product sense · hard
Design a communication tool for children
Design a communication tool for children.
The most common failure on this question is treating it as a safety engineering problem with a fun skin on top. Interviewers at Stripe are specifically checking whether you understand that children and parents are two structurally distinct users with conflicting goals, that “children” is not one segment, and that a product parents install but children reject has already failed. Safety is the floor. Lovable is the bar.
Scope it first, out loud
At Stripe, the most penalized move is jumping to features before naming your user. Say so and ask: “Are we building standalone or within an existing surface? And which age range within children are we targeting?” Then commit: standalone, ages 6 to 12, US market, with Stripe’s interest in the payments infrastructure layer underneath.
“Children” contains at least three meaningfully different users.
Ages 6 to 9: Pre- or early-literate. Communication must be icon- and voice-first. Parents configure everything. Supervision is close. The product has to earn trust from a parent who is simultaneously the buyer and the gatekeeper.
Ages 10 to 12: Text-capable and increasingly motivated by peer privacy. This group is making after-school plans, coordinating group projects, and managing social dynamics that feel real and important to them. They will not use an app that reads like a parental monitoring dashboard with emoji on top.
Parents: The paying customer. Their primary concerns are who the child talks to, what is said, and how much time is spent. But parents also want a product their child actually uses, because a rejected app solves nothing.
Pick the 10 to 12 cohort and go deep. That is where the product gap is largest and where the tension is sharpest.
The core tension is the whole design problem
Children want autonomy and privacy. Parents want transparency and control. Most products capitulate entirely to one side. Products that give parents full read access to every message are abandoned by kids by age eleven, replaced by borrowing a parent’s phone. Products that ignore parents never get purchased.
The strong answer names this tension explicitly and resolves it as a design principle, not a feature. The principle is graduated trust. A child earns expanded privacy and contact permissions over time through demonstrated responsible use. Parents see a trust score, not a message log. The score surfaces trending patterns (contacts added this week, flagged content this month) without exposing message content. This gives parents signal without surveillance, and gives children the dignity of a private conversation.
This is not a feature. It is the architecture. Everything else flows from it.
The real unmet need
For a 10 to 12 year old, the unmet job is: coordinate with friends on my own, without using my parent’s phone and without being on a platform where my parent reads every word.
FaceTime and iMessage are the actual incumbents here, used on hand-me-down devices or parents’ phones. Kidslox, Bark, and Life360 are optimized for monitoring, not for the child’s communication experience. Discord has a Family Center but is not purpose-built for under-13 users. None of them solve the coordination job. The child’s social life requires tools the current landscape does not provide.
Features, ranked by user value
- Voice-first messaging with auto-transcription. Solves the literacy gap for younger users and creates a text record parents can audit without real-time surveillance.
- Approved contact list via QR code exchange. No phone numbers, no name search. You add a friend by scanning their code in person or through a parent-approved invite. This collapses the stranger-contact surface to near zero without requiring a complex configuration screen.
- Group coordination: lightweight poll and time-limited location pin. “Where are we meeting?” as a structured interaction rather than open chat. Location share expires after two hours and is visible to all parents in the group by default.
- Reaction library over open text. Rich sticker and audio-clip reactions reduce the pressure to type and shrink the harmful-text surface area without banning conversation.
- Family channel. A dedicated thread between parent and child, normalized in the UI rather than hidden. The child does not feel watched by a separate channel; the parent has a direct line without reading peer conversations.
Safety as architecture, not a checkbox
Real-time content moderation via AI is commodity infrastructure in 2026. The design decision is where it fires: proactive blocking (message never sends) or async flagging (parent notified after). For ages 6 to 9, proactive. For ages 10 to 12, async with the child notified: “This message was flagged and your parent was notified.” That teaches accountability rather than creating resentment from invisible surveillance. A candidate who says “AI moderation” without specifying this tradeoff is using it as a buzzword, not a design decision.
On regulation: COPPA 2.0 passed the US Senate unanimously in March 2026, expanding coverage from under-13 to under-17 and requiring an “eraser button” for data deletion on request. The KIDS Act advanced to the full House in March 2026. The June 23 House deal dropped KOSA’s duty-of-care provision but added mandatory age verification for all users at the app store level. That last provision is a tailwind: it shifts verification burden to the OS, reducing compliance cost and accelerating launch.
Monetization (most candidates skip this; Stripe will not let you)
Freemium: free for one child, $4.99 per month for a family plan covering up to four children. The Stripe-relevant layer is the one no competitor has built. Parents pre-load a spending allowance that children can send to friends as gift credits, redeemable for in-app items or donated to a charity of the child’s choice. This is Stripe Issuing territory, and it turns the communication tool into an economic surface for a generation with no existing payments infrastructure. That framing is uniquely compelling at Stripe because it connects directly to Stripe Atlas and Issuing products already serving family financial flows.
