Trust & Compliance

Privacy Policy

Last updated: May 2, 2026

Our commitment to children and families

Tiny Tools for Big Feelings is built specifically for children ages 3–8 and the educators and families who serve them. We design every feature with FERPA, COPPA, and state student-privacy laws in mind. We do not sell student data. Ever.

What we collect

From district & educator users: name, work email, district name, role, and any information voluntarily submitted through forms or demos.

From students: we minimize student data collection. Where required for program operation, we collect only what is necessary (e.g., aggregated, de-identified engagement data) and only with district authorization.

Automatically: standard server logs (IP, browser, page visited) used for security, debugging, and aggregate analytics. We do not use third-party advertising trackers.

How we use information

  • To deliver and improve the educational service
  • To respond to district and educator inquiries
  • To produce de-identified, aggregate reports for districts
  • To meet legal, safety, and security obligations

We never use student data to target advertising.

FERPA & COPPA compliance

We act as a "school official" under FERPA when serving districts and use student information only for authorized educational purposes. For users under 13, we comply with COPPA by collecting only what is necessary for the educational service, with verifiable school or parental consent obtained by the district.

Sharing & third parties

We share information only with vetted infrastructure providers (hosting, database, email) under contractual confidentiality. We do not sell information. We do not share information for marketing purposes. We may disclose information when required by law.

Data retention & deletion

District lead inquiries are retained while the relationship is active. Districts may request deletion of their data at any time by emailing tinytoolsforbigfeelings@outlook.net. We delete data within 30 days of a verified request, except where law requires retention.

Security

We use encryption in transit (HTTPS), encryption at rest, role-based access, and row-level database security to protect information. No system is perfectly secure, but we follow industry-standard practices for early-childhood education platforms.

Your rights

You may request access to, correction of, or deletion of personal information at any time. Parents and guardians may request review or deletion of their child's information through the child's school district.

Contact

Questions? Email tinytoolsforbigfeelings@outlook.net. We respond within one business day.

Note: This policy is provided as a starting template. We recommend having qualified legal counsel review and customize it for your specific data practices before signing district contracts.