Common notice for parents and legal guardians
Before we save your child's learning online
Little Keys is operated by MindSync Technologies Pty Ltd, Suite 19, 220 Carr Place, Leederville WA 6007, Australia. For questions about this notice or your child's information, email admin@thelittlekeys.com.
A parent establishes the child's family account. Other caregivers may join by invitation with appropriate authority. Being an adult account holder does not, by itself, give someone permission to act for every child.
You can try the three introductory activities — Make yourself comfy, Find your first C, and Meet C, D & E — without signing in or entering payment details. These are introductory starter activities, not three complete first-month guided visits. The normal fresh guest path keeps its practice progress in that browser. Browser storage can be lost or cleared, and opening the website still involves hosting and security information described in the companion parent notice.
Cloud family accounts are intended for families in Australia and the United States. For the paid family setup described below, a parent creates their adult account and completes the disclosed subscription transaction before adding a child profile. The purchase agreement and permission to save child information are separate decisions. Paying alone does not authorise a child profile, import or caregiver access.
What information cloud learning uses
For the children you authorise, Little Keys may collect and save:
- A nickname, child-profile identifier and family association. A nickname is enough; please do not add a child's address, school, birthday or other unnecessary personal details.
- Lesson answers, played-note and timing results, practice choices, attempts, help/retry information, saved checkpoints, progress, approvals, badges and Garden learning records.
- Note-based compositions, their titles and saved versions, and relevant parent observations or learning reflections.
- Linked device/session identifiers, practice dates, family timezone and curriculum/version information needed to save, synchronise and recover the correct learning records.
These are linked family learning records, not anonymous statistics. Support messages may also contain information you choose to send us. Please avoid sending child photographs, recordings, health information or identity documents that support does not need.
Why we use it and who can receive it
We use the information to provide lessons, save and recover your family's place, show progress and saved work, support your family and protect the service against misuse or faults. Authorised Little Keys personnel may access relevant records for those purposes.
Cloudflare provides hosting, database/storage and security services. Google/Firebase handles adult sign-in. Where service email is enabled, Resend delivers the necessary parent messages and reports delivery status; those messages do not include child audio or detailed lesson history. A private ChatGPT Sites preview may also use OpenAI hosting and account/access controls, which do not provide permission to save a child’s information. If you purchase a subscription, Stripe/Link handles the payment process and related adult transaction information.
Amazon Web Services runs recovery backup jobs and stores encrypted copies of family, adult identity, saved-content and deletion records in Sydney, Australia.
Better Stack provides service checks, failure alerts and filtered error reporting. Its application error reports use its US West region in the United States and are retained for ninety days. Our application error reports contain bounded failure codes, request identifiers, software release details and times, without child names, raw audio, transcripts, request bodies or session replay.
The companion Parent privacy notice explains the active providers, their information handling, browser storage, overseas processing and separate backup-retention stages in more detail. Lesson microphone audio is not sent to those providers for recognition.
Caregiver access is a separate choice. If you authorise an invited caregiver, that adult can access the child profiles, learning progress and saved work made available within your family. Family members can also see one another's account email addresses. Only invite someone you have authority to give access to. Permission for cloud learning does not automatically authorise every future invitation.
We do not sell or rent children's information, use it for child-targeted advertising or AI-model training, or make public child profiles or public child recordings. We do not ask for marketing permission in this process.
The microphone is optional and works locally
You can use the on-screen piano without enabling the microphone. If you enable supported microphone or voice-command features, raw microphone audio and voice-command transcripts are processed on the device and are not uploaded to our servers. Notes, lesson choices and results derived during practice may still become saved learning records when cloud learning is enabled.
“Record my tune” records played notes for playback; it is not an acoustic recording of your room. Prerecorded Fox instructions are different from your child's voice. A browser microphone permission is a device setting, not a substitute for the parental-permission process below.
Your choices
Please read the companion Parent privacy notice, then give the permissions described below. You can authorise cloud learning without authorising optional caregiver access or optional usage analytics. Optional choices are not preselected. Any disclosure that is not integral to the service requires its own appropriate permission; it must not be hidden inside the general service terms.
If you do not complete permission, we will not enable the requested covered cloud learning or import. Your child can still use the three introductory activities without signing in. Choosing not to import existing local progress leaves it in that browser rather than adding it to the cloud family account; clearing browser storage can remove that local copy.
If we collect parent contact information solely to obtain permission and permission is not completed within the request period explained to you, we will delete that permission-request contact record. We will not turn it into a marketing contact. Any independent adult account, service/security processing or transaction record is handled for its own stated purpose under the parent notice.
