Children's Privacy Policy
This is the first version of Bank of America's Children's Privacy Policy that we have on file (last updated June 2026), so the whole document is new rather than an edit of an earlier one. It explains, in kid-friendly language, what the bank collects about children (0-12) and teens (13-17), why, how long it keeps it, and which kinds of companies it shares it with. It also lists privacy rights for kids, teens, and parents, plus how to use them. Nothing in it takes away a right that was previously promised, but a few things are worth knowing: the bank can collect device location, cookies, and online activity from minors; it shares data with affiliates, analytics companies, ad-free 'personalization' vendors, connected apps, and any company it merges with or sells to; deletion is only done 'when the law allows'; and asking to stop collection or delete data can force the account to be closed.
Policy can change with no direct notice
Bank of America can update this policy whenever it wants, and the only signal is the date printed at the top of the page. Parents are not promised an email or alert, so they would have to check the page themselves to notice new data practices.
“we will need to update this page from time to time. The date at the top will show you the last time we made an update”
What you can do — Bookmark the policy page and check the 'LAST UPDATED' date a couple of times a year.
Sensitive categories like race and disability may be collected
The collection chart includes sensitive details such as race, disability information, and political views. The bank says it only asks for these when the law requires it, for checks like anti-money-laundering rules, which limits the risk, but it is still sensitive data held about a minor.
“Things like race, disability info, or political views (only asked when required by law)”
Kids' and teens' data goes to affiliates, analytics firms, and connected apps
The policy says data is only shared with companies that need it for the service, but the chart at the bottom is broad. It includes the bank's own affiliate companies (contact info, IDs, account activity, online activity), analytics companies that get online activity and preferences partly to 'personalize things,' companies that track website and app activity, and outside apps like Venmo or Mint if the account is linked. That is a wide circle of companies seeing a minor's financial and browsing behavior.
“Companies that study data ("analytics companies")”
What you can do — Ask the bank to stop non-essential sharing and tracking for your child by emailing individualrightsrequests@bofa.com or calling 888.341.5000, and avoid linking the child's account to third-party money apps.
A child's data can transfer if the business is sold or merged
If Bank of America sells part of its business or merges with another company, whatever information is needed for that deal can be handed over, including contact and account details. Families do not get a say in who ends up holding the data.
“Companies we merge with or sell to”
Device location, cookies, and online activity collected from minors
The bank can see where a child's phone is, their phone number, card numbers, what they click in the app, and it plants cookies and persistent identifiers that follow the device until removed. Some of those cookies remember spending habits and can carry the child's name or state. That is a lot of tracking on a person under 18.
“In some cases, we may use Persistent Identifiers to help us do these types of things.”
What you can do — Read the linked Cookie Guide and turn off any non-essential cookies, and check the app's location permission on the child's phone.
No fixed deletion timeline; deletion only 'when the law allows'
There is no set period after which a child's data is erased. The bank keeps it as long as state and banking law permit, and even a parent's delete request is honored only when the law lets it. In practice, records tied to a bank account are often kept for years after the account closes.
“we only keep your information for as long as the law in your state allows”
What you can do — Submit a written deletion request when the account closes and ask the bank to confirm what it kept and for how long.
Asking to delete data or stop collection can close the child's account
Using the right to object or the right to delete may force the bank to shut the account down. Revoking COPPA consent for an under-13 automatically removes the online profile and closes the account. So a family exercising privacy rights may lose the banking service as the price.
“Please note that deleting some information may mean we have to close your account.”
