YourFriendPal
Parent-mediated friendship coordinator — approved contacts, no public graph, scoped to carve out of 2025–26 youth-social regs.

Users & fit
Persona
Parents of kids 8–13 in US / UK / AU / CA metros, dual-income, 32–48, who want their kids to coordinate real friendships (playdates, classmate groups, activity carpools) without putting them on a public social graph. Adjacent user: the kid, whose interaction surface is intentionally constrained to approved contacts and adult-mediated flows.
Problem
Families today choose between two bad options: open kid-social (Roblox chat, Discord servers, Messenger Kids DMs) with publicness/moderation risk, or pure surveillance (Bark, Qustodio) which tracks but doesn't help coordinate. There's no purpose-built tool for the actual job parents are trying to do — helping their kid keep up with approved friends on a parent-governed graph.
Urgency
2024–2026 regulatory wave makes this category simultaneously more risky and more viable: COPPA 2.0 final rule (FTC, Jan 2025), Australia's under-16 social-media ban (Dec 10, 2025, A$49.5M fines), Florida youth-social statute, California AADC litigation resolved March 2026, UK Online Safety Act child-access duties. The regulators are targeting public-feed/addictive-feature products — a parent-mediated closed-graph coordinator sits in a defended carve-out across all three regimes.
Frequency
Weekly — playdate + activity coordination cadence. Not a daily-engagement product by design; daily-engagement metrics are a regulatory red flag in this category.
Figures marked (verify) or (estimated) come from training-data benchmarks; re-verify against live reports before external use.
Market
TAM
US 8–13 population ≈ 24.6M kids (US Census 2026, ~7.19% of US pop.) × ~$40 parent-subscription ARPU = ~$1B addressable household wallet. Global kid-safety + family-communication tools market ~$3–5B (estimated from Gabb reported scale, Pinwheel, Messenger Kids, Bark; no clean public TAM report exists because the category is fragmenting).
SAM
~$650M — English-speaking Western households (US + UK + AU + CA + IE) with kids 8–13 and at least one smartphone-native parent; the subset actively paying for kid-comm or kid-safety tools today (Gabb/Pinwheel/Bark/Qustodio scale implies 2–4M such households).
SOM (3-yr)
$35–60M ARR achievable in 3 yrs (estimated) — 500k–800k paying households at $60–$80/yr; concentrated in US first, then UK, then AU under the social-media-rules carve-out.
Revenue model
Subscription-only, family plan. No ads, no third-party ad-tech SDKs on any child-touching surface — mandatory given COPPA 2.0 and the Apple Kids Category rules. Revenue comes from parents; kids are never the buyer and never see monetization UI.
Pricing
Family plan $7.99/mo or $59/yr (2 parents + up to 6 kids, approved-contact slots). Comps: Messenger Kids free (Meta-subsidized), Gabb phone+software $9.99–$24.99/mo (device-bundled), Pinwheel $14.95–$29.95/mo (device-bundled), Bark Premium $14/mo (monitoring, not coordination). We're the software-only coordinator; pricing sits below device bundles, above monitoring tools.
ARPU
$48–$62/yr blended (estimated): heavy annual-plan mix (70%+) driven by back-to-school onboarding moments; churn concentrated at June (summer-break drop-off) and when a kid ages out at 13–14.
Landscape
Competitors
- Messenger Kids
Meta-owned, free, approved-contact DMs. Scale advantage but brand-risk for parents (Meta data-handling skepticism); no coordination features, just messaging.
- Gabb
~$30M+ ARR range (estimated from public traction); phone + software bundle, safelist contacts, no social feed. Device-bundled — can't unbundle for families that already own iPhones.
- Pinwheel
Similar device-centric safe-phone model. Strong parental dashboard. Again, bundled hardware is the moat — and the limiting factor.
- Bark Premium
~$14/mo, parent-monitoring focused (scans messages across platforms for harm). Adjacent, not direct — Bark watches, we coordinate.
- Qustodio / Norton Family
Parental control + screen time. No friendship graph, no coordination UX. Category-adjacent but solving a different problem.
- Google Family Link / Apple Family Sharing
Free, OS-level. Safety + screen time + purchase approvals. Neither builds a friendship graph; they're the infra on top of which we operate.
Our wedge
Two concrete differentiators: (1) a purpose-built parent-mediated friendship graph — parents approve contacts once and the kid then sees a clean 'who's free to hang out' surface with no public discoverability, no follower counts, no feed. No competitor is built around this job. (2) Distribution via schools and PTAs — we partner with schools for safe-contact onboarding at back-to-school, which avoids the legally-fraught paid acquisition paths and gives us trust-graph virality.
Moat
Compounding family-graph data and school/PTA trust relationships. Each family added increases the value for their approved-contact families (network effect without publicness). The school relationship is procurement-grade and hard to dislodge once instruments are adopted in admin workflows.
