Child Safety Standards

1. Zero-tolerance policy

The following are strictly prohibited on DuoLink:

• Posting, sharing or soliciting Child Sexual Abuse Material (CSAM / CSAE), including images, videos, text or links. • Grooming: contacting or cultivating a relationship with minors for purposes of sexual exploitation. • Soliciting sexual content from individuals under 18 years old, even with purported consent. • Impersonating a minor to deceive other users. • Sharing personally identifiable information (PII) of minors (doxxing). • Sexualized content depicting minors, including animated, drawn or AI-generated material.

Any account violating these rules is permanently banned without prior notice and its information preserved to cooperate with authorities.

2. Minimum age policy

DuoLink requires users to be at least 13 years old. During registration we collect date of birth and validate that the user declares to be 13 or older. We do not knowingly collect data from children under 13. If we detect or receive reports about an account created by a minor under 13, we delete it immediately.

Date of birth is visible only to the user themselves and is used exclusively for: (a) eligibility verification, (b) compliance with child protection laws (COPPA, GDPR-K, LGPD, Argentina Law 25.326), (c) applying age filters in matching.

3. Available reporting mechanisms

Inside the app: • "Report" button on every user profile with specific category "Exploitation or sexual content involving minors". • "Report" button on every chat message. • Instant block option that cuts all communication.

Outside the app: • Email: juangblade@gmail.com (target response time: 48 hours, prioritized for urgent cases). • Web form: https://duo.bladelinkarg.com/en/privacy (Contact section).

Reports are confidential. The reporter's identity is protected and not shared with the reported user.

4. Response protocol

Upon receiving a report of possible child abuse or exploitation we execute this protocol:

• Immediate triage (under 24 hours): human review of the report and the reported content/account. • Preventive suspension of the account during investigation if the case is prima facie credible. • Evidence preservation: we retain logs, messages and relevant metadata per legal requirements. • Immediate removal of content constituting CSAM. • Permanent ban (hard delete) of the posting account, with no possibility of recreation using the same email or identifiers. • Reporting to competent authorities (see section 6). • Notification to the reporter (without details about the accused) of action status.

5. Detection and prevention measures

• Human moderation by the administrative team (/dashboard/admin panel), able to review reports, flagged content and suspicious behavior. • Rate limiting and anti-abuse: automated controls to detect patterns of spam, grooming or mass fake account creation. • Uploaded image storage (avatars, banners) in Cloudinary, with format and size restrictions. Cloudinary offers additional inappropriate content detection tools which we can activate. • User-level block and report: any user can block or report any other at any time. • Periodic review of accounts with multiple reports. • Team education and continuous moderation system improvement following international best practices (INHOPE, NCMEC, Tech Coalition).

6. Cooperation with authorities

When we confirm content or behavior constituting child sexual abuse or exploitation, we report to relevant authorities by jurisdiction:

• NCMEC CyberTipline (United States): https://report.cybertip.org/ — for content with possible US nexus. • INHOPE hotlines (international): https://www.inhope.org/ — global network of reporting lines. • Argentine Federal Police – Specialized Cybercrime Prosecution Unit (UFECI): reporte.ufeci.gob.ar — primary jurisdiction as DuoLink is an Argentine company. • Ministério Público (Brazil) / denúncia.gov.br — for users in Brazil. • Relevant local authority in the reporter's or accused's jurisdiction.

We cooperate with formal law enforcement requests, providing preserved data under judicial order or legitimate legal process.

7. Applicable legal compliance

DuoLink complies with and respects:

• COPPA (Children's Online Privacy Protection Act, USA) — we don't collect data from children under 13. • GDPR-K (Article 8 of the General Data Protection Regulation, EU) — minimum digital consent age. • LGPD (Lei Geral de Proteção de Dados, Brazil) — article 14 on processing minors' data. • Argentina Law 25.326 (Personal Data Protection). • Argentina Law 26.388 (computer crimes, including child pornography). • UN Convention on the Rights of the Child. • 18 U.S.C. § 2258A (mandatory reporting to NCMEC for providers with US nexus).

8. Training and updates

DuoLink's moderation and development team stays current on child digital safety best practices through:

• Tracking Google Play and Apple App Store guidelines. • Subscribing to NCMEC and Tech Coalition alerts. • Annual review of this document and internal protocol. • Quarterly internal audits of the reporting system and its response times.