What you can do — Before filing a deletion or objection request, ask the bank in writing which specific data can be removed without closing the account.
| 1 | **LAST UPDATED: June 2026** | |
| 2 | ||
| 3 | **This Children's Privacy Policy ("Policy") was created to help children, teens and parents understand how Bank of America companies that use the name Bank of America collect, use, store and share Children's information in accordance with the Children's Online Privacy Protection Act ("COPPA") and applicable state laws. Here we will walk you through our Policy along with key terms you will want to know.** | |
+ ADDEDA separate privacy policy for kids and teens now exists Bank of America published a policy that covers anyone under 18 who uses its banking, credit card, app, or online banking services. It is written for children and teens to read with a parent, and it sits alongside the bank's regular consumer privacy notices. | ||
| 4 | ||
| 5 | **Parents** this outlines our Privacy Policy for Children and Teens under 18 years old, providing key information that can help you understand how we protect their data when using our Services. We encourage you to review this Policy with your Child and/or Teen. We have included a Privacy Rights ("Rights") section which outlines the Rights afforded to Children and Teens, including instructions on how you can exercise your Rights as a Parent. This Policy should be read in conjunction with the additional notices on our [Consumer Privacy Page](https://web.bankofamerica.com/en/privacy) (including our [Online Privacy Notice](https://web.bankofamerica.com/en/privacy)), all designed to help you understand how Bank of America manages privacy. | |
| 6 | ||
| 7 | **Children and Teens,** we created this Policy to help you learn about data privacy and explain how we keep your information safe when using our Services. Some words or topics might be confusing, so we suggest that you read it with an adult in case you have any questions. | |
| 8 | ||
| 9 | ## **What is a Children's Privacy Policy?** | |
| 10 | ||
| 11 | Our Children's Privacy Policy explains important things Bank of America wants you to know when using our Services. Because laws sometimes change, we will need to update this page from time to time. The date at the top will show you the last time we made an update. | |
+ ADDEDPolicy can be updated by changing the date at the top Updates are announced only by changing the 'last updated' date on the page. There is no promise of advance notice to families. | ||
| 12 | ||
| 13 | ## **What terms will help me understand this Policy?** | |
| 14 | ||
| 15 | - **Account -** A record where the services or products we offer are kept and tracked, such as bank or credit card information/activity | |
| 16 | - **Child or Children -** Anyone 0-12 years old | |
+ ADDEDPlain-language glossary of key terms The policy defines terms like Child (0-12), Teen (13-17), Persistent Identifier, Services, and Rights so families know exactly who and what the rules apply to. | ||
| 17 | - **Conditions -** The promises made to use our Services | |
| 18 | - **Information / Data -** Facts about you or the account | |
| 19 | - **Parent -** The person who may have set up an account for you to use, your Parent or Legal Guardian | |
| 20 | - **Persistent Identifier -** A type of technology that uses a unique number or link that helps us identify you online | |
| 21 | - **Policy -** A document that describes how and why we do things | |
| 22 | - **Privacy -** Information you want to keep secret | |
| 23 | - **Rights -** Privacy rights are rules that help protect your personal info and let you decide what happens to it | |
| 24 | - **Services -** What we provide to customers at Bank of America, including banking and credit card services and our mobile apps and online banking website. | |
| 25 | - **Teen -** Anyone 13-17 years old | |
| 26 | - **Terms -** The rules and guidelines for using our Services | |
| 27 | - **We, Our, or Us -** Bank of America | |
| 28 | ||
| 29 | ## **How does Bank of America keep my information safe?** | |
| 30 | ||
| 31 | Keeping your information safe is very important to us. We store it carefully and only use it for the reasons we collected it. We follow strict rules and use strong protections so your information doesn't get lost or seen by anyone who shouldn't see it. To make sure your information is only used the way it should be, we apply the highest privacy settings when we can. | |
| 32 | ||
| 33 | ## **What kind of information does Bank of America collect about me?** | |
| 34 | ||
| 35 | **A. Personal Information** | |
| 36 | ||