Sources
- FTC — COPPA Final Rule Amendments (Jan 2025)
- FTC — Policy Statement on Age Verification (Feb 2026)
- ICO — Children's Code (UK, updated 2024)
- Australia — Online Safety (Age-Restricted Social Media Platforms) Rules 2025
- National Academies — Social Media and Adolescent Health (2024 consensus)
- Nagata et al. — JAMA, addictive social-media trajectories (2025): RR 2.14 for suicidal behaviors on increasing-use trajectories
- JAMA Pediatrics — SMU + internalizing-symptoms meta-analysis (143 studies, ~1.1M adolescents, r=0.12 time, r=0.14 engagement)
Figures marked (verify) or (estimated) come from training-data benchmarks; re-verify against live reports before external use.
Current state
Stage
Under reviewM1
External legal opinion on product scope (coordinator-only vs optional kid-direct messaging layer); commit to coordinator-only for v1 based on deep-research recommendation.
M2
Closed alpha with 15 PTAs / 300 families in US; validate playdate-coordination loop; zero kid-facing public surface.
M4
US public launch with COPPA 2.0-compliant architecture (separate parental consent, data minimization, no 3P ad SDKs); paid subscription live.
M5
UK launch with full Online Safety Act risk assessment + Children's Code design audit; ICO-aligned documentation.
M6
Australia launch — explicit scope filing as messaging/coordination utility (carve-out from Age-Restricted Social Media Platforms Rules 2025).
CAC
$50–$120 blended (estimated) — paid acquisition is heavily restricted on kid-touching products, so distribution leans on school/PTA partnerships ($15–$40 effective CAC), referral/trusted-family ($0–$20), and limited Meta/TikTok parent-targeted ads ($80–$160). No retargeting on child-data signals (COPPA-blocked).
LTV
$120–$280 (18–24 month effective household life; age-out churn at kid age 13–14 is the structural ceiling; offsets by sibling add-ons).
Payback
8–16 months
Risk surface
Risks
- Regulatory scope-creep: if we ever add kid-to-kid direct messaging (even approved-contact only), exposure under Florida / Utah / future KOSA expands substantially — the product must stay disciplined about its coordinator-only scope.
- COPPA 2.0 enforcement: the FTC Sendit case (Sept 2025, 116k+ under-13 self-reports) signals regulators will use an operator's own telemetry against them — instrumentation design is a compliance surface.
- Distribution friction: paid acquisition channels with child-data restrictions are narrow; growth relies on school/PTA partnerships, which take 6–12 months to sign per district.
- Apple Kids Category constraints: no 3P analytics SDKs, no behavioral ads, no outbound links without gate — means we ship our own event pipeline and accept limited marketing signal.
- Platform substitution: Apple Family Sharing or Google Family Link could ship a coordination layer natively; defensive moat is the school/PTA trust graph, not the feature set.
- Moral-panic volatility: a single bad incident in any kid-social product (even a competitor's) can trigger emergency rulemaking that re-scopes the category mid-year.
Regulatory
- COPPA 2.0 (FTC, Final Rule Jan 2025): verifiable parental consent for any under-13 data collection; separate consent required for third-party disclosure; expanded personal-information definition now includes biometric + gov-issued identifiers. Architect for no 3P disclosure by default.
- FTC Age Verification Policy Statement (Feb 2026): narrow safe-harbor for general/mixed-audience operators using data *solely* for age determination, with prompt deletion. Means we can use light age signals at signup without triggering full COPPA scope.
- Apple App Store Kids Category guidelines: no third-party analytics, no behavioral ads, no outbound links without parental gate, required parental-gate patterns. Ship our own event pipeline; accept attribution-blindness.
- Google Play Families Policy (updated 2024): SDK allowlist, separate disclosures for kid-addressed surfaces, distinct data-collection-policy acknowledgements. Pre-flight every SDK against the Families Teacher Approved / Designed for Families requirements.
- UK ICO Children's Code (updated 2024): privacy-by-default, no nudge/dark patterns, age-appropriate design for any service likely to be accessed by children — full code-of-practice assessment required before UK launch.
- UK Online Safety Act 2023 ss.11–13: children's risk assessment, proportionate mitigations, age assurance if excluding children from features. Documented compliance required by Ofcom.
- Australia Online Safety (Age-Restricted Social Media Platforms) Rules 2025: under-16 block on covered platforms effective Dec 10, 2025; A$49.5M max penalty. Scope carve-out exists for messaging/coordination utilities — we must file within that carve-out pre-launch, not after.
- California AADC (NetChoice v. Bonta, 9th Cir. March 2026): Ninth Circuit vacated much of the broad injunction, leaving provisions on data-use and dark patterns in force. Data-minimization and no-dark-pattern design are prerequisite for CA operation.
- Florida HB 3 + state youth-social laws: statute targets algorithmic feed, infinite scroll, push notifications, public metrics, autoplay, livestream. Our coordinator architecture inherently avoids every enumerated feature — defensible position on statute-face.
- Sendit / Apitor FTC enforcement (Sept 2025): precedent that anonymous-messaging + known-underage telemetry + covert 3P SDK = material fines. Instrument with regulators' future FOIA requests in mind.
Figures marked (verify) or (estimated) come from training-data benchmarks; re-verify against live reports before external use.