Privacy Policy
Version 1.0
The Little Sprouties helps parents and caregivers find one small, age-appropriate activity to do with a child each day. This policy explains what personal information we collect through our mobile app and our website at thelittlesprouties.com, why we collect it, who receives it, how long we keep it, and the choices you have.
The short version
- We collect what we need to send you activities: your email address, and a nickname and age group for each child you add.
- We do not ask for a child's date of birth, surname, photo, or location, and the app does not use your camera, microphone, contacts or location.
- The service is for parents and caregivers. Children do not have accounts or use the service on their own.
- We do not sell personal information, show advertising, or use advertising trackers.
- A small number of service providers process data for us to run the service. They are listed below.
- You can switch off emails and notifications at any time, and you can delete your account yourself, in the app or on our website.
Who we are
The service is run by [to be confirmed] ("we", "us"), of [to be confirmed]. We are the controller of the personal information described in this policy. You can reach us about anything in it at support@thelittlesprouties.com.
Information we collect
| What | Details | Where it comes from |
|---|---|---|
| Account | Your email address, a unique account ID, the time of day you want activities sent, your time zone (detected from your device), and your email, notification and weekly-summary preferences. If you sign in with Google or Facebook, our sign-in provider receives basic profile details from them, which can include your name and photo. | You, and your device |
| Children's profiles | A nickname you choose and an age group (0 to 5, or 5 and over) for each child, plus the preferences you set: goal, focus areas, energy level, indoors or outdoors, and how long an activity should take. | You |
| Your activity | Which activities were sent, completed or saved as favourites; ratings and any comments you write; challenges you join; the moments and quick activities you pick; and the progress, streaks and badges worked out from these. | You, and the app |
| Referrals | Your referral code, and the link between accounts when someone joins using a code. Links you share carry your code. | You |
| Messages we send | A record of the emails and notifications we send you: what was sent, when, and whether it was delivered. This includes your email address and the message content, which can include your child's nickname, and the same for push notifications, whose text includes an activity title and your child's nickname. | The service |
| Device and technical data | Your push notification token, whether your phone is iOS or Android, and the device name or model your phone reports (which can be a name you gave it, such as "Sam's phone"). Your IP address is used to deliver the service; in our own analytics tables we keep only a hashed form of it, with your approximate country and network. Browser and app type. | Your device |
| Usage analytics | Events such as signing up, opening or sharing an activity, and using a feature. These use pseudonymous identifiers (a one-way hash of your account and child IDs), not your name or email. If you open an activity link that someone shared, we record that it was opened, using a hashed form of your IP address, and whether the link carried a referral code. | The service |
| Support | Anything you send us when you email for help. | You |
What we do not collect. We do not collect precise location, contacts, photos, camera or microphone data, or an advertising ID. We do not currently collect payment information: the service is free while we test it.
About the nickname and comment boxes. Please use a first name or nickname for your child, and do not put health information, diagnoses, surnames, addresses or other sensitive details in a nickname or a comment. We do not need them, and they are stored as you type them.
How we use information, and why
| Purpose | Our legal basis (where GDPR-style law applies) |
|---|---|
| Create and run your account; choose and send the right activity to each child, by email and notification, at the time you asked | Performing our agreement with you |
| Show your library, favourites, progress and badges; run challenges and referrals | Performing our agreement with you |
| Keep the service secure, prevent abuse, fix faults and understand which features are used so we can improve them | Our legitimate interests in running a safe, working service |
| Send optional messages such as the weekly summary | Your consent, which you can withdraw in settings |
| Answer your questions and requests | Performing our agreement with you, and our legitimate interests |
| Meet legal obligations and handle legal claims | Legal obligation and legitimate interests |
We do not sell your information, use it for advertising, or make decisions about you that have legal or similarly significant effects. We use AI services to help draft the activity content in our library. Those requests contain only general information, such as an age group and a developmental goal. They never include your email, your account ID, or your child's nickname.
