Child Safety Standards

1. Our commitment

We are a small team running a private messenger. We designed YumeBee so strangers cannot reach you unsolicited, we set a minimum age, we act on every report we receive, and we cooperate with law enforcement and with child-protection organisations such as NCMEC.

2. What is prohibited

Our Terms & Conditions forbid unlawful use of the Service. For the avoidance of any doubt, the following are specifically and permanently banned, whether the recipient consented or not, and whether the content is real, edited, drawn, or AI-generated:

• CSAM — creating, requesting, sending, receiving, storing, or linking to sexual imagery of anyone under 18.
• Grooming — building a relationship with a minor to sexually exploit or abuse them, on or off the app.
• Sexualisation of minors — sexual comments, roleplay, or requests directed at or depicting a minor.
• Sextortion — threatening to expose intimate images to coerce a minor into sending more, into money, or into contact.
• Solicitation and trafficking — arranging, advertising, or facilitating sexual contact with, or the trafficking of, a minor.
• Facilitation — advertising, trading, or signposting the above, including using YumeBee to move such contact to another platform.

These apply to messages, photos, videos, stickers, group names, display names, usernames, and profile photos.

3. Minimum age

YumeBee is for people aged 13 and over. Where local law sets a higher minimum age for using a service like ours or for consenting to data processing, that higher age applies. We ask for date of birth during signup and refuse accounts below the threshold.

If you believe an account belongs to someone under the minimum age, tell us at admin@yumebee.app and we will delete it.

4. How the app limits risk

Child safety is partly a product decision, not only a moderation one.

• No strangers. There is no public feed, no nearby-people list, no random matching, and no way to message somebody who has not accepted you. A friend request must be accepted before a single message can be sent.
• No discovery of minors. We publish no directory, no follower counts, and no profile pages. There is nothing to browse and nobody to find.
• One device per phone number. Accounts are tied to a verified phone number, and one number can be signed in on exactly one phone. Throwaway accounts cost the abuser a real SIM each time.
• Blocking and reporting are one tap apart. Any user can be blocked from their profile or the chat, and reported from four places — including the preview screen of someone who has only sent a friend request, so a stranger can be reported without ever being accepted.
• Nothing persists. Messages and media disappear after 24 hours, and photos and videos are view-once, which limits how far material can spread.

5. How to report CSAE

Reporting is built into the app. Every report is read by a person, not a bot, and the account you report is never told.

1. Open the report sheet From any of four places, whichever you reach first: the person's profile → Report; long-press one of their messages → Report (this pins the report to that specific message); Group Info → tap the member → Report member; or their preview screen — which means you can report someone who has only sent you a friend request, without accepting them.
2. Choose "Child safety" It is the first option on the list, and it covers sexual content involving a minor, grooming, and sextortion. Choosing it routes the report to our escalated queue rather than the general one.
3. Describe what happened Add anything that would help a reviewer. Please do not attach the imagery itself — describe it. Because the conversation is end-to-end encrypted, what you type is all a reviewer will see, so detail genuinely matters here.
4. Send The person is blocked at the same time unless you turn that off. You do not need to do anything else.

You can also email us instead, or as well. The report sheet itself offers the address, and it is the right route if you do not have an account, have already uninstalled, are reporting on someone else's behalf, or simply want a person on the other end. Write to admin@yumebee.app with the subject CSAE report and whatever you know: the username or display name, the phone number if you have it, the group name, and roughly when it happened.

If a child is in immediate danger, contact your local emergency services first — see §10 for reporting lines that specialise in this. And because YumeBee content is end-to-end encrypted and expires in 24 hours, report as soon as you can: the sooner we hear, the more account-level evidence still exists.

6. What we do with a report

• Acknowledge within 24 hours and begin review immediately.
• Suspend first when a child may be at risk. We suspend the reported account while we review, rather than after.
• Terminate permanently on confirmation: the account, its keys, its device binding, and its ability to re-register are removed.
• Preserve and hand over. We preserve the account-level records we hold — registration data, phone number, device and timing metadata — and provide them to law enforcement on valid legal process, and to NCMEC where a report is filed.
• Report onward. Apparent CSAM is reported to NCMEC's CyberTipline and, where required, to the relevant authority in the jurisdiction concerned.
• Remove content we can reach. Server-side stored media for the account is purged; unencrypted, server-visible fields (usernames, display names, group names, profile photos) are removed directly.

We do not require the reporter to prove their case before we act, and a reporter is never identified to the account being reported.

7. Encryption and its limits — stated plainly

YumeBee messages, photos, and videos are end-to-end encrypted with the Signal protocol. We cannot read them, so we cannot scan them. We will not claim a detection capability we do not have, and we will not weaken encryption for every user in order to claim one.

What that leaves us, and what we actually use:

• In-app user reports — the primary signal, as described above. Reports carry the reported account, the conversation, and (from a long-pressed message) the specific message, so a reviewer knows exactly what is meant even though we cannot read it.
• Server-visible content — usernames, display names, profile photos, and group names are not encrypted and are actioned directly when reported.
• Account-level behaviour — patterns visible without reading content, such as mass friend requests, rapid re-registration, or requests repeatedly rejected and reported. These can trigger rate limits, suspension, or a ban.
• Legal process — we respond to valid orders with the metadata we hold. We hold no message content to give, because none exists on our servers in readable form.

8. Legal compliance

YumeBee is operated by YuMe Network Private Limited, incorporated in India. We comply with applicable child-protection law wherever the Service is offered, including but not limited to:

• The Protection of Children from Sexual Offences (POCSO) Act, 2012 and the Information Technology Act, 2000 (including §67B) and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
• US reporting obligations to NCMEC under 18 U.S.C. §2258A for apparent CSAM we become aware of.
• COPPA and equivalent minimum-age and children's-data rules, via our 13+ age floor and date-of-birth check at signup.
• Google Play's Child Safety Standards policy and the CSAE requirements it sets for social apps.

Where a law requires us to act faster or disclose more than this page describes, the law wins.

9. Designated point of contact

This address reaches a person able to speak to our CSAM prevention practices and compliance, and is the channel for regulators, law enforcement, platforms, and child-protection organisations as well as users. Legal process and data requests may also be sent to legal@yumebee.com.

10. Where to get help

If you are a young person being pressured, or a parent or carer worried about a child, these organisations help directly and are independent of us:

• Immediate danger — your local emergency number.
• India — Childline 1098, or the National Cyber Crime Reporting Portal at cybercrime.gov.in.
• United States — NCMEC CyberTipline at report.cybertip.org or 1-800-843-5678.
• United Kingdom — the Internet Watch Foundation at report.iwf.org.uk.
• Getting intimate images of yourself taken down (if you are under 18, or were when they were taken) — Take It Down.

Related reading: our Terms & Conditions, Privacy Policy, and the Usage Guide — which explains blocking, groups, and every privacy setting in the app.