| 37 | "Personal Information" is information we collect online that is unique to you such as your name, birthdate, address, and any Identification (ID) that you may get from the government such as a driver's license, passport, or Social Security Number. We collected some Personal Information from your Parent if they set up Services for you. There may be times we ask you for this information to help us identify you, such as if you contact us to get help logging into the account. | |
| 38 | ||
| 39 | **B. Account Data and Features** | |
| 40 | ||
| 41 | "Account Data" is information we collect about how you use the account. This information can tell us the location of your mobile device, mobile phone number, credit or debit card number, or other payment information. We collect this type of information when you make a purchase or log into the account. | |
+ ADDEDSpells out what data is collected from minors Personal details (name, birthdate, address, Social Security number, driver's license, passport) plus account data that can show the location of the child's phone, their phone number, and card or payment numbers. It also tracks how they use app features and learning tools. | ||
| 42 | ||
| 43 | We may also collect information if you use features on our website or mobile apps. This information helps us understand how you use the account, such as if you interact with learning tools that teach you about spending or saving money. | |
| 44 | ||
| 45 | Erica®, our virtual assistant, is a feature available to those at least 13 years old. Erica is a computer that can help you do things with the account when you talk or text with it. Some accounts may not have Erica, but if you do, remember Erica is a computer and you don't need to share your Personal Information with it. | |
+ ADDEDErica virtual assistant limited to age 13 and up The AI assistant is only available to teens, not to children under 13, and the policy tells kids not to share personal details with it. | ||
| 46 | ||
| 47 | If you have online access to the account, you may see options to make it easier to use. This may be things like using a digital wallet to pay for items. Some options have extra Terms you must follow before you can use them, so we recommend having your Parent help set it up. | |
| 48 | ||
| 49 | Information that helps recognize you when logging into your mobile device or our apps is part of your device settings and not shared with Bank of America. | |
+ ADDEDDevice biometrics stay on the device The bank states that face or fingerprint unlock data used to sign in stays in the phone's settings and is not sent to Bank of America. This is a consumer-friendly clarification. | ||
| 50 | ||
| 51 | For a full list of the types of information we collect about you, see the "More Information" section at the bottom of this Policy. | |
| 52 | ||
| 53 | ## **Why does Bank of America need information about me?** | |
| 54 | ||
| 55 | We collect your information so you can look at the account and help us do things like prove who you are, speak with you if you need help with the account, and help us detect things that don't look right on the account. In some cases, we may use Persistent Identifiers to help us do these types of things. Think of Persistent Identifiers like your student ID number. If you change classes or grade levels, that number stays with you. Any information we gather about you is to help make the account work correctly. | |
| 56 | ||
| 57 | See the section called, "More Information" at the bottom of this Policy for a more detailed list of why we may need your information. | |
| 58 | ||
| 59 | ## **What can Bank of America see when I visit their website or use their mobile app?** | |
| 60 | ||
| 61 | Bank of America can see how you interact with the account, such as if you use features like Erica® or access learning tools. We may collect information and track your activities with online technology called cookies. Cookies are small files you can't see. Computers create them when you visit a website. Some cookies are needed so you can see the website and are only needed for a short time, like a bookmark to help you remember where you last stopped reading a book. Other cookies are like flags that stay with you until removed so we can remember things like places you like to spend your money. Sometimes these flags include details about you such as your name or what state you live in. How long we keep the information we get from cookies depends on the type of cookie. | |
+ ADDEDCookies and persistent identifiers are used on minors The bank says it uses cookies and other online identifiers to recognize devices and remember things like where the child likes to spend money. Some of these stay in place until removed and can include the child's name or state. | ||
