Amazon Appstore Child-Directed Apps · Child-Directed App (COPPA) Policy, retrieved 2026-08-13

The Amazon Appstore’s Child-Directed App (COPPA) Policy is short and, in two places, stricter than the law it is named after. Amazon treats a multi-audience app as child-directed unless the developer confirms children are not using it, and defines children as under 13 — or under 16 in the European Union, Australia and Japan — so a programme scoped to COPPA alone is under-scoped for this store in three markets. Ads may not be served through any Amazon Advertising programme or Amazon Associates to a known child or in a child-directed area, and parental consent does not lift that; an app directed only at children may not use those programmes at all. Keel models the policy requirement by requirement, including the SDK suitability rules. Amazon’s separate Advertising ID, User Data Privacy and Appstore Advertising policies are different documents and are not modelled here.

8

requirements tracked

Premium

Access

Add-on from $39/mo

Children’s Privacy: COPPA, Google Play Families, Amazon Appstore Child-Directed Apps, Apple App Store Kids Category are one add-on at $39/mo, bought through COPPA, and together they count as one framework against your plan’s allowance.

Start free with Amazon Appstore Child-Directed Apps See pricing

Scope

How much of the standard Keel models

Models its declared scope in full

Keel authors every leaf requirement in the scope declared below — all 8 of them, with nothing inside that scope left out. A test fails the build if the authored count and the declared count ever diverge, so this framework cannot quietly lose requirements after the fact.

Authored in Keel: 8 requirements
In Keel’s scored scope: 8 leaf requirements

Keel publishes this for every framework it ships, complete or not, so a readiness percentage can be read against a denominator you can see. Compare every framework

Who it is for

Who needs Amazon Appstore Child-Directed Apps?

Studios publishing a child-directed app to the Amazon Appstore
Multi-audience apps that have not positively confirmed children are not using them
Teams monetising a child-only app, where Amazon’s own ad programmes are off the table entirely

What Keel does

How Keel helps with Amazon Appstore Child-Directed Apps

The determination, content, legal, advertising and SDK duties as a scored control set
Crosswalked to COPPA, which the policy leans on for most of its substance and which Keel authors separately
A retrieval date carried alongside Amazon’s own last-updated date, and a monthly re-check of the published page

Collect once, comply everywhere

Amazon Appstore Child-Directed Apps shares canonical controls with Google Play Families, Apple App Store Kids Category and COPPA. Implement one of those controls and it counts toward every framework it satisfies, so adding Amazon Appstore Child-Directed Apps rarely means starting from scratch.

Shares canonical controls with

ISO/IEC 27001 no shared canonical controls
CIS Critical Security Controls no shared canonical controls
PCI DSS no shared canonical controls
SOC 2 no shared canonical controls
SOX (Sarbanes-Oxley) Section 404 no shared canonical controls
NIST Cybersecurity Framework no shared canonical controls
NIST SP 800-53 no shared canonical controls
NIST SP 800-171 no shared canonical controls
HIPAA no shared canonical controls
GDPR no shared canonical controls
COPPA shares canonical controls
Google Play Families shares canonical controls
Apple App Store Kids Category shares canonical controls
PIPEDA no shared canonical controls
ISO 9001 no shared canonical controls
AI Governance Essentials no shared canonical controls
ISO/IEC 42001 no shared canonical controls
NIST AI Risk Management Framework no shared canonical controls
EU AI Act no shared canonical controls
ESG Essentials no shared canonical controls
US Employment Law - Federal Baseline no shared canonical controls

A framework is lit when at least one canonical control satisfies both Amazon Appstore Child-Directed Apps and that framework. Unlit means none of them do — an absence, not a judgment about that standard. 3 of 21 are lit here.

Other frameworks: ISO/IEC 27001 · CIS Critical Security Controls · PCI DSS · SOC 2 · SOX (Sarbanes-Oxley) Section 404 · NIST Cybersecurity Framework · All frameworks