Privacy Policy
đ Effective Date: January 22, 2026
Introduction
Welcome to Tinyverse. We are committed to protecting your privacy and providing a safe, creative environment for children. This policy explains how we handle data when you use our storytelling platform.
COPPA & Child Safety
Tinyverse adheres to the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn we have collected such info without consent, we will delete it immediately. For school-based or clinical use, schools and institutions may provide consent on behalf of parents under the COPPA school consent exception, provided a signed Data Privacy Agreement (DPA) is in place with Tinyverse. Contact hello@tinyverse.ai to request a DPA.
Parental Consent
Verifiable permission is required before any child-specific data processing.
Direct Notice
Parents are notified of our collection practices before their child uses the app.
FERPA & School Use
When Tinyverse is used by schools, school districts, or educational staff, we comply with the Family Educational Rights and Privacy Act (FERPA). In these contexts:
- âĸStaff accounts (BCBAs, RBTs, teachers, and other educators) are created and managed by the educational institution.
- âĸStudent information entered by staff is treated as an education record under FERPA.
- âĸWe do not disclose student education records to third parties without the consent of the educational institution, except as permitted by FERPA.
- âĸEducational institutions retain control over student data and may request deletion of any student records at any time by contacting hello@tinyverse.ai.
- âĸTinyverse does not use student data for advertising, marketing, or any commercial purpose.
School Accounts
Educator accounts are managed by the institution, not by individual parents.
Student Data Control
Schools may request deletion of all associated student data at any time.
Information We Collect
We collect limited data necessary for providing our services.
Account Details
Account holder email addresses, usernames, and hashed passwords for authentication. For school accounts, this includes educator email addresses provided by the institution.
App Usage
Device type, operating system, and interaction metrics to improve experience.
Generated Content
Stories, prompts, and temporary image uploads used for character generation. When used in educational settings, staff may enter a student's first name to personalize story content. Staff may optionally provide a text description of a student's appearance (e.g. hair color, skin tone) as an alternative to a photo, to generate an illustrated character that looks closer to the real student. Staff may also optionally enter character traits and personality descriptions to make the story more personalized and relatable to the specific student. No other student identifying information is required or collected.
How We Use Info
We use collected information to provide, maintain, and improve Tinyverse services, including personalizing story content and ensuring app security.
Sharing Info
We do not sell your personal data. We share information only with service providers who help us operate, or when required by law.
Our current service providers (subprocessors) include:
- âĸGoogle Gemini API â used for AI story and image generation. Data processed: story prompts and image generation requests. No student names or personal identifiers are included in API calls.
- âĸSupabase â used for secure data storage and authentication.
- âĸStripe â used for payment processing (staff/parent accounts only).
We do not share student data with any advertising networks, analytics services, or data brokers.
AI Subprocessors
Tinyverse uses Google Gemini API to generate story text and character illustrations. When photos are uploaded for character generation, they are transmitted to Google's API solely for the purpose of generating the requested story content. Google does not retain or train on this data beyond the processing of each request, in accordance with our API data processing agreement. We maintain signed data processing agreements with all subprocessors that handle user data.
Data Security
We implement industry-standard encryption and security measures to protect your information from unauthorized access or disclosure.
Data Retention
We retain account data as long as your account is active. Inactive accounts and associated story assets are purged after 24 months of total inactivity. Institutions with a signed DPA may request deletion of all associated student data at any time by contacting hello@tinyverse.ai. Uploaded photos used for story generation are permanently deleted immediately after the story is created. They are never stored, retained, or used for any other purpose.
Your Rights
You have the right to access, correct, or delete your personal information. Parents can review or request deletion of their child's data at any time.
International Users
Data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for cross-border data transfers.
Cookies
We use cookies for essential app functions and performance analytics. We do not use tracking cookies for behavioral advertising.
Third-Party Links
Our app may contain links to parent-focused support sites. We are not responsible for the privacy practices of external websites.
Changes to Policy
We may update this policy periodically. We will notify parents of significant changes via email or through a prominent notice in the app.
Contact Us
If you have questions about this policy or our privacy practices, contact us at hello@tinyverse.ai.
For school districts and educational institutions seeking a Data Processing Agreement (DPA) or FERPA compliance documentation, please contact hello@tinyverse.ai with the subject line "District Privacy Request."
For institutional and school district use, a Data Privacy Agreement is required. Contact hello@tinyverse.ai to request one.
Privacy Concerns?
If you have any questions, please reach out to us at hello@tinyverse.ai.