Last updated: September 2026
When you create a TinySmile account, we collect your email address and the information you provide during setup: your child's nickname (we recommend not using their real name), age, morning and evening brushing times, a chosen cartoon buddy and its name, and your child's favorite color, animal, and activity (chosen from fixed lists). We also store brushing session records and collected rewards.
We use the information collected solely to operate the app's core features, including personalizing jokes, facts, and the buddy character, and tracking brushing streaks for badges.
We do not share, sell, rent, or disclose children's personal information to any third party for any purpose, including advertising. Support ticket submissions (name, email, message) are stored securely and used solely to respond to your inquiry.
We maintain a written information security program appropriate to the sensitivity of this data, including encryption in transit and at rest and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
TinySmile is directed to children under 13, and we comply with the Children's Online Privacy Protection Act (COPPA). Information we collect: nickname, age, brushing times, a chosen cartoon buddy and its name, and selections from fixed lists of favorite color, animal, and activity. Who provides it: a parent or guardian creates the account and provides initial information; the child then makes selections (buddy, favorites) within the account. How we use it: solely to operate the app's core features, including personalizing jokes, facts, and the buddy character, and tracking brushing streaks for badges. Third parties: we do not share, sell, rent, or disclose children's personal information to any third party for any purpose, including advertising. Retention: we retain this information only as long as the account is active, and delete it within 30 days of account deletion or 12 months of inactivity. Security: we maintain a written information security program appropriate to the sensitivity of this data, including encryption in transit and at rest and access controls. Parental rights: a parent may review, correct, or delete their child's information, or revoke consent entirely, at any time via account settings or by contacting info@overjet.ai. Revoking consent will stop further collection and result in deletion of existing data. Contact: Overjet, info@overjet.ai.
You have the right to access, correct, or delete your personal data. You can delete your account and all associated data, including child profiles, brushing sessions, and collected rewards, at any time through the Parent Dashboard. You can also revoke your parental consent at any time, which will stop further collection and delete the existing data. Account deletion is permanent and cannot be undone.
We retain your data for as long as your account is active. We delete all associated data within 30 days of account deletion, and within 30 days after the account has been inactive for 12 months.
We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "last updated" date at the bottom of this page.
If you have questions about this Privacy Policy, please contact us through our Support page.