Figma revised its children's privacy protections to restrict child access to educational contexts only and expanded the scope of child age definitions across jurisdictions. The updated policy now requires children to use the Services only through Figma for Education Enterprise agreements with their educational institution, and explicitly prohibits using children's personal information to train AI services, for marketing, or for third-party advertising. The policy also clarified that service providers offering AI services are prohibited from using data inputs or outputs to train or improve their models.
Schools and educational institutions: Schools cannot allow students to use Figma without a formal agreement in place.
Service providers offering AI services: AI service providers cannot use data that flows through Figma's AI features to improve their own AI models.
Figma (as data processor): Figma will not use children's data for AI training, marketing, or targeted advertising under any circumstances.
Parents: Parents now have a narrower right to contact Figma about unauthorized child data collection; the right applies only when no institutional agreement exists.
The updated policy restricts children's access to Figma to educational contexts only, requiring an agreement between the school and Figma for any child to use the platform. The revised terms explicitly state that Figma does not use children's personal information to train AI services, for marketing purposes, or to enable third-party advertising tracking. Parents can contact Figma if a child provides personal information outside an educational agreement, though the policy now narrows this right to situations where no institutional agreement exists.
→ If you are a parent or guardian, review Figma's Supplemental Privacy Policy for Children (Exhibit A) to understand how your child's data is processed.
→ If your child uses Figma outside of a school agreement, contact Figma at privacy@figma.com to report unauthorized data collection.
→ If you are an educational institution, verify that your Figma for Education Enterprise agreement is current and complies with the updated policy.
Children may only use the Services through a Figma for Education Enterprise agreement with their educational institution.
Figma does not use children's personal information to train, fine-tune, or develop AI services, and prohibits service providers from doing so.
Figma does not use children's data for marketing or targeted advertising and does not permit third-party advertising partners to collect children's data.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Wording edits to this record that do not change what it claims. Changes to a claim are published as corrections.
Figma expanded its children's privacy framework to align with COPPA (US), GDPR (EU), and California age-of-digital-consent rules by restricting child access to institutional agreements and prohibiting AI training on child data. The policy now explicitly …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-002410.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Get alerted when this policy changes again, including what changed and why it matters.