Privacy Notice

1. Who we are

Totland is operated by Ryan Littlejohn, an individual based in Texas, United States. For the purposes of applicable data protection laws, Ryan Littlejohn is the data controller of the personal data described in this notice.

Totland is designed privacy-first for children: all gameplay, progress, rewards, and learning profiles are stored locally on the device and are never transmitted to us. We do not knowingly collect any personal data from children. The only personal data we process belongs to the parent or guardian who creates an account to manage a subscription.

2. Data we collect

• Account data (parents): email address and authentication credentials when you create a parent account, including sign-in via Google if you choose it.
• Subscription data: your subscription status, plan, billing period dates, and Paddle customer and subscription identifiers, so we can activate and maintain your Premium access. Payment card details are collected and processed by Paddle, not by us.
• Support messages: if you contact us, we receive the content of your message and your contact details.
• Technical data: basic device and log information (such as IP address and error logs) needed to keep the service secure and running.

We do not collect children’s names, ages, voice recordings, photos, gameplay history, or usage analytics from the child experience.

3. Why we use it (purposes and legal bases)

• Creating and managing your account — performance of our contract with you.
• Providing Premium access, including verifying your subscription status and restoring purchases — performance of our contract with you.
• Security and fraud prevention — our legitimate interest in keeping the service safe.
• Customer support — our legitimate interest in responding to your requests.
• Legal and tax obligations — compliance with laws that apply to us.

We do not use your data for advertising, and we do not send marketing emails without your consent.

4. Who we share data with

• Paddle (Merchant of Record): Paddle processes the sale of Totland Premium, including payments, subscription management, tax compliance, and invoicing. See Paddle’s privacy policy.
• Service providers: hosting, authentication, and database providers that process data on our behalf under contract, solely to operate the service.
• Professional advisers (legal, accounting) where necessary.
• Authorities where disclosure is required by law.

We never sell personal data.

5. International transfers

Our service providers (including Paddle and our hosting providers) may process data outside your state or country, including in the United States and other jurisdictions. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses or adequacy decisions.

6. Retention

We keep your account and subscription data for as long as your account is active and as needed to meet legal, tax, and accounting obligations. When data is no longer needed, it is deleted or anonymised. Child play data lives only on your device and is removed when you delete the app or clear its data.

7. Your rights

Depending on where you live (including under US state privacy laws such as the Texas Data Privacy and Security Act, and the GDPR for UK/EEA users), you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data;
• restrict or object to certain processing;
• data portability;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority or your state attorney general.

To exercise any of these rights, contact us through the app’s parent section. We respond to verified requests within one month (or the period required by applicable law).

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and row-level security on our databases. Payment data is handled by Paddle under PCI-DSS-compliant processes.

9. Cookies and local storage

Totland uses essential storage only: local storage on your device to keep you signed in and to save children’s progress and settings. We do not use analytics or marketing cookies or third-party trackers. You can clear this storage at any time through your browser settings.

10. Changes and contact

We may update this notice from time to time and will post the new version here with an updated date. For privacy questions or requests, contact us through the app’s parent section.