Privacy Policy

1. Grievance

For any grievances, please reach out to [email protected].

2. Individual Rights

Tilli makes certain choices available to you when it comes to your personal data. Please review the below information outlining your choices and how to exercise them.

3. Review and Update Your Data

Please submit a request using the contact information provided below. We may request more information to confirm your identity before modifying any personal data. If you want to ensure the complete removal of your data, send us an email requesting the same at [email protected].

4. Restrict Processing

You have the right to restrict how we process your personal data in certain circumstances. In some ways, this is an alternative to requesting the deletion of your data. Rather than requesting we erase all of your personal data, you may request that we limit our uses of your personal data to specific purposes.

5. Data Portability

You have the right to obtain copies of your information in a structured, commonly used format that lets you move your data between our service and the services of others. We may request more information to confirm your identity before providing any personal data.

6. Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes or when our processing of your data is based on legitimate interests. You may request that we stop processing your personal data for direct marketing purposes. Beyond direct marketing, if you wish to exercise this right, you must give specific reasons why you object to our processing of your data, based on your particular situation. Even after receiving such a request, we may continue processing if it is necessary for the exercise or defense of a legal claim, or if we can demonstrate a compelling legitimate ground for the processing.

7. Contact for Individual Right Request

Please use the information below when submitting a request to exercise any of the above rights. Please do not submit requests across multiple communication channels. We will make all efforts to respond to your request within a reasonable timeframe.

If you are located in the European Union, you can contact Tilli’s Data Protection Officer at [email protected].

If you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.

8. Data Collected From Our Website

The website is intended for adults (teachers and parents) to allow them to purchase our products and understand the essence of why we do what we do. Our website does not provide access to the Tilli experience, and children shouldn’t use our website.

9. Personal Information You Provide

When you use the website, you may provide and we may collect personal information about you when you visit or order from our website, such as your email address, physical address, phone number, or credit card information. Other information you may affirmatively provide to us is generally maintained along with personal information. You can choose not to provide any information that is affirmatively requested of you. However, this may limit your ability to use the website as effectively as other users.

In addition to collecting information on the website, we may collect information from you when you communicate with us over the phone or via email. This information may include personal information, and may be matched with and stored in connection with personal information provided or collected in connection with the website.

10. Information Collected Automatically / Cookie Policy

Log file information is automatically reported by your browser each time you access a web page on our website. When you access the website, our servers automatically record certain information that your web browser sends whenever you visit any website. These server logs may include information such as your web request, browser type, referring / exit pages and URLs, number of clicks, domain names, landing pages, pages viewed, and other similar information.

We may use mobile analytics software and various backend systems to analyze certain information regarding your use of the website, such as email address, pageviews, advertisements clicked on, and transaction-related information.

In general, we will store website tracking information in an anonymous aggregated form; however, we or our third-party tracking partners may store certain information, such as pageviews, in a manner that can be associated with specific users.

We do not use cookies to collect personal information about you. A persistent cookie remains on your hard drive after you close your browser and may be used by your browser on subsequent visits to the website. Persistent cookies can be removed by following your web browser’s directions. A session cookie is temporary and disappears after you close your browser. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent.

We do not collect information about your location from your mobile device, but we do log your IP address, which can be used to approximate location. We use IP addresses only for activities necessary to maintain or analyze the service; perform network communications; authenticate users or personalize content; protect the security or integrity of the user and the service; ensure legal or regulatory compliance; or fulfill a request of a user.

11. How We Use Your Information

We use or may use information we collect for a variety of purposes, including:

• To operate the service, monitor its effectiveness, and improve its content, layout, and design.
• To help provide you with a smooth, efficient user experience.
• To monitor, analyze, and describe usage patterns and performance of the service, including aggregate metrics such as total number of visitors, traffic, and demographic patterns.
• To conduct system administration and troubleshooting, and to diagnose or fix technology problems.
• To comply with legal requirements and process (for example, in response to subpoenas, court orders, and law enforcement or governmental requests or investigations), and to protect our legal rights or the rights of others (for example, by reducing the risk of fraud or misuse of the service).
• To enforce our Terms of Use or other policies or agreements.
• With respect to information collected through the website as described in “Information Collected Automatically” above, to assist in marketing efforts, including tailoring and serving advertisements and tracking the effectiveness of marketing efforts.
• In connection with an unusual business transaction, such as the bankruptcy or liquidation of, sale of, purchase of, or merger with our business or another business.

Please note that this information relates only to adults (parents and educators). This is not children’s information.

12. Non-Personally Identifiable Information

We may share non-personally identifiable information (such as anonymous usage data, referring / exit pages and URLs, platform types, number of clicks, etc.) with interested third parties for various purposes, including (i) compliance with various reporting obligations; (ii) business or marketing purposes; or (iii) to assist such parties in understanding our users’ interests, habits, and usage patterns for certain programs, content, services, advertisements, promotions, and/or functionality available through the website.

