DD age 7, don't know how, has managed to get my password and turn on in app purchases and has been purchasing with abandon tokens and jewels in Nemo's Reef and Minion Rush games.

She has only been doing it for three days, thank goodness or who knows how much she would have spent.
Fortunately I have been on to Apple who are refunding all the charges (thank goodness, am lone parent and every penny counts).
Just to warn you all to be aware, I did everything right, set up all security settings, thought my password was secret etc, restricted I Pad use and she was still able to do it.
Thing is she has ASD and I know she wouldn't have done it in an underhand way, just would have thought she was really clever to manage to do it.
Be Careful!!!!!