Privacy Policy

Last updated: 29 September 2026

tellyowl is run by Jobventure Pty Ltd (ABN 57 660 814 675), 121 King St, Melbourne VIC 3000, Australia ("we", "us"). This policy explains what we collect, why, who we share it with, and how you can see or delete it. We built tellyowl to collect as little as possible, especially about kids.

The short version

• The account belongs to the grown-up. Kids don't have accounts, and we never ask them for information.
• We don't show ads and don't sell data. There are no analytics scripts anywhere, and no third-party trackers in the kid app or on shared list pages.
• You can download or delete everything from your Account page. Deleting is immediate.

1. What we collect

About you

• Your email address, to sign you in and send account emails.
• Your country and timezone, for prices in your currency and so bedtimes and daily limits follow your day. Country comes from your internet connection, timezone from your browser.
• What you set up: your kids' names, the playlists and channels you add, controls and settings. A nickname is fine, but it may be a real first name, so we treat it as personal information.
• If you pay: your plan, price, currency and renewal dates. Stripe handles your card, and we never see or store card numbers.
• Account activity: when you agreed to our Terms and when you signed in, and simple records like "list added" or "Plus started" that help us fix problems and see how tellyowl is used.

Through your kid's app

Your kid opens their app with a private link you give them. They don't sign in or type in anything about themselves. To make the app work, we store:

• What your kid does in the app: favourites, hidden videos, renamed and reordered lists, and which new videos they've seen.
• Watch time: which videos played and for how long. This powers watch history and daily limits.
• Devices the link was opened on: a random ID in a cookie and a label like "iPad · Safari", so you can see where the link is used and hear about new devices.
• Notifications, if your kid turns them on: the address their browser gives us to deliver them.
• Requests to add a friend's list: which list, so you can say yes or no.

The app also keeps a few small things on the device itself, such as which tips it has shown and watch time waiting to be sent.

From YouTube

We use YouTube API Services to read the playlists you add: titles, video IDs, thumbnails, channel names, lengths, and whether a video is marked "made for kids". We don't use YouTube sign-in, and we can't see or change your YouTube account.

Automatically

• IP address. Our hosting provider, Cloudflare, uses it to deliver tellyowl and protect it from abuse. We keep a scrambled (hashed) copy for a day or two, to limit how many sign-in emails can be requested.
• Server logs with technical details of requests, kept for up to 7 days to find and fix errors.
• Bot check. Cloudflare Turnstile checks that the sign-in form is used by a person, using signals from your browser.
• Visit counts. Cloudflare counts the requests that reach tellyowl, such as how many and from which countries, as part of hosting. There's no analytics script and no analytics cookie.

2. How we use it

• To run tellyowl: sign you in, show your kid's lists, keep them up to date and apply controls.
• To send account emails: sign-in links, a new device on your kid's link, list requests, and a list that stopped working. We don't send marketing emails.
• To take payment for Plus.
• To keep tellyowl safe: rate limits, spam and abuse prevention, and acting on reports.
• To improve tellyowl, using counts, not profiles.

We never use anyone's information for advertising, and we don't build profiles of kids.

For the EU and UK, our legal bases are: our contract with you (running your account and your kid's app), legitimate interests (security, preventing abuse, improving tellyowl), consent (notifications, which the browser asks for) and legal obligations (tax and accounting records).

3. Who we share it with

We don't sell or rent personal information. We share it only with the providers that run tellyowl for us, and each gets only what it needs:

We may also share information when the law requires it, to protect someone's safety, or with a buyer if tellyowl is ever sold. We'd tell you first.

Other families. When you or your kid share a list, anyone with the link sees its YouTube title, channels and videos. They never see your email, your kid's name, or the names your kid gave the list. The message your kid's app prepares for sharing starts with their name, and your kid sends it through an app of their choice, not through us. For lists you share, you see how many families added them, never who. If someone reports a shared list, we keep the list and the reason, not who reported it.

4. YouTube and Google

• tellyowl uses YouTube API Services. See the Google Privacy Policy.
• Videos play in YouTube's embedded player, in its privacy-enhanced mode. YouTube, not us, serves the videos and any ads, and may collect information and store data on the device under Google's Privacy Policy. YouTube says it limits data collection on videos made for kids.
• Apart from YouTube's player, and Cloudflare and Stripe as described here, no third party serves content or ads, collects information, or sets cookies in tellyowl.

5. Cookies and storage on the device

We don't use advertising or tracking cookies. These are the only cookies we set, and each one is needed for tellyowl to work:

The kid app also stores small settings on the device (section 1). YouTube's player may store its own data (section 4).

6. How long we keep it

• Your account and everything in it: until you delete it. Deleting is immediate.
• Detailed watch records: 30 days. Daily totals (minutes and number of videos) stay until you delete the kid or your account.
• Sign-in links: they expire after 15 minutes and are deleted about a day later. Sessions: up to 180 days.
• Answered list requests: 30 days.
• YouTube data: refreshed regularly, and deleted 30 days after no family uses the playlist.
• Server logs: up to 7 days. Backups: up to 30 days, so deleted data can stay in a backup until it rolls off.
• Payments: Stripe keeps payment records for as long as tax law requires.

After you delete your account, we keep only counts that can't identify you, such as "an account was deleted on this day".

7. Kids' privacy

tellyowl is made for kids, so we follow kids' privacy rules, including the US Children's Online Privacy Protection Act (COPPA) and the GDPR.

• A grown-up sets up the kid app and decides what's in it. We don't ask kids for their name, email, photo, location or anything else.
• Kids can't post, chat or comment in tellyowl. Sharing a list shares a link to the list and nothing more.
• What we collect through the kid app (section 1) is used only to run the app and to show you what's happening in it. No ads, no profiles, no third-party trackers.
• You can see what we hold about your kid (Account → Download my data), and stop any further collection by deleting the kid from your dashboard or deleting your account.
• If you think a kid has given us information without a grown-up's permission, email us and we'll delete it.

8. Your rights

Wherever you live, you can:

• Download your data: Account → Download my data.
• Correct it: change your email, your kids' names and your settings in the dashboard.
• Delete it: Account → Delete account, which is immediate.
• Ask us for access, correction or deletion, or anything else about your data, at hello@tellyowl.com. We act on deletion requests within 7 days and answer other requests within 30 days.

Depending on where you live, you may have more rights, such as objecting to or restricting how we use your data. You can also complain to your privacy regulator: in Australia the OAIC, in the UK the ICO, in the EU your local data protection authority. We'd appreciate the chance to put it right first.

9. Where your data is stored

We're based in Australia. Our database runs on Cloudflare, mainly in Western Europe, with copies in other regions so the app loads quickly, and our other providers are mainly in the USA. When your data leaves your country, we rely on our providers' contractual safeguards, such as the EU Standard Contractual Clauses.

10. Security

• Kid links are long random codes, and you can rotate one at any time.
• There are no passwords: you sign in with one-time email links, which we store scrambled.
• Everything travels over HTTPS, and only the people who run tellyowl can access our systems.

No service is perfectly secure. If a breach puts your information at risk, we'll tell you, and the regulator, as the law requires.

11. Changes to this policy

If we make a significant change, we'll email you before it takes effect. The date at the top shows the latest version.

12. Contact

Questions, requests or complaints: hello@tellyowl.com
Jobventure Pty Ltd, 121 King St, Melbourne VIC 3000, Australia