Privacy Policy

Little Sprout Lab is owned and operated by Future Path Technologies in Lusaka, Zambia. We build creative learning tools for families. We do not sell personal information, use child profiles for targeted advertising, or require a child to create a direct account.

We design the Service around parent control and data minimization. We ask for information only when we need it to create an account, deliver a feature, process a payment, protect the community, or respond to a support request.

When a parent creates or uses an account, we may collect:

• Account details such as name, email address, login credentials or authentication identifiers, and communication preferences.
• Billing and subscription information, such as plan, payment status, Stripe customer identifiers, invoices, and subscription dates. Payment-card details are handled by our payment processor rather than stored by us.
• Support communications, feedback, account requests, and information you choose to include in a message to us.

Parents may create child profiles using a nickname or first name, avatar, and activity settings. Please do not add a child’s full name, exact birth date, school, address, contact details, or other unnecessary identifying information.

The Service may process artwork, saved drafts, activity completion, stars, generated prompts, and other creative work so that a child can continue an activity and a parent can view or print it. Parents may also choose to upload a photograph for a photo-to-coloring feature.

Photographs and prompts are optional. Because a photograph may contain a child’s image or other personal information, a parent or authorized adult must decide whether to upload it. We use moderation and image-processing systems to check or transform requested content, and we reject content that appears unsafe or inappropriate.

Do not upload a photograph of another person unless you have permission. Do not upload medical records, identity documents, passwords, private correspondence, or other sensitive information unrelated to the activity.

The Service is child-directed in its design, and we treat child profile information with special care. Children should use the profiles created by their parent or guardian and should not submit account, payment, contact, or photo information without adult involvement.

Where laws such as the U.S. Children’s Online Privacy Protection Act (COPPA) apply, we intend to follow requirements concerning notice, verifiable parental consent where required, parent access and deletion requests, data minimization, and reasonable security. COPPA applies to certain services directed to children under 13 or that have actual knowledge they collect information from a child under 13. See the FTC’s COPPA Rule for official guidance.

Parents may ask us to review, correct, export, or delete information connected to their account or child profile by emailing support@littlesproutlab.art. We may need to verify the requester’s identity and parental authority before completing a request.

We use information for the following purposes:

• Create and secure parent accounts and child profiles.
• Deliver activities, save progress, display artwork, generate requested creative results, and provide downloads or printables.
• Process subscriptions, provide invoices, manage cancellations, and prevent payment fraud through payment providers.
• Moderate prompts, images, and uploads; investigate abuse; and protect children, users, and the Service.
• Respond to support requests, communicate important account or service notices, and improve reliability and accessibility.
• Comply with applicable law, enforce our Terms, resolve disputes, and protect our rights or the safety of others.

We do not use child profile information for targeted behavioral advertising. We do not make consequential decisions about a child based solely on automated processing.

We may share limited information with service providers that process it for us under instructions and confidentiality obligations. Depending on the features you use, these providers may include:

• Supabase or comparable infrastructure providers for authentication, database storage, and secure application services.
• Stripe for payment processing, subscription billing, invoices, fraud prevention, and the customer billing portal.
• AI moderation, image generation, and image-processing providers when a parent requests those features. We send only the content needed for the requested operation.
• Hosting, security, email, customer-support, and technical service providers that help us operate the platform.

We may disclose information when required by law, legal process, or a legitimate safety investigation. If Future Path Technologies is reorganized, merged, or sold, information may transfer as part of that transaction subject to applicable confidentiality and privacy obligations. We do not sell personal information.

We keep information only for as long as reasonably needed for the purposes described here, including to provide the Service, maintain financial and legal records, resolve disputes, prevent abuse, and meet regulatory obligations. Retention periods can vary by data type and provider.

When a parent requests account or child-profile deletion, we will delete or de-identify information we control unless we must retain limited information for legal, security, fraud-prevention, or accounting purposes. Backups and provider systems may take additional time to reflect deletion. We will not use retained information for unrelated purposes.

The browser may store settings such as sound preference, theme preference, active profile, saved artwork drafts, or other local experience data. You can clear browser storage through your browser settings, but doing so may remove locally saved drafts or preferences.

We may receive technical information such as IP address, browser type, device information, approximate region, security events, and page or feature requests. We use this information for authentication, security, troubleshooting, performance, and aggregated product improvement. We do not use third-party behavioral advertising trackers in the core Service.

We use access controls, authentication, encryption in transit, provider security features, moderation controls, and least-privilege practices appropriate to the nature of the information. No internet service is completely secure, so please use a unique password and contact us promptly if you suspect unauthorized access.

Our providers or their infrastructure may process information outside Zambia or your home country. Where cross-border processing occurs, we aim to use appropriate contractual, technical, and organizational safeguards. The Zambia Data Protection Commission describes rights including access, correction, objection, limitation, portability, erasure, and avoiding automated decisions; learn more at the Zambia Data Protection Commission.

You can choose not to use optional AI or photo features, decline to provide optional information, disable celebration sound, clear local browser data, cancel a subscription, or contact us about access and deletion. Some information is necessary to provide a requested account, purchase, or feature.

We may update this Policy as the Service or law changes. We will post the new version and update the date above. Material changes may also be communicated through the account or by email when appropriate.

For a privacy, child-safety, access, correction, portability, or deletion request, email support@littlesproutlab.art with “Privacy Request” in the subject line. Future Path Technologies is based in Lusaka, Zambia.