| 62 | ||
| 63 | You can read more about this in our [Cookie policy](https://www.bankofamerica.com/content/documents/privacy/Cookie_Guide_eng.pdf). | |
| 64 | ||
| 65 | ## **How long does Bank of America keep my information?** | |
| 66 | ||
| 67 | Banks have rules and laws that tell us how long to keep data and when we can delete it. Some laws and states tell us to keep information for a certain amount of time. Since not all states have the same laws, we only keep your information for as long as the law in your state allows. If your Parent asks us to delete your information, we will do it when the law allows. | |
+ ADDEDData is kept as long as state law allows; deletion happens 'when the law allows' There is no fixed deletion date. The bank keeps records for as long as banking and state laws permit, and honors a parent's delete request only when the law lets it. | ||
| 68 | ||
| 69 | ## **Who does Bank of America share my information with?** | |
| 70 | ||
| 71 | We only share your Personal Information with people or companies that need to know your information for reasons specific to the Services provided. We will not share your Personal Information for any other reason. | |
| 72 | ||
| 73 | For a full list of the types of companies we may share your information with, please see the "More Information" section at the bottom of this Policy. | |
| 74 | ||
| 75 | ## **What can my Parent see and do?** | |
| 76 | ||
| 77 | What your Parent can see and do depends on the type of account you use. If your Parent is an owner or co-owner of the account, they may be able to see what you do with the account. This includes how and when you use it. It could also include seeing and getting alerts when you buy something or use the ATM. They may also be able to control how much money you spend or where you spend it. | |
+ ADDEDParents can monitor and control the account A parent who owns or co-owns the account may see how and when the child uses it, get alerts on purchases and ATM use, and cap how much or where the child spends. | ||
| 78 | ||
| 79 | **Children**, your Parent will likely control many of the things you can do with the account, like how we can contact you about the account or the types of things you can buy. | |
| 80 | ||
| 81 | **Teens**, you will be able to do more with the account like using our virtual assistant, Erica. Some of our Services allow your Parent to see and control activity on the account, including requesting us to remove your information, limit your daily spending or ask that we not contact you. In some cases, the removal of your information may require us to close the account. | |
| 82 | ||
| 83 | Because we offer many types of Services, we suggest you talk with your Parent to understand the type of account you use and what your Parent may be able to see and do. | |
| 84 | ||
| 85 | ## **What are my Privacy Rights?** | |
| 86 | ||
| 87 | **Children and Teens,** you have Rights related to our collection and use of your Personal Information wherever you live in U.S.: | |
+ ADDEDPrivacy rights for kids, teens, and parents are listed Everyone under 18 anywhere in the U.S. gets the right to know, access, correct, object, and delete. Parents who own or co-own the account can use those rights for their child, and parents of under-13s get extra COPPA rights, including refusing further contact or collection. | ||
| 88 | ||
| 89 | - Right to Know - Learn what types of personal information we collect about you. | |
| 90 | - Right to Access - You can ask to see the information we have about you, if we still have it. | |
| 91 | - Right to Challenge or Correct - If information we have about you is wrong or needs to be fixed, you can ask us to change it. | |
| 92 | - Right to Object - If you don't want us to keep collecting or using your information, you can ask us to stop. If we stop, we might need to close your account. | |
| 93 | - Right to Delete - If you don't want us to keep certain information about you, you can ask us to delete it. This could include things you sent us online or on your account. Please note that deleting some information may mean we have to close your account. | |
| 94 | ||
| 95 | **Parents**, when you are the owner or co-owner of an account that your child or teen uses, you may exercise any of the above Rights on their behalf. Additionally, you have the following Rights under COPPA (children under 13 years of age), which vary from the Rights your child and teen have: | |
| 96 | ||
| 97 | - Refuse to permit further contact with your Child | |
| 98 | - Review and update the Personal Information collected online about your Child | |
