About this notice
Little Keys uses cookies and other browser storage to keep adult accounts secure, remember device choices, save practice and help the app work reliably. This notice explains what stays in your browser, what may be sent to the service, and the choices available to your family. Read it with our parent privacy notice.
Little Keys is operated by MindSync Technologies Pty Ltd, ABN 39 696 882 318, at Suite 19, 220 Carr Place, Leederville WA 6007, Australia. For questions about storage or your family's information, email admin@thelittlekeys.com.
You can try the three introductory starter activities—Make yourself comfy, Find your first C, and Meet C, D & E—without signing in or entering payment details. They do not automatically become a subscription. Local saving and the network/security processing needed to deliver the website still occur during guest use.
What we store in your browser
| Storage | What it does | How long it normally stays and how it is removed |
|---|---|---|
| Adult sign-in cookie | Keeps the adult signed into the standalone Little Keys account. The cookie contains an opaque session token, rather than a child's nickname or learning history. It is protected with Secure, HttpOnly and SameSite settings. | The application session has a maximum life of 30 days unless ended earlier. Signing out ends that session; security or account changes can also end it. |
| Device and practice preferences | Local storage remembers a random device identifier, the selected child profile, instrument/input choice, sound volume, spoken guidance, voice-command choice and animation preference. The device identifier helps distinguish practice saved on different devices. | These can remain across visits until changed, migrated by an update or cleared in browser site-data settings. The random device identifier is persistent; it is not a promise of anonymity. |
| Email-link and invitation state | A receiving adult's email address may be saved temporarily while completing email-link sign-in. A caregiver invitation reference may be kept for the current browser tab while the adult signs in or accepts it. | The saved sign-in email is removed after successful completion. Invitation state is removed when accepted or dismissed and normally ends with its browser-tab session. Unfinished sign-in information can remain until the relevant site data is cleared. |
| Local practice database | IndexedDB, the browser's local database, holds guest nicknames and practice, signed-in family snapshots, saved places, learning information and changes waiting to sync. Signed-in records are separated by account, family and recovery version. | Guest practice can remain on that browser until you delete it or clear site data. Signed-in caches and queues are removed by the relevant sign-out/access-ending process, subject to handling unsaved work. They do not have the same lifecycle as server records. |
| App and lesson asset caches | A service worker caches app files, illustrations, piano samples and prerecorded guidance to improve loading and support available offline features. | App updates replace older app caches. Sign-out removes private app-shell caches, but not every other kind of site data. Browser site-data controls can remove the remaining caches. |
| Optional local voice-model cache | If voice commands are enabled, the browser downloads about 83 MB of voice software/model files from the Little Keys site and can cache them to avoid downloading them each time. | These files can remain after sign-out. Turning voice commands off stops that feature but does not itself remove its downloaded files. Clear the site's cached data to remove them; enabling voice again may require a fresh download. |
| Optional usage-event queue | If the family owner turns optional pilot usage sharing on, the browser briefly queues supported events while they are sent or a connection is unavailable. | The queue is bounded and excludes events older than 30 days when restored. Turning sharing off clears its queued optional events and requests deletion of the family's stored optional usage events. |
Browser software can clear or limit storage itself, including in private browsing or when device space is low. Storage is not a guaranteed backup. Anyone who can open your unlocked browser may be able to see locally saved guest practice; use appropriate device protection on shared devices.
Guest practice and saving to a family account
Guest nicknames, practice results and saved places are kept in this browser in the normal guest flow. They are not automatically saved as a cloud family simply because you open or complete a free starter activity.
A parent can choose to save guest progress to a family account. That moves selected records across the boundary from local practice to family cloud records. It can include nicknames, device/session identifiers, results, progress, approvals and saved places. The applicable parent privacy and permission process covers that step. An existing subscriber awaiting verification through their next ordinary renewal must wait for completion before the covered import is enabled; opening the account or recording a pending request does not upload that practice. Please check which child each record belongs to; matching nicknames alone do not establish that two profiles are the same child.
Keeping a local copy is different from backing up records to our servers. Clearing this browser before progress has synced or been exported can permanently lose that local work. We cannot email an unidentified guest a reminder or remotely clear an offline browser copy.
Optional microphone and voice features
The microphone is optional. In Little Keys' local listening and voice-command features, raw microphone audio and voice-command transcripts are processed on your device and are not uploaded to our servers. The local voice files are downloaded to the device; your microphone audio is not sent to their upstream model/software suppliers through these features.
