COPPA is the US Children's Online Privacy Protection Act. It requires a service to get a parent's consent before collecting personal information from a child under 13, to say plainly what it collects, and to let parents review and delete it.
In NestBoard a parent is the one who adds the child, so a parent is the one who gives that consent. How we ask depends on where you add them. During first-time setup, a notice appears as soon as you put a child on your list, saying that by adding a child you confirm you are their parent or legal guardian and consent on their behalf. That one is a notice rather than a checkbox, so it does not hold up the step, and the consent is recorded when the profile is created. On the Family page afterwards, adding or editing a child lets you mark that the child is under 13. When that is marked, the confirmation becomes a checkbox you have to tick, and the profile will not save without it. NestBoard does not work out a child's age by itself, so that marker is yours to set. Wherever consent is given, we store the date it was given.
What we hold about a child depends on what the parent sets up. It can include a display name, a color and initials, a birthday if the parent enters one, a photo if the parent adds one, and the chores, events, routines, allowance, meals, or medications assigned to them.
If the parent has given the child their own sign-in, we also hold that email address, the scrambled password, and the ordinary technical records that come with using any app, such as sign-in times and the device token needed to deliver a notification.
If the household has connected Alexa, a voice profile identifier for a child may be stored only after someone says "I'm ..." with that child's name on an Echo. It is an opaque code Amazon assigns to the voice, never a recording, and we receive no audio. It only lets NestBoard know which family member is speaking, and a child recognized this way can listen but cannot change anything by voice. A parent can disconnect Alexa at any time in Settings, which deletes every stored voice identifier for the household immediately.
A parent can withdraw that consent at any time. Section 7 explains exactly how.