What we hold, and what we do not.

The website

Your quiz answers stay on your device. They live in this tab’s session storage and are never sent to us. The plan is computed in your browser, which is also why it appears instantly and why changing an answer changes it in front of you.

Your email, if you give us one. Used to send the plan, and to send the renewal notice if you ever subscribe. Never sold, never uploaded to an ad platform as a targeting list.

Advertising measurement. If you arrived from an ad, the ad platform sets its own cookie and we send it a small event server-side saying that a step happened — the step name, and for a purchase the amount. Nothing about your child is ever in one of those payloads: not their name, not their age, not what they can or cannot say. That is enforced by a closed list in the code rather than by a policy.

You can block all of it and the funnel still works. Nothing here is required to see the plan.

The app

No audio. This product records none, anywhere. No service in it accepts an audio buffer, there is no recogniser plugged in, and there is no object store configured to put one in.

The photo never leaves the device. Some games put a child’s face on a cartoon body. The picture is taken with an adult present, cropped on the device, and stored on the device. There is no column, no URL, no hash and no bucket for it on our side, and the sync request is built field by field from an allow-list so one cannot arrive by somebody passing a whole object through.

What is stored per child: a display name, an age band, a rewards blob (stars per game, dates played) and a progress record. That is the whole list, and the children’s privacy page goes through it properly.

What is stored per adult: an account id we generate, the identity provider’s subject id, and the date it was created. Nothing in our database holds a password, an email or a name for you — our identity provider holds those.

Who else sees it

• Our identity provider, for your login.
• Stripe, for payments. We never see or store a card number.
• Our hosting and database providers, as processors.
• Ad platforms, for the events described above and nothing else.

We do not sell personal information and we do not share it for cross-context behavioural advertising beyond the measurement events named above.

Deleting it

One action in your account deletes the account, its children and all of their state. It is not a request queue; it deletes the rows. If you would rather ask a person, email privacy@sayyay.app.

Contact

privacy@sayyay.app. Marketsights, trading as Say Yay.