Canva's general policy does not apply to children under 13 using its education product; a separate Children's Privacy Policy governs that context, and schools are described as the intermediary responsible for obtaining appropriate consent.
This analysis describes what Canva's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The school-as-intermediary model for child data consent is a common but legally sensitive structure under COPPA, and whether it satisfies verifiable parental consent requirements depends on the specific contractual terms agreed with educational institutions and applicable state student privacy laws.
Interpretive note: Whether the school-as-intermediary consent model satisfies COPPA's verifiable parental consent requirement in all circumstances depends on the specific terms of the institutional agreement, which is not reproduced in the general privacy policy.
Parents and guardians of children using Canva through school programs should be aware that the general privacy policy does not govern those accounts; the separate Children's Privacy Policy and the school's agreement with Canva determine what data is collected and how it is used. Schools acting as data intermediaries assume responsibility for consent under this structure.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
Not be Discriminated Against by us for exercising your privacy rights.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
"We have a separate Children's Privacy Policy that applies to our education product. We do not knowingly collect personal information from children under 13 without verifiable parental consent, except as permitted under applicable law in the context of our education product where a school or educational institution acts as the intermediary.Excerpt from Canva's Privacy Policy
REGULATORY LANDSCAPE: This provision implicates COPPA, which applies to online services directed to children under 13 and requires verifiable parental consent prior to collection of personal information.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The school-as-intermediary model for child data consent is a common but legally sensitive structure under COPPA, and whether it satisfies verifiable parental consent requirements depends on the specific contractual terms agreed with educational institutions and applicable state student privacy laws.
Parents and guardians of children using Canva through school programs should be aware that the general privacy policy does not govern those accounts; the separate Children's Privacy Policy and the school's agreement with Canva determine what data is collected and how it is used. Schools acting as data intermediaries assume responsibility for consent under this structure.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Canva.