| 99 | - Refuse to permit further collection, use or maintenance of your Child's Personal Information | |
| 100 | - Request the deletion of your Child's Personal Information | |
| 101 | - Request the deletion of the Parent's online contact information | |
| 102 | ||
| 103 | To act on any of the Rights listed above, please contact us using one of the options listed in the "To Exercise Your Rights" section below. | |
| 104 | ||
| 105 | **In accordance with COPPA, if at any time you wish to revoke consent to collect, use or maintain your Child's Personal Information, or ask that their information be deleted, we will remove their online profile and close the related account; their information will be deleted when legally permitted.** | |
+ ADDEDUsing delete or object rights can close the account The policy warns more than once that stopping collection or deleting information may require the bank to shut down the child's account, and that revoking COPPA consent means the online profile is removed and the account closed. | ||
| 106 | ||
| 107 | Those who live in California may have additional Rights. We recommend reading our [California Consumer Privacy Notice](https://web.bankofamerica.com/en/privacy/ccpa-disclosure) to learn more. | |
| 108 | ||
| 109 | ## **How do I contact Bank of America?** | |
| 110 | ||
| 111 | **How to Exercise Your Rights** | |
| 112 | ||
| 113 | 1. Email our Individual Rights Request team: [individualrightsrequests@bofa.com](mailto:individualrightsrequests@bofa.com) | |
+ ADDEDContact routes for privacy requests Requests can be made by emailing individualrightsrequests@bofa.com, calling 888.341.5000, or writing to the Addison, TX office. | ||
| 114 | 2. Call: 888.341.5000 | |
| 115 | ||
| 116 | **For general privacy questions or concerns** | |
| 117 | ||
| 118 | 1. Write to us: | |
| 119 | _Individual Rights Operations | |
| 120 | TX8-041-01-16 | |
| 121 | 16001 N Dallas Pkwy Building 1 | |
| 122 | Addison, TX 75001_ | |
| 123 | 2. Email us: [individualrightsrequests@bofa.com](mailto:individualrightsrequests@bofa.com) | |
| 124 | ||
| 125 | ## ** | |
| 126 | More Information** | |
| 127 | ||
| 128 | We made these charts to help you understand what information we collect about you, how we use it, and what kinds of companies we might share it with so you can use our Services. The information we collect depends on which Service you use. We only collect the information we need to make your account work, and we don't ask for more than what is needed to provide you the Service you requested. | |
| 129 | ||
| 130 | <table><tbody><tr><td><p><a name="_Hlk223959387" id="_Hlk223959387"></a><b><u>Information We May Collect</u></b></p></td><td><p><b><u>What This Means</u></b></p></td><td><p><b><u>Why We Need It</u></b></p></td></tr><tr><td><p>Your Contact Info</p></td><td><p>Your name, address, phone number, email</p></td><td><p>To contact you, open your account, and send important info</p></td></tr><tr><td><p>Your IDs</p></td><td><p>Things like your Social Security number, driver's license, or passport</p></td><td><p>To make sure you are really you and to follow the law</p></td></tr><tr><td><p>Your Account Activity</p></td><td><p>What you do with your account (deposits, payments, transfers)</p></td><td><p>To keep your account working and make sure money goes where you want</p></td></tr><tr><td><p>Photos, Videos, and Audio</p></td><td><p>Security footage at ATMs, buildings or call recordings</p></td><td><p>To keep everyone safe and help with customer support</p></td></tr><tr><td><p>Your Login & Security Info</p></td><td><p>Username, password, device info, security questions</p></td><td><p>To protect your account so no one else can use it</p></td></tr><tr><td><p>Your Online Activity</p></td><td><p>What you click or look at on our website or app</p></td><td><p>To fix problems, make the app better, and show you helpful info</p></td></tr><tr><td><p>Online Identifiers</p></td><td><p>Cookies, IP address, Persistent Identifiers and other tech signals from your device</p></td><td><p>To recognize your device and keep your online session secure</p></td></tr><tr><td><p>Job or Income Info</p></td><td><p>Your job, employer, or money you earn</p></td><td><p>For accounts or services that need proof of income</p></td></tr><tr><td><p>Your Money Information</p></td><td><p>Savings, debts, expenses, and investments</p></td><td><p>To understand your money situation and help you keep your accounts on track</p></td></tr><tr><td><p>Payroll Info</p></td><td><p>Bank info for direct deposit and tax details</p></td><td><p>If you use payroll or paycheck services</p></td></tr><tr><td><p>Your Preferences</p></td><td><p>Your