Who receives your information
We share information only with providers that help us run the service, and only as needed for that purpose:
| Provider | What it does for us | What it receives |
|---|---|---|
| Clerk | Sign-in and account management | Your email, sign-in method and account ID, and profile details from Google or Facebook if you use them |
| Google and Facebook | Only if you choose "Continue with" them | The fact that you signed in. Their own privacy policies apply to what they hold |
| MailerSend | Sending our emails | Your email address and the content of each email, which can include your child's nickname |
| Expo, and Apple and Google's push networks | Delivering push notifications | Your push token and the notification text, which includes an activity title and your child's nickname |
| Vercel | Hosting the website and API, and cookie-free page-view statistics for the website | Standard request data such as IP address and pages viewed |
| Our cloud database provider | Storing your account and profile data | The account data described above |
| PostHog (only where we have switched it on) | Product analytics | Pseudonymous hashed identifiers and event details, not your name or email |
| AI and video providers (currently OpenAI, Alibaba Cloud and Google) and our file storage provider | Generating activity content and clips for the library, and storing the clips | General content prompts only, never personal information |
These providers act on our behalf. We may also disclose information if the law requires it, to protect people's safety or our rights, or to a successor if the business is sold or merged, in which case this policy will continue to protect your information or you will be told first.
Your information may be processed in countries other than your own, including the United States. Where the law requires it, we rely on safeguards such as standard contractual clauses.
Children's privacy
The service is designed for adults. It is not directed at children, and children do not create accounts, sign in, or send us information themselves. Information about a child is provided by their parent or guardian, and is limited to a nickname, an age group and activity preferences. We use it only to choose and send activities to the parent, and to show the parent their progress. We do not show it publicly, sell it, or use it for advertising.
You can review, change or remove any child's profile in the app at any time, and you can ask us to delete it, or to show you what we hold, by writing to support@thelittlesprouties.com. If you believe a child has given us personal information directly, please contact us and we will delete it.
How long we keep information
| Information | How long |
|---|---|
| Account, children's profiles, activity history, ratings and comments | While your account is open, and deleted as soon as you delete your account (see below) |
| Records of messages we sent you, and analytics events linked to your account | With your account, and deleted with it |
| Our own analytics events and technical logs | About 90 days |
| Push tokens | Until you sign out, or until the push service tells us the device is no longer valid |
| Encrypted backups | Until they are overwritten in the normal backup cycle |
Copies held by our service providers follow their own retention schedules. We may keep a minimal record where the law requires it, for example proof that a deletion request was handled, and we may keep statistics that no longer identify anyone.
Your choices and rights
In the app or website. You can turn activity emails, push notifications and the weekly summary on or off, change your time zone and send time, and edit or delete a child's profile. Every activity or summary email we send has an unsubscribe link. Account emails from our sign-in provider, such as verification codes, do not. You can stop notifications in your phone's settings at any time.
Deleting your account. In the app, open More and tap Delete account. On the website, go to thelittlesprouties.com/delete-account. Deleting is immediate and permanent. It removes your account and email address, your children's profiles and activity history, the records of messages we sent you, your notification tokens, your referral links and usage records, the analytics events in our own database that are linked to your account, and your sign-in account with our sign-in provider. If you cannot sign in, email support@thelittlesprouties.com from the address on your account and we will delete it within 30 days. Backups, and copies held by our service providers, are cleared as described under "How long we keep information" above.
Other rights. Depending on where you live, you may also have the right to access the information we hold about you, to have it corrected, to receive a copy in a portable format, to object to or restrict certain uses, and to withdraw consent you gave. Write to support@thelittlesprouties.com. We may ask you to confirm you control the account before we act, and we will normally reply within 30 days.
If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.
If you are in California or another US state with a privacy law, you may ask us what personal information we collect, use and disclose, and ask us to correct or delete it. In the last 12 months we have collected the categories in the table above. We do not sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of, and we will not treat you differently for using your rights.
If you are in India, you may exercise your rights to access, correction and erasure of your personal data under the Digital Personal Data Protection Act, 2023, and to seek grievance redressal, by writing to support@thelittlesprouties.com.
Cookies and similar technologies
On our website, our sign-in provider sets the cookies needed to keep you signed in. Our website also uses your browser's local storage for your theme, for any activities you save on the planner page, and for a random identifier that lets us apply usage limits and recognise your browser when you are not signed in. That identifier is sent to us with your requests and is stored only in hashed form. Our page-view statistics do not use cookies. The mobile app keeps your sign-in token in your device's secure storage and your preferences on the device. We use no advertising cookies and no third-party advertising trackers.
Security
We use measures suited to the information we hold, including encrypted connections (HTTPS) and restricted access to administrative tools. No system is perfectly secure. If a breach affects your information, we will tell you and the authorities as the law requires.
Changes to this policy
When we change this policy we publish a new version with a new effective date, and every earlier version stays available on this page. If a change is material, we will tell you by email or in the app at least 30 days before it takes effect, unless the law or a security need requires it sooner.
Contact us
[to be confirmed], [to be confirmed]. Email support@thelittlesprouties.com for privacy questions, requests and complaints.