Implement safeguards at the product’s design stage and throughout its lifecycle, ensuring the highest level of privacy and data protection by default, considering the autonomy and progressive development of minors, in line with their best interests;

Clearly inform all users about the product’s or service’s age classification policy at the time of access;

Provide clear, accessible information to children, adolescents, and their guardians to enable informed choices regarding any less protective settings;

Refrain from processing personal data of minors in ways that cause, facilitate, or contribute to violations of their privacy or any other legally protected rights, taking into account the principles of the Brazilian LGPD and the “best interest of the child and adolescent”;

Conduct a risk management of their resources, functionalities, and systems, as well as assess the impact on the safety and health of minors;

Evaluate content to ensure compatibility with age classifications;

Offer systems and processes designed to prevent minors from encountering, through the product or service, illegal or pornographic content, as well as other content clearly inappropriate for their age group, according to age classifications and applicable law;

Adopt proportionate, auditable, and secure age verification mechanisms, banning self-declaration as a means of age verification;

Provide users with reporting mechanisms regarding violations of the rights of children and adolescents;

Promptly remove content violating children’s rights, including sexual abuse, exploitation, kidnapping, and grooming detected in their products or services, directly or indirectly, and notify the content to the competent authority; and

Retain backend data relating to the content violating children’s rights, including the data of the user responsible for the content and metadata related to it, for at least 6 months.
​