Privacy Policy

What TinyPlan is

TinyPlan is a personalized play and routine planning service for parents of children aged 2–6. Parents complete a quiz, receive a play profile, and get a 7-day activity plan. The app is parent-facing—children do not interact with it directly.

Data we collect

• Email address — used for account login (magic link), subscription management, and essential service communications.
• Quiz answers — your responses to the play profile quiz, used to generate your personalized plan. These include general preferences, parenting goals, and your child’s age range (e.g. 2–3, 4–5).
• Activity log data — which activities you mark as complete, used to track your progress and improve plan recommendations.
• Basic analytics events — page views and feature usage, stored in our own database. No third-party tracking scripts are loaded by default.

Data we do not collect

• No child names, photos, birthdates, or location data. Child age is stored only as a broad range.
• No payment card numbers. All payment processing is handled by Stripe—TinyPlan never sees or stores your card details.
• No data is collected from children. This app is designed for and used by parents only.

How we use your data

• To generate and deliver your personalized play plan.
• To authenticate your account via magic link emails.
• To manage your subscription and process payments through Stripe.
• To improve the service based on aggregate, anonymized usage patterns.

We do not sell your data. We do not use your data for advertising.

Third parties

• Stripe — processes payments and manages subscriptions. Stripe receives your email and payment details under their own privacy policy.
• Resend — delivers transactional emails (magic links). Resend receives your email address for delivery purposes only.

We do not share your data with any other third parties.

Cookies and sessions

We use a single httpOnly session cookie to keep you logged in. We also use localStorage to save quiz progress so you can resume if you leave the page. We do not use third-party tracking cookies.

Data retention

Your account data (email, quiz answers, activity logs) is retained for as long as your account is active. If you cancel your subscription and request deletion, we will delete your data within 30 days. Stripe may retain payment records independently as required by law.

Your rights

Depending on where you live, you have rights over your personal data under laws such as the UK GDPR, the California Consumer Privacy Act (CCPA), Canada’s PIPEDA, and the Australian Privacy Act. These include:

• Access — you can request a copy of the data we hold about you.
• Deletion — you can request that we delete your account and all associated data.
• Correction — you can request corrections to any inaccurate data.

To exercise any of these rights, email us at the address below.

Children’s privacy (COPPA)

TinyPlan is a parent-facing service. Children do not create accounts, interact with the app, or provide any data. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email. The “last updated” date at the top of this page reflects the most recent revision.

Contact

For privacy-related questions or requests, email hello@tinyplan.org.