1. Who we are
Totland is operated by Ryan Littlejohn, an individual based in Texas, United States. For the purposes of applicable data protection laws, Ryan Littlejohn is the data controller of the personal data described in this notice.
Totland is designed privacy-first for children. There are no child accounts, no advertising, and no third-party tracking. Gameplay, progress, rewards, and learning profiles are stored on the device by default. The only data that leaves the device is described below.
2. Data we collect
- Account data (parents): email address and authentication details when you create a parent account, including sign-in with Google or Apple if you choose it. We ask you to verify your email address.
- Child profiles, only if you sync them: if you are signed in and use family profiles, the nickname, age and learning progress you entered for each child are saved to your parent account so your devices stay in step. This is optional — if you never sign in, child profiles stay on the device only. Please use a nickname rather than a full name.
- Subscription data: your subscription status, plan, billing period dates, and the customer and subscription identifiers from Paddle or, for in-app purchases, Apple via RevenueCat, so we can activate and maintain your Premium access. Payment card details are collected and processed by Paddle or Apple, not by us.
- Support messages: if you use the contact form or email us, we store and receive your name, email address and the content of your message.
- Spoken text for the voice: to speak a line aloud in our narrated voice, the wording of that line (and the language) is sent to our speech provider, which returns the audio. The audio is saved and reused, so the same line is never sent twice. No microphone is used and no child’s voice is ever recorded or transmitted.
- Technical data: basic device and log information (such as IP address and error logs) needed to keep the service secure and running, plus anonymous crash and performance reports (error text and timing) that contain no personal or child data. To prevent abuse of the voice service, our server stores a one-way hash of the requesting IP address each time a new voice line is created; it is deleted after 24 hours.
We do not collect children’s full names, voice recordings, photos, contact details, or advertising identifiers, and we do not run usage analytics inside the child experience.
3. Why we use it (purposes and legal bases)
- Creating and managing your account — performance of our contract with you.
- Providing Premium access, including verifying your subscription status and restoring purchases — performance of our contract with you.
- Syncing child profiles you choose to save — performance of our contract with you.
- Generating spoken narration — performance of our contract with you and our legitimate interest in an accessible, pre-reader-friendly app.
- Security, crash reporting and fraud prevention — our legitimate interest in keeping the service safe and working.
- Customer support — our legitimate interest in responding to your requests.
- Legal and tax obligations — compliance with laws that apply to us.
We do not use your data for advertising, and we do not send marketing emails without your consent.
4. Who we share data with
- Paddle (Merchant of Record, website purchases): Paddle processes the sale of Totland Premium bought on the website, including payments, subscription management, tax compliance, and invoicing. See Paddle’s privacy policy.
- Apple and RevenueCat (in-app purchases): purchases made in the iPhone or iPad app are sold by Apple; RevenueCat checks the App Store receipt so Premium unlocks on your devices. RevenueCat receives a random anonymous ID it creates, or, if you sign in, our random account ID. We do not send it your email, name or any advertising identifier. Apple and RevenueCat keep their own purchase records under their own privacy policies.
- ElevenLabs (narration voice): our server, not the app, sends ElevenLabs only the text of a narration line and its language, and receives the audio. ElevenLabs receives no user or device data.
- Lovable Cloud (hosting, database and sign-in): hosts the Totland website and server and stores parent accounts, synced child profiles, subscription records and support messages, in the United States, on our behalf and solely to operate the service.
- Email delivery: confirmations, account emails and support notifications are sent from our notify.totland.app sending domain through Lovable Cloud’s email service.
- Professional advisers (legal, accounting) where necessary.
- Authorities where disclosure is required by law.
We never sell personal data.
5. International transfers
Our service providers may process data outside your state or country, including in the United States and other jurisdictions. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses or adequacy decisions.
6. Retention
We keep your account, synced child profiles and subscription data for as long as your account is active and as needed to meet legal, tax, and accounting obligations. Support messages are kept while we handle your request and for a reasonable period afterwards. Generated voice audio is stored as reusable files keyed to the wording spoken, and contains no information about who listened to it. The one-way hashes of IP addresses used to limit new voice requests are deleted automatically after 24 hours. Crash and error reports are written to our server logs and are not stored in our database. Child play data stored on the device is removed when you delete the app or clear its data.
7. Deleting your account
You can delete your account yourself at any time: open the app, go to Parents → Subscription → Your account, and confirm. This permanently removes your parent account and sign-in, any synced child profiles, your subscription record with us, and any support messages you sent while signed in. It does not remove: play progress and stars stored on your device (delete the app or clear its data for that); support messages sent while signed out (ask us and we will delete them); or the purchase records that Apple, Google, RevenueCat and Paddle keep under their own policies. If a subscription is still billing, cancel it first with Apple, Google or Paddle, since deleting your account here does not cancel billing held by them. You can also ask us to delete your data through the contact page.
8. Your rights
Depending on where you live (including under US state privacy laws such as the Texas Data Privacy and Security Act, and the GDPR for UK/EEA users), you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data;
- restrict or object to certain processing;
- data portability;
- withdraw consent where processing is based on consent;
- lodge a complaint with a supervisory authority or your state attorney general.
To exercise any of these rights, use our contact page or email Support@totland.app. We respond to verified requests within one month (or the period required by applicable law).
9. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, private storage, and row-level security on our databases. Payment data is handled by Paddle or Apple under their own compliant processes.
10. Cookies and local storage
Totland uses essential storage only: local storage on your device to keep you signed in and to save children’s progress and settings, and a local cache of downloaded voice audio and activity content so the app works quickly and offline with Premium. We do not use analytics or marketing cookies or third-party trackers. You can clear this storage at any time through your browser or device settings.
11. Changes and contact
We may update this notice from time to time and will post the new version here with an updated date. For privacy questions or requests, use our contact page or email Support@totland.app.