a full export of your teen's account data at any time.
• Delete your teen's account and all associated data with one click.
• Pause your teen's subscription for 90 days (no billing) or indefinitely.
• Receive monthly summary reports — frequency only, never content.
• 30-day full refund window on any paid plan.
• Direct line to safeguarding via safety@hibff.com.