Privacy policy

Tiny Totts (“we”, “us”) runs this website and the Tiny Totts app, and decides how the information in them is used. We follow the Nigeria Data Protection Act 2023 and, for families in the United Kingdom and the European Union, the UK and EU General Data Protection Regulation.

Questions about privacy go to tiny1totts@gmail.com.

Parents and guardians

• Your name, email address, phone number, password (stored scrambled, never readable) and timezone.
• What you book, reschedule and cancel; your plans, payments and extra hours (amounts, dates and references, never card numbers).
• Messages you send us or your child’s tutor, feedback on classes, complaints, and requests for a tutor.
• Anything you send through the contact form on this website.

Children (given by their parent, see section 3)

• First name, year group, curriculum, subjects and any exam they are preparing for.
• Their lessons, the tutor’s write-ups after class, and your feedback on them.

Tutors

• Name, contact details, profile, photo, subjects and teaching hours.
• Safety checks we carry out before a tutor teaches children, such as criminal-record checks and references.
• Bank details for paying you, and a record of what you have earned and been paid.

Everyone

• Basic technical records needed to run and protect the service, such as sign-in attempts, a log of important changes made in the app, and a record of the emails we send.
• Only if you allow it, Meta’s advertising cookie on our public pages (see section 10).

Children never have their own account and never sign in. A parent or guardian creates the account and adds their child, and acts for them throughout. We only ask for what a tutor needs to teach well.

A child’s tutor sees their first name, year group, curriculum, subjects, exam and anything you choose to tell the tutor, together with their lessons and write-ups. They do not see your payment details. We check every tutor before they teach, and keep safeguarding concerns about a child private from the tutor involved.

• To provide the lessons you ask for: matching and booking tutors, running classes, sending reminders and write-ups, taking payment and paying tutors. We need this to do what you signed up for.
• To keep children safe: checking tutors, handling complaints and concerns, and keeping records of classes. This is both a legal duty and in everyone’s interest.
• To meet legal duties: keeping financial records for tax, and answering lawful requests.
• To run and improve the service: preventing misuse, fixing problems and understanding what families need, in ways you would reasonably expect.
• To see which adverts work: only with your consent, which you can withdraw at any time (section 10).

We do not sell your information, and we do not use children’s information for advertising.

Only with those who help us run Tiny Totts, and only what they need:

• Your child’s tutor, as described in section 3.
• Flutterwave, which takes payments. You enter card details on Flutterwave’s own page; they never reach our servers.
• Resend, which delivers our emails.
• Hetzner, which hosts our servers and database.
• The video platform your tutor uses (for example Zoom, Google Meet or Microsoft Teams), when your child joins a lesson. Their own privacy terms apply there.
• Meta, only if you allow the advertising cookie.
• Authorities, where the law requires it or a child’s safety depends on it.

Our servers are run by Hetzner, a hosting company in Germany. Some of the services above are based in other countries, including the United States and Nigeria. When information leaves the country you are in, we use providers that protect it under recognised safeguards, such as the standard contractual clauses used under UK and EU law.

• Your account and your children’s details: while you use Tiny Totts. If you ask us to close your account, we delete them within 90 days.
• Payment and tax records: 6 years, as the law requires.
• Lesson records and safeguarding records: as long as the law and child-protection guidance require, which can be longer.
• Records of emails we sent: 12 months.
• Tutors’ safety checks and payment records: as long as the law requires after they stop teaching with us.

• Everything travels over an encrypted connection (HTTPS).
• Passwords are stored scrambled so that no one, including us, can read them.
• Card details are handled by Flutterwave and never stored by us.
• Staff see only what their role needs, and important changes are logged.
• Payment service keys saved in the app are stored encrypted.

No system is perfectly secure. If something goes wrong that puts your information at risk, we will tell you and the relevant regulator as the law requires.

You can ask us to:

• see the information we hold about you and your child, and get a copy;
• correct anything that is wrong (most of it you can change yourself in the app);
• delete it, or close your account;
• stop or limit how we use it, or object to a use;
• give it to you in a form you can take elsewhere;
• withdraw consent you gave, such as for the advertising cookie.

Email tiny1totts@gmail.com and we will reply within a month. Some records we must keep by law even if you ask us to delete them, and we will tell you if so.

If you are unhappy with how we have handled your information, you can complain to the Nigeria Data Protection Commission, or in the UK the Information Commissioner’s Office, or the data protection authority where you live. We would appreciate the chance to put it right first.

• Keeping you signed in (needed): one cookie, tinytotts-session, set when you sign in. It lasts up to 7 days, or until you sign out.
• Remembering your choices (needed): your answer to the cookie question is kept in your browser, and so are small markers that stop a sign-up or payment being counted twice. None of these is sent to anyone.
• Advertising(only if you allow it): Meta’s cookie on our home, sign-in and sign-up pages, and, inside your account, a note to Meta when you sign up, book or pay, so we can tell which adverts bring families. Before anything is sent, we remove personal details such as your email or your child’s details from the page address.

You can change your mind at any time: Cookie settings.

When we change this policy we update the date at the top. If a change matters to how we use your information, we will tell account holders by email before it takes effect.

Email tiny1totts@gmail.com. You can also reach us through the contact form on our home page.