How We Built a POPIA-Compliant App for Kids
Building software for children requires an extreme commitment to privacy and safety. When we started designing Kryzzo, our learn-to-earn screen time management app, we knew that compliance with South Africa's Protection of Personal Information Act (POPIA) and the international Children's Online Privacy Protection Act (COPPA) wasn't just a legal requirement—it was a moral imperative.
Our engineering team implemented zero-knowledge encryption for all family data, ensuring that not even our internal databases hold readable profiles of the children using the app. We opted for a localized data processing architecture that keeps biometric usage logs entirely on the parent's device rather than transmitting it to the cloud. The result is a product that parents can trust completely—an app that teaches children through educational games while maintaining an impenetrable privacy barrier.
Key technical decisions included using Supabase Row Level Security (RLS) policies to enforce strict data boundaries per family unit, implementing end-to-end encrypted sync channels for parent-child device pairing, and building a custom content moderation pipeline that filters YouTube content before it reaches the child's screen. Every line of code was written with the understanding that our youngest users deserve the highest standard of digital protection.