Detected notes, lesson choices and results can still become practice records. In guest use they stay in the local practice copy; in a family account they may sync as described in the parent privacy notice. The free-play Record my tune control collects played screen notes for playback during that visit; it does not record the sound of your room. Saved note-based compositions in guided learning are a different feature and may form part of your family's saved music.
You can choose screen play or practise along without microphone listening. Turn the relevant feature off in practice settings, or revoke microphone permission through your browser's site-permission controls. Browser permission to use a microphone is separate from a parent's privacy choices.
Optional usage sharing and necessary service records
Optional pilot usage sharing is off by default. The family owner can change it in Parents, under Help Little Keys grow → Share optional pilot usage events. The sample guest experience is excluded from this optional queue.
When enabled, the supported events cover lesson starts/completions, saving transfers, certain blocking errors, voice unavailability and progression-mode changes. They can contain a family identifier, lesson identifier, event code, time and app version. They do not contain raw audio, transcripts or child nicknames. Because they remain linked to a family, we do not describe them as anonymous. The service limits optional usage history to 30 days through its cleanup process; turning sharing off deletes the family's optional event history and clears queued events. Saving learning progress continues when sharing is off.
Account, security, abuse-prevention and operational records are separate from optional usage sharing. Delivering the site involves network information such as IP addresses and request headers. The service can record generic request identifiers, routes, status, timing and app version, and a family identifier when signed in. A browser error signal sends no raw error message, child nickname, audio or transcript in its diagnostic body. Some security checks use IP information, including Cloudflare's sign-in protection. Switching optional usage sharing off does not switch these necessary functions off or erase their separate records.
We do not sell or rent children's information, use it to target advertising, or use it to train AI models. We do not create public child profiles. These commitments do not mean that no information is processed to provide, save or protect the service.
Sign-in, payment and other providers
The standalone service uses Cloudflare for hosting and security and Google/Firebase for adult authentication. The parent account screen may load Google's sign-in components and Cloudflare's anti-bot check. Those are different from optional lesson analytics. Stripe/Link handles the payment page and transaction functions when an adult proceeds to billing; it has its own browser storage and notices. Our app receives payment-related identifiers/status, but does not collect full card details in its own form.
Separate private ChatGPT Sites previews may use OpenAI's hosting and account/access controls; other private previews may use Cloudflare Access. Signing in to a preview does not complete Little Keys parent verification. Their authentication/storage is governed by the relevant provider's notices as well as our handling of information in Little Keys. An allowed provider address in browser security settings does not mean that every provider is contacted on every guest visit.
See the parent privacy notice for the relevant service providers, purposes and overseas-processing information. Do not assume information stays in Australia simply because Little Keys is an Australian business. Prerecorded teaching audio and local voice software may have been made with third-party tools; playing those files is not permission to send your child's speech to those tools.
Managing and clearing your data
Before clearing site data or leaving a device, check the saving status. Connect and finish saving pending practice where possible. In Parents → A copy to keep, a family can download a learning backup. The learning backup is not a complete export of every account, security, support or payment record. Contact us for help with a broader information request.
Signing out removes the relevant signed-in account's local caches and pending-record storage through the sign-out process; it does not delete the server family. Guest practice, device preferences and downloaded voice models can remain. If a device warns that practice is still waiting to save, resolve that warning or export the available copy before choosing to discard it.
To clear local browser copies, use the browser's site data/cookies/storage controls for the Little Keys address. This may remove sign-in state, guest practice, queued unsaved changes, remembered preferences, app files and voice models. You may need to sign in and download assets again. Blocking cookies can prevent sign-in; blocking local storage can prevent local saving and recovery. Do not remove site data if it contains the only copy of practice you want to keep.
Deleting a child or family through the relevant Parents/account tools is a separate action affecting server records. Clearing browser data, signing out or deleting a bookmark does not cancel a subscription. Use Parent account → Plan & billing → Manage billing to manage renewal. A permanent replacement keeps the old child’s profile as separate read-only history. Archiving is not browser-data clearing or a request to delete learning records. Copies already downloaded or retained in another authorised adult’s browser need to be handled separately.
Email admin@thelittlekeys.com if a setting is unclear or you need help accessing, correcting or deleting your family's information.