Privacy Policy

Last updated October 4, 2026

Tileboo Kids helps families build with the magnetic tiles they already own. This policy explains what we keep, why, for how long, and how to have it deleted. It is written for parents and guardians.

Who we are

Tileboo Kids is made and run by its founder, an independent developer based in Israel. We decide how your family's information is used, which makes us responsible for it: the "controller" under European law and the "operator" under US children's privacy law.

• Email: privacy@tileboo.kids

Without an account: what stays on your device

Tileboo saves these in your browser's storage on this device. We can't see them.

• Your child's first name or nickname, as typed during setup
• Stars, badges, and which builds were finished
• Which tiles you have, how many, and their colors
• Settings, such as whether the sound is on

When you browse builds, the app sends your tile counts, the builds you've finished and any search words to our server, so it can show the builds that fit. The server uses them for that page only and does not save them, apart from the short-lived request logs listed under How long we keep things.

With a family account: what we store

A family account is for a parent or guardian. It stores:

• Your email address, and your name if you give it
• If you sign up with email, your password. Google Firebase, our sign-in provider, holds it, and we never see it.
• Your grown-ups PIN, as a one-way scrambled code. Nobody at Tileboo can read it.
• To stop anyone guessing the PIN: how many wrong PINs were typed recently, and whether the PIN is locked. If you ask for a new PIN, when we sent the email, and a scrambled copy of its one-time link.
• Your Family Pass: when it was bought or given, and until when it includes new builds. Builds opened one by one in an earlier version of Tileboo stay listed too.
• Your child's stars, and your tile counts and colors
• An activity log, with dates: which builds were opened, including locked ones, which were finished, and when a Family Pass was added

If you sign in with Google, Google shares your name, email address and profile picture with our sign-in provider. We use only your name and email. When you sign in on a device, the stars already saved on that device are added to your account, and so are its tile counts if your account has none yet.

The account never holds your child's name, age, photos, voice or location. Children can't post anything publicly or contact other users.

We use this information to sync your family's progress, run your Family Pass, keep Tileboo working and secure, answer your questions, and see which builds families use so we can make more like them. Apart from the providers listed below, only you and the small Tileboo team can see it, and the team looks only when one of those reasons calls for it.

Your consent

When a parent creates a family account, we email them to ask for consent before we save anything about their child. Until they agree on our consent page, the child's progress and tiles stay only on the family's device.

After they agree, we email a confirmation. If nobody agrees within 30 days, we delete the account and its email address, and we send at most one reminder before then.

You can withdraw consent at any time: choose Delete our family in the grown-ups area, and everything goes at once. Or write to privacy@tileboo.kids, and we delete your child's information and the account within 30 days.

The camera

In the grown-ups area you can count your tiles by photographing a stack. The photo is processed on your phone, and the app never uploads or saves it. Only the result is kept: how many tiles of that shape you have, and their colors. The camera is on only while you count, and Tileboo never uses the microphone.

What we never do

• Show ads, or let anyone advertise to your child
• Use analytics, tracking pixels or advertising cookies
• Sell, rent or share your family's information
• Build a profile of your child for marketing
• Send your family's information to AI services
• Offer chat, messaging, or sharing with other users

Cookies and device storage

Tileboo sets no cookies. It uses your browser's storage for the things listed above, and Firebase keeps you signed in the same way. If you choose Continue with Google, Google's sign-in page uses Google's own cookies.

Who helps us run Tileboo

A few service providers process information for us. They act only on our instructions and only to provide their service to us.

• Google Cloud runs our server and database, in Belgium.
• Google Firebase Authentication handles sign-in. It runs only in the United States and keeps IP addresses for a few weeks to stop abuse.
• Google Firebase Hosting delivers the app to your browser. It keeps IP addresses for a few months to detect abuse.
• Our email provider, [to be named before launch], sends account emails to parents: the consent request and its confirmation, links to choose a new PIN, and the notice that an account was deleted. It receives only the email address and the message.

Google takes part in the EU-U.S. Data Privacy Framework and its UK Extension, which cover information that travels to the United States.

Buying the Family Pass isn't open yet. Before it opens, we'll add the payment provider to this list. We may also disclose information when the law requires it, for example under a valid court order.

Like every website, our servers see your device's IP address. We use it only to keep Tileboo secure and working, never to contact or profile anyone, and it is deleted with the logs.

Why we're allowed to use it

For families in the EU and UK:

• Your account and Family Pass: to provide the service you signed up for (a contract with you).
• Your child's stars, your tile counts and colors, and the activity log: your consent as their parent or guardian, which we ask for by email before we save any of it. You can withdraw it at any time by deleting your family.
• The record of your consent: to show we asked and you agreed (a legal obligation).
• Your PIN, its wrong-try counts and new-PIN emails: to provide the grown-ups PIN you set up and keep it from being guessed (a contract with you).
• Request logs, backups and our record of staff access: our legitimate interest in keeping Tileboo safe, fixing problems and checking who looked at an account. You can object at any time.
• Storage on your device without an account: strictly necessary for the app to work.

