Guardian / Child Data Privacy & Consent Notice
Version: 2026-10-15-review-3 · Effective date: October 15, 2026
Under-18 rule
Soteria requires guardian consent for consent-dependent processing of a Person’s data when that Person is under 18. Consent must be specific, explicit, recorded, versioned, withdrawable and auditable. An Organization must identify and verify the actual guardian relationship; Soteria never guesses it from a name, email, membership or free-form relationship label. Creating a managed Person, accepting Account Terms, or an administrator taking an ordinary action does not grant guardian consent.
What a specific grant must explain
A grant must identify the child, verified guardian, responsible Organization, purpose and necessary data categories. Community records can include contact/profile information, membership, attendance, activity, reservation details and photos, potentially revealing sensitive religious participation. Photos, public sharing and additional purposes require their own appropriate scope; no blanket permission is implied by this notice.
Verification and evidence
The intended direct flow is: the Organization identifies the guardian relationship; a secure request reaches the guardian; the guardian reviews the notice and purpose and explicitly grants consent; Soteria records the exact version, locale and time. That secure self-service verification/request flow is not yet implemented. Where self-service is impractical, an authorized Organization profile editor may explicitly record verified offline consent for an existing child. The record must identify child, guardian, Organization, relationship, purpose/data categories, actual grant time, exact notice version, locale, offline method, evidence reference and recording Account/time. It is labeled recorded offline evidence, not direct guardian Account acceptance. Do not supply identity scans unless there is a defined need and protection policy. A linked relationship record alone is not proof of guardianship.
Current enforcement and missing evidence
Where authorized scoped DOB information reliably indicates under 18, the profile shows consent required/evidence unavailable until a matching current grant exists. Unknown or conflicting age is shown for review, not assumed adult. Existing child data is not automatically consented or purged. Guarded profile-value writes require the Organization-profile purpose and profile category; withdrawal or an incompatible new notice requirement blocks subsequent guarded writes. Ordinary new-minor creation/import without an existing matching grant is blocked; a dedicated consent-backed intake remains to be built. This is a limited boundary: independent media, location, attendance, reservations, communications, AI upload, export and offline paths still require comprehensive processing-gate work. Organizations must stop consent-dependent processing after withdrawal and cannot treat a missing technical gate as permission.
Withdrawal and requests
Contact the responsible Organization and [email protected] to withdraw a specific consent, correct information, request access/deletion where applicable or raise concerns. State the child, Organization and purpose without sending unnecessary sensitive documents. Withdrawal is recorded without erasing the evidence of the earlier grant and requires review of affected processing. It does not retrospectively undo lawful processing or instantly erase recovery copies.
Privacy requests
Request access, correction, deletion where applicable, consent withdrawal, or raise a privacy concern. Include the relevant Organization and a safe reference; never send passwords or recovery codes. We may verify identity and coordinate with the responsible Organization.
[email protected]