Keeping your child safe
Tiny Sagas is built for families. Our platform delivers personalised audio stories and learning content to children aged 4–12 through screen-free devices. Here is exactly how we protect your child — and what we do with their data.
Our commitments to you
Audio-only. No screens.
Your child interacts with Tiny Sagas through screen-free speakers and Yoto card players — not a tablet or phone. Research consistently shows audio-based interaction is the lowest-risk form of digital engagement for children.
Children never type or sign in.
Your child has no account, no login, and no way to enter text. They press a physical button — left or right. All account management, consent, and data choices belong to you, the adult.
Minimal data, clear purpose.
We store only what we need to personalise the experience: your child's name, age, interests, and their button-press responses. We never store emotional distress signals, health data, or family situation disclosures.
Data has a shelf life.
Most data about your child expires automatically. Daily mood check-ins are deleted after 24 hours. Learning progress data rolls off after 30–90 days. Only preferences and a few permanent facts are kept until you delete them.
You stay in control.
From your parent dashboard you can view what we know about your child, change it, or delete it entirely at any time. No forms, no waiting periods, no automated refusals.
Content designed by age stage.
Stories and detective mysteries are crafted for children's developmental stages — from 4-year-olds who need short, concrete, magical content to 12-year-olds who want genuine challenge. All crimes in our detective world are misunderstandings, never violence.
What we store about your child
Every item below is tied to your family account and is only used to personalise your child's experience.
| What | How it gets there | Kept for |
|---|---|---|
| First name | You enter it | Until you delete it |
| Age | You enter it | Until you delete it |
| Friend names | You enter / button-press response | Until you delete it |
| Interests & preferences | You enter / button-press response | Until you delete it |
| Learning progress (e.g. times-tables) | Button-press answers | 30–90 days |
| Daily mood check-in | Button-press answer | 24 hours |
| Story choices (Adventures) | Button-press at branch points | 30 days |
| Detective case history | Playing the Detective Series | 90 days |
| Q&A question answers | Button-press | Configurable by you |
Privacy Policy
Last updated: May 2025 · Tiny Sagas Ltd
1. Who we are
Tiny Sagas Ltd is the data controller for all personal data processed through this platform. We are incorporated in England and Wales. Our registered office address and contact details are available on request at privacy@tinysagas.com.
Our platform is a service for adults. You must be 18 or older to create an account. The audio content we generate may be experienced by children in your household aged 4–12 on screen-free devices you control. We do not permit children to create accounts or interact directly with our platform.
2. What data we collect and why
About you (the account holder)
- Email address — to create your account and send service updates
- Payment information — processed by our payment provider; we do not store card numbers
- Device information and usage analytics — to improve the service and diagnose problems
About children in your household
We collect limited, purpose-specific data about children solely to personalise the audio content they hear. This data is always entered or authorised by you. The full list and retention periods are in the table above. We never collect this data directly from children.
3. Our legal basis for processing
- Contract performance — processing your account data to deliver the service you signed up for.
- Legitimate interests — analytics and service improvement, where these do not override your rights.
- Your consent — for any optional communications or features beyond the core service.
- Parental authorisation for child data — by entering child data in your parent dashboard, you are providing the verifiable parental consent required under COPPA and the UK Children's Code for any data relating to children under 13.
4. Children's privacy — COPPA & UK Children's Code
We take children's privacy seriously and comply with the US Children's Online Privacy Protection Act (COPPA) and the UK Information Commissioner's Office Age Appropriate Design Code (Children's Code).
- We do not knowingly allow children to create accounts or provide data directly.
- All child data is entered by the parent or guardian through the adult account.
- We do not serve advertising to children or use child data for profiling.
- Child data is not shared with third parties except as required to deliver the service (e.g. audio device providers).
- If you believe a child under 13 has provided personal data without your consent, please contact privacy@tinysagas.com and we will delete it promptly.
5. How long we keep data
Account data is retained for as long as your account is active and for a reasonable period thereafter in case of disputes. Child personalisation data follows the retention periods set out in the table above — most expires automatically. You can delete any or all child data at any time from your parent dashboard.
6. Who we share data with
We share data only as necessary to operate the service:
- Audio device providers (e.g. Yoto, Amazon) — to deliver content to your child's device
- Cloud infrastructure (Google Cloud Platform, Cloudflare) — to host and deliver our service
- Payment processor — to handle subscription billing
- Analytics — anonymised, aggregated usage data only
We do not sell your data or your child's data. Ever.
7. International transfers
Our servers are primarily located in the United Kingdom and European Economic Area. Where data is processed outside these regions (for example, by a third-party provider), we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V.
8. Your rights
Under UK GDPR and, where applicable, GDPR and CCPA, you have the right to:
- Access — request a copy of the data we hold about you and your child
- Correction — ask us to fix inaccurate data
- Deletion — ask us to delete your data or your child's data
- Portability — receive your data in a portable format
- Objection — object to processing based on legitimate interests
- Restriction — ask us to pause processing while a dispute is resolved
To exercise any of these rights, email privacy@tinysagas.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.
9. Cookies
We use strictly necessary cookies to keep you signed in and a small number of analytics cookies to understand how the service is used. We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated to you by email. The date at the top of this page shows when it was last updated.
11. Contact us
For any privacy or child safety questions, email us at privacy@tinysagas.com. We aim to respond within 5 business days.