Privacy Policy

Last updated: April 2026

Hi there!

Tiny Words is a vocabulary app for toddlers, built by a dad for his 2-year-old. We take your family's privacy seriously. Here's what you need to know:

What We Store on Your Device

Most of your data stays right on your device — we don't see it:

  • Child profiles — names, ages, and avatar choices
  • Learning progress — which words your child has learned
  • Voice recordings — recordings of your child saying words (optional feature)
  • Streaks — learning streak data

This data is stored securely on your iOS device. If you delete the app without signing in, this data will be lost.

What We Store in the Cloud

When you sign in with your Apple or Google account, we store:

  • Account identifier — a unique ID from Apple or Google (we don't store your password)
  • Email address — only if provided by your sign-in provider
  • Child profiles and progress — synced across your devices
  • Voice recordings — if you choose to record (encrypted in transit and at rest)
  • Subscription status — whether you've upgraded to Pro

We use a secure PostgreSQL database hosted on encrypted servers. Authentication is handled by Better Auth, an open-source authentication library.

Sign In with Apple / Google

We offer sign-in through Apple and Google for your convenience:

  • Sign in with Apple — You can choose to hide your email. We only receive the information you allow.
  • Sign in with Google — We receive your basic profile info (name, email) as permitted by Google.

We never receive or store your Apple ID or Google password.

Payments & Subscriptions

Subscriptions are processed entirely through Apple's App Store:

  • We never see your payment details — Apple handles all billing
  • We receive confirmation of your subscription status from Apple
  • Manage or cancel subscriptions in your iPhone Settings → Apple ID → Subscriptions

See Apple's Privacy Policy for how they handle payment information.

Analytics

We use PostHog for privacy-friendly analytics to understand how the app is used and improve it. We collect:

  • Anonymous usage events (e.g., "word learned", "app opened")
  • Device type and iOS version
  • App version

We do not collect your child's name, the specific words learned, or any personal identifiers in analytics. PostHog data is hosted in the EU and subject to GDPR protections.

Children's Privacy (COPPA)

Tiny Words is designed for parents to use with their children. We do not:

  • Collect personal information directly from children
  • Show any advertising
  • Allow children to make purchases
  • Include social features, chat, or links to social networks
  • Share children's data with third parties

All data about children (names, progress, recordings) is controlled by the parent and stored locally unless the parent chooses to sync via their account.

Data Security

We take security seriously:

  • All data transmitted between the app and our servers is encrypted (HTTPS/TLS)
  • Authentication tokens are stored securely in the iOS Keychain
  • Database access is restricted and encrypted at rest
  • We don't store passwords — authentication is handled by Apple/Google

Deleting Your Data

Local data: Delete the app from your device to remove all local data.

Cloud data: If you have an account and want all your data deleted from our servers, email us at chris@dadquests.app. We'll delete your account and all associated data within 30 days.

Contact Us

Questions? Concerns? Just want to say hi? Email us at chris@dadquests.app

Changes

We may update this policy from time to time. Material changes will be communicated through the app. Continued use of Tiny Words after changes constitutes acceptance of the updated policy.