Success metrics
North star: Weekly Active Children (not parents). If the child does not choose to open the app, every safety feature is irrelevant. This metric also creates the right internal incentive: the team must build something children actually want, not just something parents will install.
Supporting metrics:
- Messages sent per child per week (engagement depth, not just presence)
- Parental trust NPS at 30, 60, and 90 days
- Contact approval rate: percentage of child-initiated contacts that parents approve, a leading indicator of trust calibration
- Safety flag rate and false-positive rate, tracked together: too high means the product is unusable; too low means it is unsafe
- Churn by age cohort: if 12-year-olds are churning to adult platforms, the graduated-trust model is not providing enough autonomy
strong
"Before I design anything, a few quick questions: are we building standalone or within an existing Stripe surface, and which age range within children are we targeting? I'll assume standalone, ages 6 to 12, US market, and that Stripe's interest is in the payment layer underneath. Now let me segment the users, because children is not one user.
Ages 6 to 9 are pre-literate, so communication has to be voice- and icon-first with parents configuring everything. Ages 10 to 12 are text-capable and increasingly motivated by peer privacy. They are coordinating socially in ways that feel real to them. Parents are the paying customer, a distinct user with distinct goals. I want to go deep on the 10 to 12 cohort because that is where the gap is largest.
The core design problem is a structural tension: children want autonomy and privacy, parents want transparency and control. Most products capitulate entirely to one side and fail. My design principle for resolving this is graduated trust: the child earns expanded privacy and contact permissions through demonstrated responsible use, and parents see a trust score, not a message log. That is not a feature, it is the architecture the product is built on.
The unmet job for a 10 to 12 year old is: coordinate with friends without using my parent's phone and without being on a platform where my parent reads every word. FaceTime and iMessage are the real incumbents. Bark and Kidslox optimize for monitoring adults, not for the child's coordination experience. Nobody has built for that job.
The features I would prioritize: voice-first messaging with auto-transcription so younger users can participate and parents have an auditable record without real-time access; an approved contact list via QR code exchange with no phone numbers and no name search; and lightweight group coordination with a time-limited location pin visible to all parents by default. For content moderation, I would use async flagging for 10 to 12 year olds with the child notified that a message was flagged, because that builds accountability rather than resentment at invisible surveillance.
On monetization: freemium at $4.99 per month for a family plan, but the Stripe-specific layer is a parent-loaded spending allowance that children can send to friends as gift credits. That is Stripe Issuing territory and it turns this communication tool into an economic surface for a generation with no existing payments infrastructure.
My north star is Weekly Active Children, not parents, because if the child does not open the app the safety features are irrelevant. Supporting metrics: messages sent per child per week, parental trust NPS at 30 and 90 days, contact approval rate as a leading indicator of trust calibration, and churn by age cohort to detect when the graduated-trust model stops providing enough autonomy. One regulatory note: the June 2026 KIDS Act House deal adds mandatory age verification at the app store level for all users. That is a tailwind. It moves verification burden to the OS and reduces our compliance cost."
weak
"I'd design a kid-safe chat app for children ages 5 to 15 with parental controls, content moderation, stickers, and an educational layer. COPPA compliance would be a constraint we'd need to satisfy. I'd track success with DAU and session length." This answer fails four ways. It treats children as one segment, ignoring that a 6-year-old and a 12-year-old have different literacy levels, social needs, and risk profiles, which means the solution cannot be grounded in any real unmet need. It jumps to features before naming the core tension between child autonomy and parental control, the design space where every real product decision lives. It invokes "AI moderation" without specifying whether flagging is proactive or async, what triggers a flag, or how false positives are handled, which makes it sound like a buzzword rather than a design decision. And it proposes DAU and session length as north star metrics for a children's product, which incentivizes maximizing screen time, the precise thing parents distrust. A candidate who reaches for engagement metrics on this question signals they have not thought through what the product is actually trying to do.
The 2026 reframe
In 2026, feasibility is not the hard problem. Real-time content moderation, voice transcription, and AI-based moderation are commodity capabilities any well-funded team can ship. The question shifts to two harder things.
Viability: parents already pay $4.99 to $9.99 per month for Bark and Life360. They are buying surveillance. A product that makes the child’s communication experience genuinely better, not just safer, addresses a different and larger job. The willingness to pay exists; the product category does not.
Lovable: a child will not use an app that feels like a parental monitoring device with a fun skin. The lovable version is one the child asks for, not one the parent installs. That requires designing for the child’s dignity and social needs alongside the parent’s legitimate concerns. The PM who understands this distinction will stand out from the candidate who treats this as a safety engineering problem with UX polish on top.
Related reading
The jobs-to-be-done framework is the right lens for reframing “safe messaging” as “coordinate with friends on my own terms.” For the viable-and-lovable bar that replaced usability as the real product challenge in 2026, see lovable, not just usable and feasibility is free.
Related
- "Design a product for new parents" product-sense
- Design WhatsApp for students product-sense
- Design a product for college students product-sense