P
ProveIQ
← Back to Trust CenterConstitution §3.1.2

Under-18? A parent signs off first.

Not a checkbox. A verifiable consent link, a guardian dashboard, annual re-confirmation, and zero data processing until it all lines up.

1

Signup with DOB

Every registration captures date of birth. If under 18, we do NOT create a regular account — we create a pending_guardian_consent record and enter a blocked state where no data is processed.

2

Guardian details collected

We ask the under-18 candidate for a parent or guardian's email and phone. Both are validated (format + deliverability checks) before we go further.

3

Verifiable consent link sent

Our preferred path is Aadhaar DigiLocker — once we're approved as a MeitY partner, consent happens inside India's national digital identity platform. Our fallback is a signed e-consent link sent to the guardian's email + SMS, logged with IP, user-agent, and signature hash.

4

Zero processing until approval

Between signup and guardian approval, the platform accepts no submissions, does no AI evaluation, creates no public profile, and keeps the user state in pending_guardian_consent. If the guardian doesn't approve within 30 days, the pending record is auto-purged.

5

Guardian dashboard

Once approved, the guardian receives read-only access to a parallel dashboard: what their child has submitted, what scores they've received, which employers have seen the profile. They can revoke consent at any time — one click cascades to full deletion per DSR erasure flow.

6

Annual re-confirmation

Every 12 months, we email the guardian to re-confirm. Silence for 14 days after three reminder emails triggers account freeze until re-consent. No zombie under-18 accounts.

7

Leaderboards + public profile off by default

Under-18 accounts never appear on public leaderboards, never get public /p/<username> profiles, and are never in case studies — unless the guardian explicitly opts in per feature. Opt-ins are granular, not bundled.