Privacy Policy

Tovi is designed for parents, not children. Your child never interacts with the app directly. We are a tool for grown-ups — parents, caregivers, grandparents — who want better activity ideas.

Because children don't use Tovi, and we collect no personal information from children, Tovi is compliant with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect any data from anyone under 13.

Email address — to send you daily activities and important account updates. Nothing else.

Child's age range — so we can match activities to your child's developmental stage. We store an age range (e.g. “2–3 years”), not a birthdate.

Account password — stored securely using industry-standard encryption. We never see or store your password in plain text.

Your data is stored on secure, encrypted servers. We use the following third-party services:

• •Clerk — authentication and account management
• •Resend — sending your daily activity emails
• •Cloudflare — website hosting and security

We do not share your data with advertisers, data brokers, or any third party not listed above.

You can request deletion of all your data at any time. Simply email [email protected] with the subject line “Delete my data” and we will:

• •Delete your account and all associated data
• •Remove your email from all mailing lists
• •Confirm deletion within 48 hours

We use essential cookies only — the minimum needed to keep you logged in. We do not use tracking cookies, advertising pixels, or retargeting scripts.

We may use privacy-friendly analytics to understand how parents use Tovi so we can improve the experience. This data is aggregated and never linked to individual users.

If we make meaningful changes to this privacy policy, we will notify you by email before the changes take effect. We will never quietly reduce your privacy protections.