Privacy for families

Plain-language summary. Have your legal counsel review before launch.

What we collect

• Parent: your sign-in (email or Google account, held by Google Identity Platform, not copied into our database), consent date, settings.
• Child: a nickname, a cartoon avatar, an age band, progress, stickers and daily play minutes.
• We never ask for a child's real name, photo, email, location or school.

How AI is used

• Core stories are written and reviewed by people before children see them.
• Optional features (Ask Tomi, Make a Story) use Google Gemini on Google Cloud Vertex AI. Google does not use these prompts to train its models.
• Every AI reply passes strict safety filters. Anything blocked is replaced with a gentle message and shown to you in the parent dashboard.
• You can turn live AI features off at any time.

Your controls

• Set a daily play-time limit.
• Download all your family's data as a file.
• Delete your account and all child data instantly.

How we protect and keep it

• Everything is encrypted in transit and at rest. Blocked AI questions get an extra layer of encryption with our own key.
• Blocked AI questions are deleted automatically after 90 days; daily play-time records after 30 days.
• Only our server can read the data. Backups are kept for up to 14 days.

What we never do

• No advertising, no selling data, no third-party trackers.
• No chat between children, no public profiles.