For families in the US: we collect from children only what Tileboo needs to work, we use it only to run Tileboo for your family, and we never use it for advertising.

How long we keep things

• Everything saved on your deviceUntil you clear itIt never reaches us. Clear this site's data in your browser settings to remove it.
• Your email, name, PIN, Family Pass, unlocked builds and settingsWhile the account existsYou need them to sign in and to keep the builds your Family Pass includes.
• Stars, tile counts and colors in your accountWhile the account existsSo your family's progress follows you to other devices. If nobody uses the account for 24 months, we delete them and keep only what you need to come back: your email, PIN, Family Pass and unlocked builds.
• Wrong PIN tries and PIN locksUp to 2 daysHow many wrong PINs were typed, when, and until when the PIN is locked, so nobody can keep guessing it. Cleared as soon as the right PIN is entered or the PIN is reset. Otherwise we stop counting them 24 hours after the last wrong try or lock, and delete them within 2 days.
• A link to choose a new PIN, if you ask for oneUp to 2 daysThe link works once, for 60 minutes, and we keep only a scrambled copy of it. We also note when we sent it and how many we sent in a day, so the email can't be sent over and over. All of it is deleted within 2 days.
• The activity log of builds opened and finished90 daysLong enough to answer questions about recent activity and to see which builds families enjoy.
• The record of each Family Pass bought or given, and of builds unlocked in an earlier version of TilebooWhile the account existsIt is the proof of what you paid for or were given.
• Request logs on our servers30 daysIP address, time, the page requested and browser type, used only to keep Tileboo secure and to fix problems.
• IP addresses logged by Google FirebaseA few weeks to a few monthsGoogle keeps sign-in IP addresses for a few weeks and website visits for a few months, to stop abuse.
• Backups of our databaseUp to 30 daysSo we can recover from a failure. Anything deleted is gone from the backups within 30 days.
• A deleted account's ID numberTwo hoursOnly the random ID, nothing else, so a device that is still signed in can't re-create the account and upload your child's progress again.
• Records that a copy of your data was made for youUp to 12 monthsThe date and nothing more, so we can show we answered your request.
• A record of each time the Tileboo team opened or changed your accountUp to 12 monthsWhich team member, what they did and when, so we can check that only the right people look, and only when they need to. If you delete the account, these entries no longer say whose account it was.
• A copy of your data that we prepare for youDeleted the day it is sentWe keep no copy once it has been emailed to you, not even in our sent mail.
• The record of your consentWhile the account existsWhen you gave consent, and to which version of this policy, so we can show you agreed.
• An account whose consent was never confirmed30 daysIf nobody confirms the consent email, we delete the account and its email address.
• Emails you send usUp to 12 monthsAs long as we need to help you, and never longer than 12 months.

Your choices and rights

Two of these you can do yourself, any time, in the grown-ups area of the app: Download our data saves a copy of everything we hold about your family, and Delete our family deletes the account and everything in it straight away, after you enter your family PIN. We email you when it's done.

Whenever you like, you can also ask us to:

• Send you a copy of everything we hold about your family, free, in a file you can keep
• Correct anything that's wrong
• Delete your family account and everything in it
• Stop collecting information about your child. You can also keep using Tileboo without an account.

To ask, email privacy@tileboo.kids from the email address on your account. We'll check that it's you and reply within 30 days, usually much sooner. The download is a JSON file: any text editor opens it, and other services can read it.

Deleting removes your email and name, your PIN, your Family Pass and unlocked builds, your child's stars, your tile counts and colors, the whole activity log, and your sign-in at Google Firebase. It can't be undone, and a Family Pass in the account goes with it. Anything saved on your own devices stays there until you clear it.

Parents in the US have these rights under the Children's Online Privacy Protection Act (COPPA). In the EU and UK you can also restrict or object to how we use your information, and complain to your data protection authority.

Accounts are for grown-ups

Family accounts are for parents and guardians. If we learn that a child created one, we'll delete it.

Keeping it safe

Information travels encrypted between your device and our servers. Your PIN is stored scrambled, sign-in is handled by Google Firebase, and only the Tileboo team and the providers above can reach account information. After 5 wrong PINs the PIN locks for a while, longer each time. If you forget it, choose "Forgot PIN?" and we email a one-time link to your account's address; nobody at Tileboo can see, change or unlock your PIN.

Changes to this policy

If we change how we use your family's information, we'll update this page and its date first. For important changes we'll email account holders before they take effect, and ask for your permission again where the law requires it.

Questions

The rules for using Tileboo are in our Terms of Use.

Email privacy@tileboo.kids. For a safety concern, write to safety@tileboo.kids.