You may ask to review or correct your child's information, stop further covered collection, withdraw permission or request deletion by emailing admin@thelittlekeys.com. We will check that the request comes from someone authorised to act for that child. You do not have to wait for an inactivity deadline to make a privacy request. Some necessary security, permission or transaction records may need different treatment from learning records, as explained in the parent notice; we will explain the records affected by your request.
Withdrawal stops the cloud features that depend on the withdrawn permission. It does not prevent use of the three introductory activities. Tell us if your request also concerns a paid subscription so we can explain the effect on paid features and renewal and help you make the relevant cancellation choice. Permission is not an instruction to buy anything, and a permission form is not a subscription-cancellation request.
Getting your family started
Sign in using your own adult account. You can choose a plan and review the final price in secure checkout before giving permission to save a child's learning records. Payment confirms your purchased access. It does not give permission for child information or optional sharing.
Read this notice and the parent privacy notice, confirm that you are an adult parent or legal guardian, approve cloud saving, and accept the customer terms. Saving these choices makes the selected permissions effective immediately. There is no separate parent-verification email, waiting period or subscription-renewal check.
Local progress import and caregiver sharing are separate, optional choices. They are not preselected. Each child still needs your explicit confirmation before their profile is created or their progress is imported. A nickname is enough. Choose which device records to import and where to save them; matching nicknames are never merged automatically.
An existing request with the current notices and recorded choices does not need a new payment or email check. Withdrawn permission stays withdrawn. A new family owner must give their own permission. You can review and change your choices or withdraw permission from your parent account.
If you purchase a subscription, checkout shows the amount and currency, recurring price, allowance, renewal and cancellation details before you confirm. A pending or failed payment does not grant paid access. Contact admin@thelittlekeys.com if payment has not been recognised. Do not pay again merely to resolve a setup error.
If you decide not to give the permission needed for paid cloud features, those features cannot be enabled for the child. You can continue using the introductory activities, manage renewal or ask for help with the paid-service implications under the customer terms and applicable rights. Declining child-data permission does not by itself silently cancel the subscription or waive a refund right.
Your permission choices
Read this notice and the Parent privacy notice, then choose the permissions below. Saving them records your consent immediately. It does not itself create a child profile or import practice.
- [ ] I am at least 18, the parent or legal guardian of the children I will add to this family, and authorised to give these permissions.
- [ ] I have read these parent notices. I request cloud lessons and saved progress for the children I subsequently identify and authorise, for the purposes and service-provider handling described here.
- [ ] Offer me a choice to import existing local practice. This is optional and still needs child mapping and a separate actual-import confirmation.
- [ ] Offer me caregiver sharing. This is optional and does not approve any recipient; each named invitation needs the separate disclosure explanation and permission described below.
Choose “Save permission choices” to record your consent immediately. This does not create a child profile, import progress or purchase a subscription. Plan selection and secure checkout remain separate actions.
Permission for each child
Before saving a child's profile, review their nickname, your parent account, this direct notice and the Parent privacy notice. Confirm that you are this child's parent or legal guardian and approve saving their learning records under these notices. Choose “Add a child” to save the profile after confirming your permission, or leave without saving. A nickname is enough; the child's nickname and learning records are not saved online before the required permission is recorded.
This child confirmation does not buy an additional paid place. If an extra place is needed, you separately review and confirm its price; additional paid access begins only after the required payment settles. Permanent replacement and returning-profile screens also ask for the applicable child-specific permission before creating or reactivating that profile.
Existing local practice is optional. If you allow imports, choose the children and destination profiles, review the mapping, and confirm the selected upload. Choosing not to import leaves the practice in that browser. Matching nicknames do not merge children automatically.
Caregiver access — a later, separate choice
You can enable cloud learning without sharing it with a caregiver. Before approving an invitation, review the named adult and the children's information they will be able to access. That access includes the child profiles, progress and saved work made available within your family. Family members can also see one another's account email addresses.
Only authorise access if you may act for every child whose family information will be shared. Review the adult’s email address and the disclosure explanation, then choose “Authorise and send invitation” to approve that named adult’s access. This is a separate decision from cloud learning and from enabling the option to invite caregivers. It does not approve an unnamed future caregiver. The invited adult must sign in with the invited address and accept before joining. Required child and disclosure permissions must be complete before access is allowed. You can revoke a pending invitation or remove an invited caregiver through your account controls.