Privacy Policy

What TinyPlan is

TinyPlan is a personalized play and routine planning service for parents of children aged 2–6. Parents complete a quiz, receive a play profile, and get a 7-day activity plan. The app is parent-facing—children do not interact with it directly.

Data we collect

• Email address — used for account sign-in (handled by our authentication provider, Clerk), subscription management, and essential service communications.
• Quiz answers — your responses to the play profile quiz, used to generate your personalized plan. These include general preferences, parenting goals, and your child’s age range (e.g. 2–3, 4–5).
• Activity log data — which activities you mark as complete, used to track your progress and improve plan recommendations.
• Basic analytics events — page views and feature usage, stored in our own database. No third-party tracking scripts are loaded by default.
• Referral attribution data — if you arrive through an affiliate or partner link, a referral identifier is stored in a first-party “pn_click” cookie. If you then subscribe, we report the conversion to our affiliate network so the referring partner is credited (see “Third parties” below). We share only a non-identifying internal account reference, the Stripe invoice ID, and the amount and currency — never your email, name, or any data about your child.

Data we do not collect

• No child names, photos, birthdates, or location data. Child age is stored only as a broad range.
• No payment card numbers. All payment processing is handled by Stripe—TinyPlan never sees or stores your card details.
• No data is collected from children. This app is designed for and used by parents only.

How we use your data

• To generate and deliver your personalized play plan.
• To authenticate your account through Clerk-hosted sign-in.
• To manage your subscription and process payments through Stripe.
• To improve the service based on aggregate, anonymized usage patterns.

We do not sell your data. We do not use your data for advertising.

Third parties

• Clerk — Clerk, Inc. provides our hosted sign-in and authentication. Clerk receives your email address, manages your sign-in, and stores authentication sessions and cookies on our behalf, under their own privacy policy.
• Stripe — processes payments and manages subscriptions. Stripe receives your email and payment details under their own privacy policy.
• Affiliate network (partner attribution) — if you sign up after following an affiliate or partner link, we report the conversion to our affiliate network (partnernetwork.space) so the referring partner can be credited and paid. We send a non-identifying internal account reference, the Stripe invoice ID, and the payment amount and currency — never your email, name, or any information about your child. Refunds and chargebacks are also reported so partner commissions can be reversed.

We share data only with the parties listed above — to operate the service and to attribute partner referrals. We do not share your data with any other third parties, and we do not sell it.

Cookies and sessions

Our authentication provider, Clerk, sets cookies in your browser to keep you signed in and to secure your session. We use your browser’s localStorage to save quiz progress (so you can resume if you leave the page) and to store a first-party, randomly generated analytics identifier (“tinyplan_anon_id”). This identifier lets us measure aggregate, IP-less usage of our own pages; it is not tied to your identity and is not shared with third parties. If you reach TinyPlan through an affiliate or partner link, we also set a first-party “pn_click” cookie (kept for up to 60 days) that records the referral identifier so the referring partner can be credited if you subscribe; this cookie holds no personal information. We do not use third-party advertising or tracking cookies.

Data retention

Your account data (email, quiz answers, activity logs) is retained for as long as your account is active. If you cancel your subscription and request deletion, we will delete your data within 30 days. Stripe may retain payment records independently as required by law.

Your rights

Depending on where you live, you have rights over your personal data under laws such as the UK GDPR, the California Consumer Privacy Act (CCPA), Canada’s PIPEDA, and the Australian Privacy Act. These include:

• Access — you can request a copy of the data we hold about you.
• Deletion — you can request that we delete your account and all associated data.
• Correction — you can request corrections to any inaccurate data.

To exercise any of these rights, email us at the address below.

Children’s privacy (COPPA)

TinyPlan is a parent-facing service. Children do not create accounts, interact with the app, or provide any data. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email. The “last updated” date at the top of this page reflects the most recent revision.

Contact

For privacy-related questions or requests, email hello@tinyplan.org.