Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The policy states that Acorns' general services are not directed at children under 13 and that the company does not knowingly collect personal information from such children, while separately acknowledging that the Acorns Early product involves accounts established by adults for minor beneficiaries.
This analysis describes what Acorns's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy's acknowledgment that Acorns Early involves minor beneficiaries, alongside the general COPPA disclaimer, creates a compliance distinction requiring assessment of whether and what data is collected in connection with minor beneficiaries through that product and whether parental consent mechanisms satisfy COPPA's requirements.
Interpretive note: The document does not fully specify what data is collected about or associated with minor beneficiaries through Acorns Early, and whether COPPA obligations are triggered by that product's data practices requires a fact-specific assessment beyond the reviewed policy text.
The updated policy removes explicit language describing how data flows when users sign in via Apple or Google, including what information those services share with Acorns and how it is used. Previously, the policy stated that Acorns receives information such as name and email address through third-party sign-in services solely to manage accounts and provide services. The revised language also shifts the AI chatbot from an optional feature users 'may access' to a stated service Acorns 'uses' to direct users to internal articles. Users no longer have a published explanation of third-party sign-in data practices in the privacy notice, though the terms suggest data shared through third-party services remains subject to those providers' terms.
View change record →Added commitment to delete minor's data if accidentally collected, replaced 'may collect' language with more neutral description of Acorns Early as accounts 'established by adults for the benefit of minor beneficiaries.'
View full change record →Under the general terms, children under 13 are stated to be outside the intended user population for standard services, and the policy commits to deleting personal information collected from such children upon discovery. The Acorns Early product, which involves minor beneficiaries, is acknowledged separately, but the policy excerpt does not fully specify what data is collected about or in connection with minors through that product or what consent mechanisms apply.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
Monitoring
Acorns has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as soon as possible. The Acorns Early product involves accounts established by adults for the benefit of minor beneficiaries.Excerpt from Acorns's Privacy Policy
1) REGULATORY LANDSCAPE: COPPA, enforced by the FTC, requires verifiable parental consent before collecting personal information from children under 13 for services directed to that age group. The FTC's COPPA Rule specifies notice requirements, parental consent mechanisms, data retention limits, and security obligations for covered operators. The Acorns Early product's involvement of minor beneficiaries requires a fact-specific assessment of whether COPPA obligations are triggered by the nature and extent of data collected about or associated with those minors. 2) GOVERNANCE EXPOSURE: Medium. The standard COPPA disclaimer covers general platform services, but the Acorns Early product's structure, involving adult account holders managing accounts for minors, requires specific analysis of whether data associated with minors is collected and processed in a manner that triggers COPPA obligations beyond the general disclaimer. 3) JURISDICTION FLAGS: COPPA applies federally across all US jurisdictions. Some states have enacted additional children's privacy laws, including California's Age-Appropriate Design Code (AADC), which may impose design and data minimization obligations for services likely to be accessed by minors regardless of whether those services are directed at children. 4) CONTRACT AND VENDOR IMPLICATIONS: Service providers processing any data associated with Acorns Early accounts involving minor beneficiaries should be assessed for COPPA-compliant data handling practices. Vendor agreements should address restrictions on data use related to accounts with minor beneficiaries. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should conduct a specific data mapping exercise for the Acorns Early product to document what data is collected, how it is used, and whether any of that data is associated with minor beneficiaries in a manner that implicates COPPA. Parental consent mechanisms, if applicable, should be reviewed against FTC COPPA Rule standards for sufficiency.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
The policy's acknowledgment that Acorns Early involves minor beneficiaries, alongside the general COPPA disclaimer, creates a compliance distinction requiring assessment of whether and what data is collected in connection with minor beneficiaries through that product and whether parental consent mechanisms satisfy COPPA's requirements.
Under the general terms, children under 13 are stated to be outside the intended user population for standard services, and the policy commits to deleting personal information collected from such children upon discovery. The Acorns Early product, which involves minor beneficiaries, is acknowledged separately, but the policy excerpt does not fully specify what data is collected about or in connection …
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Acorns.