THE IMPORTANT STUFF, SAID SIMPLY

Privacy Policy

Last updated: 27 September 2026

Introduction

Tinker Tango is an interactive educational story app for children ages 2 to 6. A parent or legal guardian creates and controls the account. We designed the service to collect as little information about children as practical.

For parents and guardians: before we ask for or save learner details, the signed-in adult must review this notice, affirm that they are the parent or legal guardian, and actively consent. This policy is the full notice of what we collect, why we use it, and the choices you have.

Information we collect

From the grown-up

• Name, email address, profile image, and sign-in provider supplied through Google or Apple.
• Authentication and session information needed to keep the adult account secure.
• Your consent choice, the version of this notice and our terms, and consent request, confirmation, or withdrawal times.
• A learner nickname, broad age band (2–3, 4–5, or 6+), and a picture chosen from our illustrated characters after confirming consent. A nickname is optional and defaults to “Little Explorer”; character pictures do not involve photo uploads.
• If you allow optional advertising measurement, Meta may receive visits to our grown-up sign-in and permission pages, browser or device information, and the fact that an adult account registration was completed. We do not send Meta the adult’s name or email through the Pixel.

From use of the learner experience

• Stories opened and completed, current checkpoint, choices or outcomes, and saved progress.
• Pseudonymous activity such as browsing, watching, interaction time, playback errors, and feature events.
• Basic technical and security information ordinarily processed when a website is used, such as IP address, browser/device information, request time, and diagnostic logs.

What we do not collect: a child’s email, exact birthday, address, precise location, contacts, voice or audio, photographs, videos, biometric identifiers, advertising identifiers, or free-text messages from a child.

How we use information

• Create and secure the grown-up account.
• Provide an age-appropriate learner profile and remember story progress.
• Deliver video and interactive story content.
• Understand aggregate engagement, diagnose errors, prevent abuse, and improve safety and reliability.
• Measure, only when the grown-up allows it, whether an advertisement led to an adult visit or account registration.
• Send permission, confirmation, security, or material policy-change emails to the grown-up.

We do not sell personal information, use learner information for behavioral advertising, make learner profiles public, or use learner information to train AI models.

Who processes information for us

• Cloudflare hosts the application, database, object assets, video streaming, security services, and pseudonymous analytics.
• Google and Apple provide adult sign-in when the corresponding option is enabled.
• Resend delivers parental permission and transactional emails.
• Meta provides optional advertising measurement on grown-up acquisition pages only. Its Pixel is not loaded on learner-profile, story, or gameplay pages.

These providers process information to provide services to us under their applicable terms. We do not share children’s information with advertising networks, data brokers, or social-media platforms for their own purposes.

How long we keep information

• Adult account details are kept until the account is deleted.
• Normal sign-in sessions expire after 30 days, although a new session may be created when you sign in again.
• Learner profiles and authoritative story progress are kept until you withdraw consent, delete learner data, or delete the account.
• Pseudonymous Analytics Engine events are retained for approximately three months.
• Consent records are kept with the adult account as evidence of permission and withdrawal and are deleted when that account is deleted.
• Pending and expired permission-request records contain the adult email and a hashed one-time token; they may remain until the adult account is deleted.
• Deleted database information may remain temporarily in restricted disaster-recovery copies for up to 30 days before expiry.

Parental consent

A learner profile cannot be created until the signed-in adult checks the parental statement and confirms consent in the app. We record the adult account, policy and terms versions, and confirmation time. The service can be configured to require a one-time email confirmation as an additional verification step; when used, that link expires after 24 hours and cannot be reused. Consent covers only the collection and uses described in the current notice.

You may withdraw consent in Settings. Withdrawal immediately blocks the learner experience and deletes the learner profile and saved progress. You may separately delete the entire adult account.

Your choices and rights

You can allow or decline optional Meta advertising measurement before it loads. The choice is stored in your browser and does not affect access to Tinker Tango. You can also review and edit learner details and view progress in Settings, withdraw consent and delete learner data, delete the entire account, or ask us for access, correction, or deletion assistance. We may verify that a requester controls the adult account before acting.

Children’s privacy

Tinker Tango is child-directed, but the account and privacy controls are for adults. Children cannot contact other users or publish information. We use high-privacy defaults and limit collection to information needed to provide, secure, and understand the service. Laws vary by location; this service is designed around parental notice, affirmative permission, access, deletion, security, and data-minimization principles.

Security

We use HTTPS, access controls, scoped service credentials, server-side authorization, one-time hashed consent tokens, and provider security controls. No online service can promise perfect security. If a breach creates a legally reportable risk, we will provide the notices required by applicable law.

Changes

We will update the date on this page when this policy changes. If a change materially expands how learner information is collected, used, or shared, we will notify the adult account and request new consent before applying that expanded use.

Contact

Privacy questions and parent requests: privacy@tinkertango.com.