Privacy Policy

Tiny & Milo is made by Open Mind Studio LLC, an independent studio registered in Georgia, which operates the website openmind.kids and the YouTube channel Tiny and Milo Adventures. Tiny & Milo is an educational app for children aged roughly 3 to 7, with short animated stories, quizzes and mini-games.

For the purposes of data-protection law, Open Mind Studio LLC is the data controller. You can reach us about anything in this policy at contact@openmind.kids.

Because our audience is children, we built the app around one principle: collect as little data as humanly possible. This policy explains, in plain English, what that means in practice.

We do not collect any of the following from children (or parents) using Tiny & Milo:

• Personal information such as a name, email address, postal address, phone number, date of birth or photograph
• Account credentials: the app has no sign-up, login or user profiles
• Location data of any kind (no GPS and no IP-based geolocation)
• Access to contacts, microphone, camera or the photo library
• Behavioural or advertising identifiers, cross-app tracking or profiling data
• Anything we sell, rent or share with advertisers or data brokers, because there is nothing to share

To work at all, the app handles a small amount of non-personal information:

• Subscription status through Apple. When a parent starts a Premium trial or subscription, Apple processes the payment. The app receives only Apple's anonymised receipt and transaction identifiers needed to confirm that Premium is active. We never see names, emails or payment details.
• Crash reports and diagnostics through Apple, only if the parent has enabled "Share with App Developers" in iOS Settings. These reports are aggregated by Apple and contain no personal information.
• On-device settings and progress, such as sound and language preferences, the parent PIN, and which stickers have been earned. These are stored only on the device, are never uploaded to us, and disappear when the app is deleted.
• Content and configuration updates. The app may download new stories, games or configuration from our servers or a content delivery network. Like any internet request, this exposes the device's IP address to the server for the duration of the request. We use such server logs only for security and troubleshooting, keep them for a limited time, and never link them to a child or a household.

Tiny & Milo does not include any third-party advertising or analytics SDK. There is no Google Analytics, no Meta SDK, no ad network and no cross-app tracking. The app has no chat, comments, social sharing or user-generated content, and no external links inside the child-facing areas.

The only third party involved in running the app is Apple, which distributes the app and processes subscriptions under its own privacy policy. If we ever introduce another service provider, we will update this policy first and, where the change is material, tell parents inside the app before it takes effect.

Tiny & Milo includes a Parents area protected by a parent gate. Everything a child should not be able to change on their own (subscriptions, restoring purchases, settings and any links that leave the app) sits behind that gate.

You can further limit screen time, purchases and downloads using Apple's built-in Screen Time and Ask to Buy features on the device.

All payments are processed by Apple through the App Store. We never see, store or have access to card or banking information. Parents manage, cancel or restore subscriptions directly in their Apple ID settings. See our Terms of Use for the full subscription disclosures.

openmind.kids is a simple informational site. We do not use advertising pixels or set any cookies of our own. Our hosting provider keeps standard, short-lived server logs (including IP addresses) for security.

To understand which pages and buttons are useful, we use PostHog, a privacy-focused analytics service hosted in the European Union. It records pages viewed, clicks, browser and device type, and an approximate country derived from your IP address. It stores a random identifier in your browser's local storage rather than a cookie, does not record what you type, and we keep session recording switched off. It also honours your browser's "Do Not Track" setting. You can switch it off for this browser at any time:

Turn off analytics in this browser

A few resources on the site are loaded from third parties: web fonts from Google Fonts and video thumbnails from YouTube. Loading them shares your IP address with those providers under their own privacy policies. Links to the App Store and YouTube take you to those services, where Apple's and Google's policies apply.

Our YouTube channel is operated on YouTube and marked as content made for kids. Any data YouTube collects there is governed by Google's privacy policy, not ours.

Tiny & Milo is designed for children and is listed in the Kids category of the App Store. We comply with the U.S. Children's Online Privacy Protection Act (COPPA) and Apple's guidelines for kids' apps.

Because the app does not collect personal information from anyone, no verifiable parental consent is required to use it. If we ever wanted to collect personal information from a child, we would obtain verifiable parental consent first.

If you believe a child has somehow sent us personal information, contact us at contact@openmind.kids and we will delete it promptly.

Under COPPA, the EU and UK GDPR (including the rules for children, often called GDPR-K) and the UK Age Appropriate Design Code, parents and guardians can:

• Ask what information, if any, we hold in connection with their child
• Ask us to correct or delete that information
• Refuse any further collection or use of their child's information
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email contact@openmind.kids. We may ask a simple question to confirm you are the parent or guardian, and we respond within 30 days at the latest, usually much sooner. In almost every case the honest answer will be that we hold nothing at all.

If you are in the European Economic Area, the United Kingdom or Switzerland, the limited processing described above rests on the following legal bases:

• Performance of a contract: confirming an active subscription so we can unlock Premium
• Legitimate interests: keeping our servers secure and fixing bugs
• Consent: crash reports, which you control in iOS Settings

Open Mind Studio LLC operates from Georgia, so the minimal information above may be processed there, and by Apple in the regions where Apple operates. In addition to the rights listed in the previous section, you have the right to data portability, to object to processing based on legitimate interests, and to lodge a complaint with your local data-protection authority.

The best protection is not holding data in the first place, which is why we collect so little. Beyond that, all traffic between the app, our servers and Apple is encrypted in transit (HTTPS), we rely on Apple's platform security for purchases and diagnostics, and access to our systems is limited to the people who need it.

• On-device settings and progress: until the app is deleted from the device
• Subscription receipts: for as long as needed to validate an active subscription, then no longer than legally required for accounting
• Server logs: a limited period for security purposes, after which they are deleted automatically
• Support emails: for as long as needed to help you, then deleted on request

We may update this policy from time to time. Any change will be posted here with a new "Last updated" date. If a change materially affects how children's information is handled, we will tell parents inside the app before it takes effect.

Open Mind Studio LLC, Georgia. For any privacy question or request, email contact@openmind.kids.