You need to provide an emergency mode which does not enable full access to the phone, and does not require a PIN. I've used about 3 competing products, and the best approach had an Emergency button which would provide the ability to contact preset emergency contacts, but nothing more. Your approach invites abuse of the PIN override for non-emergency reasons. Run some reports - how many children have more than 1 "emergency" PIN activation?