Canva's service is not intended for children under 13 in most countries, and Canva states it does not knowingly collect data from this age group; if such data is collected accidentally, Canva says it will delete it.
This analysis describes what Canva's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision operationalizes Canva's compliance framework with children's privacy regulations, including the Children's Online Privacy Protection Act (COPPA) in the U.S. and equivalent statutory regimes in other jurisdictions. It establishes the company's data handling obligations when it discovers non-compliant collection of minors' information.
While Canva states it does not knowingly collect data from children under 13, the policy does not describe a technical age verification mechanism, meaning the protection depends partly on accurate age representation by users at registration. Parents who discover a child has created a Canva account can request deletion of that account's data by contacting privacy@canva.com.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Our Service is not directed to children under the age of 13 (or a higher minimum age in certain countries), and we do not knowingly collect personal information from children under that age. If we learn that we have collected personal information of a child under the relevant age without parental consent where required, we will take steps to delete that information.Excerpt from Canva's Privacy Policy
REGULATORY LANDSCAPE: This provision engages COPPA (Children's Online Privacy Protection Act) in the United States, which applies to operators of websites or online services directed to children under 13 or that have actual knowledge they …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision operationalizes Canva's compliance framework with children's privacy regulations, including the Children's Online Privacy Protection Act (COPPA) in the U.S. and equivalent statutory regimes in other jurisdictions. It establishes the company's data handling obligations when it discovers non-compliant collection of minors' information.
While Canva states it does not knowingly collect data from children under 13, the policy does not describe a technical age verification mechanism, meaning the protection depends partly on accurate age representation by users at registration. Parents who discover a child has created a Canva account can request deletion of that account's data by contacting privacy@canva.com.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Canva.