Duolingo · Duolingo Privacy Policy · View original document ↗

Children's Privacy and COPPA Compliance

High severity Medium confidence Explicitdocumentlanguage Uncommon · 9 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Duolingo recorded 2 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Duolingo Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Duolingo states it does not collect personal data from children under 13 without parental consent, and will delete such data if collected accidentally, but parents must contact the company directly if they believe their child's data was collected without consent.

This analysis describes what Duolingo's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision operationalizes Duolingo's compliance with the Children's Online Privacy Protection Act (COPPA) by establishing procedures for parental consent verification, data retention restrictions for minors, and remediation pathways when unauthorized collection occurs. The requirement to delete discovered data and maintain a contact mechanism creates an ongoing operational obligation for the company.

Interpretive note: The adequacy of Duolingo's age verification and parental consent mechanisms is not fully described in the policy text, making it difficult to assess whether the stated COPPA compliance approach satisfies the FTC's verifiable parental consent standard in practice.

Recent Activity

This document changed recently

Medium May 27, 2026

The updated privacy policy no longer contains explicit language stating that Duolingo uses cookies to enhance user experience and analyze performance, or that it shares user information with social media, advertising, and analytics partners. The policy also no longer displays a 'Do Not Sell My Personal Information' button. These removals may affect the transparency of Duolingo's practices as disclosed in the policy document itself, though actual data practices may remain unchanged. Users should review the complete updated privacy policy to understand current disclosures about data collection and sharing.

View change record →
Medium Apr 21, 2026

The updated policy now discloses a new Math Tutor feature that processes audio through Apple for transcription; audio is deleted but text transcripts may be retained and shared with AI vendors. Duolingo also clarified that IP addresses may be retained longer than 30 days for paying subscribers specifically for payment processing and fraud prevention. The policy changed the Video Call feature from 'Duolingo offers' to 'Duolingo may offer', clarifying it is optional. You can disable FullStory and Session Replay activity recording using the Tracking toggle in app Settings.

View change record →

Change history

modified May 27, 2026

Removed mention of separate experience for younger users and family features management, and added specific contact email (privacy@duolingo.com) for parental concerns instead of proactive deletion language.

View full change record →

Consumer impact (what this means for users)

If your child under 13 uses Duolingo without parental consent being properly obtained, their personal data may have been collected; parents must proactively contact Duolingo to request deletion of that data. The policy places the burden of notification on parents rather than providing automatic protections.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    If you are a parent and believe your child under 13 has an account, email privacy@duolingo.com with your child's account information and request deletion of all associated personal data.

How other platforms handle this

Walmart Medium

Our websites and mobile applications are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without parental consent. If we learn that we have collected personal information from a child under 13 without parental consent, we will...

Squarespace Medium

The Services are intended for users who are 13 years of age or older. If you are under 13 years of age, you are not permitted to use the Services. By using the Services, you represent and warrant that you are 13 years of age or older. If you are between 13 and 18 years of age, you may only use the S...

Zillow Medium

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete such info...

See all platforms with this clause type →

Monitoring

Duolingo has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Duolingo does not knowingly collect personal information from children under 13 without parental consent. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information as quickly as possible. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at privacy@duolingo.com.

— Excerpt from Duolingo's Duolingo Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision directly engages COPPA, enforced by the FTC, which requires verifiable parental consent before collecting personal information from children under 13 in the US. The UK Children's Code (Age Appropriate Design Code) and GDPR Article 8 impose similar or more stringent requirements in the UK and EEA, including requirements that services likely accessed by minors apply high privacy standards by default. The FTC has brought enforcement actions against app operators for inadequate COPPA compliance, including consent verification failures. (2) GOVERNANCE EXPOSURE: High. Duolingo is a general-audience platform that is demonstrably used by children globally. The policy's 'does not knowingly collect' framing is a standard COPPA formulation, but the platform's design and broad appeal to younger learners may attract regulatory scrutiny regarding whether Duolingo has actual knowledge of child users that would trigger COPPA obligations beyond the stated 'unknowing' standard. The adequacy of age-gating mechanisms is a key question. (3) JURISDICTION FLAGS: United States (COPPA, FTC enforcement), United Kingdom (Children's Code, ICO enforcement), EU/EEA (GDPR Article 8, national supervisory authorities). Educational deployment of Duolingo in US schools may also trigger FERPA considerations and COPPA's school consent exception requirements. (4) CONTRACT AND VENDOR IMPLICATIONS: Schools and educational institutions deploying Duolingo should evaluate whether Duolingo operates as a school official under FERPA's school official exception and whether its data practices are consistent with that designation. Procurement teams should request evidence of COPPA compliance program documentation and assess whether third-party advertising integrations are disabled for verified child accounts. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that age-gating mechanisms are technically effective and not easily circumvented. The policy's reliance on parental self-reporting for remediation (contact us at privacy@duolingo.com) should be assessed against COPPA's requirement for proactive parental consent before collection. Advertising technology integrations should be audited to confirm they are not active for accounts associated with users under 13.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC is the primary enforcement authority for COPPA compliance, including verifiable parental consent requirements for apps collecting data from children under 13.
    File a complaint →
  • Doe
    If Duolingo is used in educational settings, FERPA and student privacy considerations may apply, with the Department of Education's Student Privacy Policy Office overseeing compliance.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
COPPA
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
UK GDPR
United Kingdom

Provision details

Document information
Document
Duolingo Privacy Policy
Entity
Duolingo
Document last updated
May 5, 2026
Tracking information
First tracked
May 10, 2026
Last verified
May 10, 2026
Record ID
CA-P-002766
Document ID
CA-D-00084
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
0e272c40f8dab9b0ecb7e9d9d71e56883e23c7aa9adb6049c8631ca5c9147456
Analysis generated
May 10, 2026 12:08 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Duolingo
Document: Duolingo Privacy Policy
Record ID: CA-P-002766
Captured: 2026-05-10 12:08:13 UTC
SHA-256: 0e272c40f8dab9b0…
URL: https://conductatlas.com/platform/duolingo/duolingo-privacy-policy/childrens-privacy-and-coppa-compliance/
Accessed: June 17, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Duolingo's Children's Privacy and COPPA Compliance clause do?

This provision operationalizes Duolingo's compliance with the Children's Online Privacy Protection Act (COPPA) by establishing procedures for parental consent verification, data retention restrictions for minors, and remediation pathways when unauthorized collection occurs. The requirement to delete discovered data and maintain a contact mechanism creates an ongoing operational obligation for the company.

How does this clause affect you?

If your child under 13 uses Duolingo without parental consent being properly obtained, their personal data may have been collected; parents must proactively contact Duolingo to request deletion of that data. The policy places the burden of notification on parents rather than providing automatic protections.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 9 platforms. See the full comparison.

Is ConductAtlas affiliated with Duolingo?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Duolingo.