The simple version
This short summary is for children and families. A grown-up controls the family account and can help with any questions.
Your profile is not public. There are no public profiles, adverts or social sharing.
The adult creates child profiles and approves stars and rewards.
It reads a pairing QR code. We do not intentionally save or upload camera pictures.
The adult can delete the family account and its saved family information.
1. Who is responsible for your information
My Little Piggy is operated by legal publisher name and postal address to be confirmed before launch (“My Little Piggy”, “we”, “us” or “our”). This operator will be the data controller for the service.
Until a dedicated privacy address is introduced, privacy questions can be sent to hello@mylittlepiggy.com.
2. Who the service is for
An adult creates and controls the family account. The adult can create supervised child profiles and pair a child’s device with one chosen profile. Children do not create independent public accounts and are not asked to publish information publicly.
Use a child’s nickname rather than a full legal name, and avoid putting unnecessary sensitive information into activities, goals, notes or rewards.
3. Information we process
Adult account and family settings
- Adult email address, authentication details and account identifiers.
- Adult display name, chosen character and colour.
- Family currency, time zone, week-start and language-related settings.
Supervised child profiles and family content
- Child name or nickname, character, colour and virtual value per star.
- Activities, completion requests, approvals, stars, nudges and notes.
- Rewards, reward requests, savings goals and virtual Piggy Bank history.
Paired child devices
- Anonymous account identifier, assigned child profile, generic device label and pairing times.
- Temporary pairing codes are stored as hashes and expire.
Website and support
- Optional name, email address and consent when joining launch updates.
- Name, email address, support category, message, and optional device/app details when contacting Support.
- Ordinary security and service logs created by our hosting providers.
On-device information
Session information, language, sound and notice preferences, and identifiers for celebrations already shown may be stored locally on the device.
The website remembers your language choice in browser local storage. You can change it using the language selector or clear it through your browser settings. This preference is separate from the app’s language setting.
A child’s name or nickname and records linked to their profile can be personal information even when no child email address is collected.
No advertising, third-party analytics, behavioural tracking, payment-card collection, real-money transfers, location, contacts, microphone recording, photo-library access or push-notification tokens are included in the current build.
4. Why we use information
- To create, authenticate and protect the adult family account.
- To provide profiles, activities, approvals, stars, goals, rewards and virtual-money records.
- To connect a paired device only to the intended child profile.
- To personalise language, currency, colour and app preferences.
- To send requested launch updates and answer support or deletion requests.
- To prevent misuse, diagnose faults, maintain security and meet legal duties.
The final policy will identify the applicable legal basis for each purpose once the legal publisher and launch jurisdictions are confirmed. Depending on the context, this is expected to include performing the service requested by the adult, legitimate security and support interests, legal obligations, and consent for optional marketing updates.
We do not sell personal information and do not use family information for targeted advertising.
5. Camera access
If a family chooses QR pairing, the child device can ask for camera access to scan the QR code shown on the adult device. Camera frames are processed for barcode recognition and are not intentionally saved or uploaded by My Little Piggy.
Face ID and fingerprint unlock
On supported devices, the adult can use the device’s biometric authentication to return to Adult mode. The operating system checks the face or fingerprint and tells the app whether authentication succeeded. My Little Piggy does not receive or store face images, fingerprints or biometric templates. A paired child device does not need this adult unlock to use its own profile.
6. Children’s information
The adult account holder is responsible for creating and managing child profiles. A paired child device is designed to access only its assigned child’s information, not sibling profiles or adult controls.
My Little Piggy is designed to minimise information about children. We collect no child email or child login details. We process only the minimal child profile and family records needed to run the app, such as a chosen name or nickname and linked activity, star, reward, goal and virtual Piggy Bank records. The only email address required in the app is the adult account holder’s email. We do not ask for a child’s birth date, school, postal address, photograph, location, contacts or payment details. Families should avoid entering sensitive information that is not needed for the app.
The adult notice and consent approach will receive specialist review for children’s privacy requirements in the UK, European countries, the United States and other launch regions.
7. Services that help us operate My Little Piggy
- Supabase provides authentication, database and backend services for adult accounts, paired devices and family records.
- Resend will process website signup and support-form email details when secure email copies are activated.
- Google Fonts currently supplies website typefaces; a browser may send ordinary connection information such as IP address and device/browser information when loading those files.
- Apple and Google process information under their own terms when the app is downloaded from their stores.
Providers may process information only to deliver their services to us under their contractual and legal duties. We may also disclose information when required by law, to protect users or the service, or during a business transfer with appropriate safeguards.
8. International processing
Some providers may process information outside the country where a family lives. The production hosting region and final international-transfer safeguards will be confirmed before launch.
9. How long information is kept
We keep information only for as long as needed to provide the service, protect it, meet legal obligations and handle disputes. Adults can delete their family account from Adult Settings.
Final periods for active accounts, deleted data, backups, security logs, launch subscribers and support messages are still to be confirmed. These periods will be added before this policy becomes final.
10. Account and data deletion
The adult can delete the family account in the app. This removes the adult account and associated family records, including child profiles, activities, stars, virtual ledger entries, goals, rewards, nudges and device pairings, subject to any limited retention explained in the final policy.
Deleting the family account does not automatically remove separate website-update subscriptions, support correspondence or email copies. Contact us to request removal of those records or to stop updates. Any information retained for a legal or security reason must be limited to that purpose and the applicable retention period.
An adult who cannot access the app can use our Account Deletion page to start a verified request.
11. Security
We use encrypted network connections, account authentication, restricted child-device pairing, database access rules and limited service-provider access designed to protect family information. No system can be guaranteed completely secure, so safeguards are reviewed as the service develops.
12. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to or receive a copy of personal information, and to withdraw consent where processing relies on consent. The adult account holder can contact us to make a request.
UK users may have the right to complain to the Information Commissioner’s Office. EEA users may contact their local data-protection authority. The final policy will include the correct lead authority once the legal publisher is confirmed.
13. Changes to this policy
We may update this policy when features, providers or laws change. We will show the updated date and provide any notice or renewed choice required by law.
14. Contact
My Little Piggy
Legal publisher and postal address to be added
hello@mylittlepiggy.com