Privacy policy
Last updated October 12, 2026
Likkle Legends is a digital learning service for children aged 3 to 9. Parents create the account, add their children and pay. This policy explains what we collect, why, and how you can see or delete it.
What we collect
From parents: your name, email address and password. Passwords are stored hashed by our login provider; we cannot read them. When you buy, PayPal sends us the order or subscription ID, the plan, the amount and its status. We never receive your card or bank details.
About children, entered by a parent: a first name or nickname, age and (optionally) island heritage. As your child uses the portal we save their progress: stories read, games played, badges and points, and any stories made in the Story Builder.
We do not ask children for an email address, phone number, photo, home address or location, and we do not collect a shipping address. Likkle Legends is digital only; nothing is mailed.
Parental consent
Only a parent or legal guardian aged 18 or older may create an account. At sign-up you confirm that you are the child's parent or guardian and agree to this policy. Child profiles can only be created from a parent account, and children cannot make purchases: checkout is available to the parent account only.
You can review or change your child's information at any time in your account, and you can ask us to stop collecting it by deleting the child profile or the whole account.
How we use it
- To run the service: sign-in, saving progress, showing the right stories and games for your child's age.
- To create stories and narration when you or your child use the Story Builder or narrated stories.
- To process payments and give access after PayPal confirms a payment.
- To email the parent about the account, receipts and security, and occasional parent updates. Reply or email us to stop the updates at any time.
We do not show ads, we do not sell personal information, and we do not use children's information for advertising or profiling.
Who processes data for us
- Supabase: database and login.
- Hetzner: the servers that host the site.
- PayPal: payments and memberships.
- Resend: account and receipt emails to parents.
- Google (Gemini) and ElevenLabs: generating story text and narration. We send the story request, which can include the child's first name if you ask for a personalised story, and no other account details.
These providers may only use the data to provide their service to us.
Deleting your data
Delete your account yourself: sign in and go to Manage your plan, then Delete my account. This first cancels any PayPal membership, then permanently deletes your parent account, every child profile, their progress and saved stories. It cannot be undone.
Or ask us: email hello@likklelegends.com from your account email. We will confirm and complete the deletion within 30 days.
PayPal keeps its own record of payments under its own privacy policy. Copies in our database backups are removed as those backups expire.
Your choices and rights
You can ask to see, correct or delete the information we hold about you or your child, or withdraw consent, by emailing hello@likklelegends.com. Depending on where you live (for example under COPPA in the US, or GDPR in the UK and EU) you may have further rights, and we will honour them.
Security
Data is sent over HTTPS. Access to the database is restricted to the service and a small number of administrators. No system is perfectly secure; if we learn of a breach that affects you we will tell you.
Changes and contact
If we change this policy in a way that affects how we use children's information, we will email parents before the change takes effect. Questions: hello@likklelegends.com.