Privacy Notice

From Joy To You, Inc. (“TickTock Club”) is the data controller for the personal data described here. We decide how and why your data is used, and we keep it to the minimum needed to run the app.

What we collect and why

• Account data (grown-up email, display name, login credentials) — to create and secure your account and provide the service. Legal basis: performance of our contract with you.
• Subscription data (plan, status, billing period dates, payment provider identifiers) — to give you access to the plan you bought. Legal basis: contract.
• Child personalisation (first name or nickname, avatar, stars, streaks, timers and countdowns) — stored on your own device by default, so we can personalise the experience. Please use a first name or nickname only.
• Technical data (device type, IP address, error logs) — for security, fraud prevention and fixing problems. Legal basis: our legitimate interest in a safe, working service.
• Support messages — to answer your questions. Legal basis: contract and legitimate interest.

Who we share data with

• Service providers who host our app, database and error logging.
• Paddle, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as legal and accounting, where needed.
• Authorities where we are required to do so by law.

We do not sell personal data and we do not show advertising to children.

International transfers

Some providers may process data outside the UK/EEA. Where that happens we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

Account and subscription data is kept while your account is active and for up to 6 years afterwards where needed for tax and legal records. Everything else is deleted or anonymised once it is no longer needed. Data saved on your device can be cleared at any time from your browser.

Your rights

Depending on where you live you may ask for access, correction, deletion, restriction, portability, or object to processing, and you may withdraw consent at any time. Contact us and we will respond within one month. You can also complain to your local data protection authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level security on our database, so that each account can only reach its own data.

Cookies and local storage

We use essential cookies and local storage to keep you signed in and to remember settings such as voice narration, your child’s name and avatar, stars and countdowns. We do not use advertising cookies. You can clear these at any time in your browser settings.