language, interests, and things you like in the app</p></td><td><p>To make services feel more personal to you</p></td></tr><tr><td><p>Proof of Address</p></td><td><p>Bills or statements that show where you live</p></td><td><p>To confirm your address, as required by law</p></td></tr><tr><td><p>Legal Documents</p></td><td><p>Court papers or other legal records related to your accounts</p></td><td><p>To handle account changes or follow legal rules</p></td></tr><tr><td><p>Sensitive Info</p></td><td><p>Things like race, disability info, or political views (only asked when required by law)</p></td><td><p>Only for legal checks like anti-money-laundering rules</p></td></tr><tr><td><p>Your Signatures</p></td><td><p>Your written or electronic signature</p></td><td>To approve documents and complete transactions</td></tr></tbody></table> | |
| 131 | ||
| 132 | We sometimes work with other companies or agencies to help us make your account work properly or provide you the Service you requested. Below is a chart that helps explain the types of companies we work with and why we may need to share your information with them. | |
| 133 | ||
| 134 | <table><tbody><tr><td><p><u><a name="_Hlk223959411" id="_Hlk223959411"></a><b>Types of Companies We Share Your Information With</b></u></p></td><td><p><b><u>What Information We Share</u></b></p></td><td><p><b><u>Why We Share It</u></b></p></td></tr><tr><td><p>Companies that help manage accounts</p></td><td><p>Contact Info</p></td><td><p>They help send bills, statements, and keep account tools working</p></td></tr><tr><td><p>Our partner companies ("affiliates")</p></td><td><p>Depending on the service, it may include Contact Info, IDs, Account Activity, Online Activity</p></td><td><p>To help provide services as one big company family</p></td></tr><tr><td><p>Apps that connect to your account (like Venmo or Mint)</p></td><td><p>Account Activity, Money Information (Assets/Debts), Identifiers, Contact Info</p></td><td><p>If you choose to share your account info with those apps</p></td></tr><tr><td><p>Companies that study data ("analytics companies")</p></td><td><p>Online Activity, Online Identifiers, Preferences</p></td><td><p>To improve services, fix problems, prevent fraud, and personalize things</p></td></tr><tr><td><p>Government registries that track account owners</p></td><td><p>IDs, Contact Info, Other info required by law</p></td><td><p>We must share this information when the law requires it</p></td></tr><tr><td><p>Communication & document-sharing tools</p></td><td><p>Contact Info, Identifiers</p></td><td><p>To safely send messages and documents</p></td></tr><tr><td><p>Business software companies</p></td><td><p>Contact Info</p></td><td><p>To send you service updates or transaction messages</p></td></tr><tr><td><p>Online payment or transaction services</p></td><td><p>Contact Info, Login & Security Info, Online Identifiers</p></td><td><p>To help you log in and make secure transactions</p></td></tr><tr><td><p>Electronic signature companies</p></td><td><p>Signatures, Contact Info</p></td><td><p>To let you sign documents online</p></td></tr><tr><td><p>Companies that track website/app activity</p></td><td><p>Online Activity, Online Identifiers</p></td><td><p>To improve apps and websites and keep them secure</p></td></tr><tr><td><p>Law firms or advisors</p></td><td><p>Whatever info is needed such as Contact Info, IDs, Account Activity, or Legal Documents</p></td><td><p>For legal help, advice, or fraud prevention</p></td></tr><tr><td><p>Partner banks & credit card partners</p></td><td><p>Account Activity, Contact Info, Identifiers, Money Information</p></td><td><p>To process payments or give services we can't provide alone</p></td></tr><tr><td><p>Government regulators</p></td><td><p>IDs, Contact Info, Account Activity, Legal Documents, Other required info</p></td><td><p>To follow laws and reporting rules</p></td></tr><tr><td><p>Tax agencies or tax service companies</p></td><td><p>Contact Info, Identifiers, Payroll Info, Other tax-related info</p></td><td><p>To meet tax reporting rules</p></td></tr><tr><td><p>Companies we merge with or sell to</p></td><td><p>Any info needed for the business deal (Contact Info, Account Info, etc.)</p></td><td><p>To finish a sale, merger, or business change</p></td></tr></tbody></table> | |
+ ADDEDFull charts of what is collected and who it goes to Two tables at the bottom list every category of data collected (including photos/video/audio, sensitive info like race or disability when law requires, income, and signatures) and 15 kinds of companies the data may go to, from analytics firms to partner banks to any company that buys the business. | ||