13. Processing Personal Data

Lawful Bases for Processing Personal Data

If you are an individual in the European Union (EU) or an EU citizen, we collect and process data about you only where we have legal bases for doing so under applicable EU laws. This means we collect and process your data only when:

• It is necessary for a legitimate interest (which is not overridden by your individual privacy interests), such as preventing fraud, improving the service, and increasing the security of the service and network infrastructure;
• You have consented to this collection and processing for a specific purpose;
• It is necessary to fulfil our contractual obligations; or
• It is necessary to comply with a legal obligation.

Where we rely on your consent to process your personal data, you have the right to withdraw or decline consent at any time. If you wish to withdraw your consent, please contact us at:

Some examples of our legitimate interests and the data being processed include:

• Network and information security (password, IP address, Device ID)
• Customer support and fraud prevention (name, email address)
• Improving our products and services (hardware information, activity logs)
• We collect images of our users, which are uploaded to our app and used by AI to process these images. Our AI tool analyzes the images to detect facial features. We do not share or store the original images; only the processed data is kept.

Where we rely on our legitimate interests to process your personal data, you have the right to object. If you have any questions or need further information concerning the legal basis on which we collect and use your personal data, please contact us at [email protected].

14. Your Choices About Your Information

You may, of course, decline to share certain personal information with us, in which case we may not be able to provide you some of the features and functionality of the service. You may update, correct, or delete your profile information and preferences at any time by contacting us at [email protected].

Please note that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain all information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

If you receive commercial email from us, you may unsubscribe at any time by following the instructions contained within the email. You may also opt out from receiving commercial email and other promotional communications by sending your request to [email protected].

Please be aware that if you opt out of receiving commercial email from us or otherwise modify the nature or frequency of promotional communications, it may take up to ten business days for us to process your request, and you may receive promotional communications during that period. Even after you opt out of commercial messages, you will continue to receive administrative messages regarding the service.

15. Data Retention

Tilli may retain users’ data for the following purposes:

• To develop new features and improve the service;
• To support subsequent customer service inquiries;
• To improve the safety and security of the service; or
• To comply with our legal obligations.

We will retain your information for as long as is reasonably necessary in relation to the purposes for which it was collected. In many instances, we will retain your data while it is necessary for your use of the service, which may include maintaining this information beyond when you cease using the service.

16. How We Protect Your Information: Security and Password

Tilli takes what it believes to be commercially reasonable physical, electronic, and procedural safeguards to protect personal information. However, since no security system is impenetrable and “perfect security” does not exist on the Internet, we cannot guarantee the security of personal information or browsing information. If you create an account, you may be asked to choose a password, which can be used to access information associated with your account (including personal information). You should choose a password that is not easy to guess and does not use dictionary words.

Do not disclose your password to any other person. You are responsible for maintaining the confidentiality of your password and account, and we will attribute activities that occur using your account information (e.g., through the use of your password) to you. If you suspect that your password has been compromised, contact us immediately at [email protected].

17. Email and Recommendation Communication

We may send you, or you may elect to sign up to receive, emails from us. To help us understand whether we are providing information of interest to you, we may include software code or other tracking technologies in our emails to monitor whether you opened a particular email, whether you clicked on the images and/or links, the date and time the message was opened, and whether your computer is capable of receiving HTML-based email.

We endeavor to allow you to unsubscribe at any time from our email programs by clicking the unsubscribe link at the bottom of any email message. We reserve the right to send you service announcements or similar administrative messages within an app. If you wish to opt out or withdraw consent, please refer to “Processing Personal Data” above.

If you have queries regarding the same, feel free to contact us at [email protected].

18. Compromise of Personal Information

In the event that personal information is compromised as a result of a breach of security, Tilli will promptly notify those persons whose personal information has been compromised, in accordance with the notification procedures set forth in this Privacy Policy, or as otherwise required by applicable law. In the event that we or our service suffer a data security breach that requires us to provide you with notice, such as under applicable law, you consent to allow us to provide you with such notice by sending an email to the primary email address associated with your account.

19. Notification Procedures

It is our policy to provide notifications, whether required by law or for marketing or other business-related purposes, to you via email notice, written or hard copy notice, or through conspicuous posting of such notice on the service, as determined by Tilli in its sole discretion. We reserve the right to determine the form and means of providing notifications to you, provided that you may opt out of certain means of notification as described in this Privacy Policy.

The website may contain features or links to websites and services provided by third parties. Any information you provide on third-party websites or services is provided directly to the operators of those services and is subject to their policies, if any, governing privacy and security, even if accessed through the website. We are not responsible for the content or privacy and security practices of third-party websites or services to which links or access are provided through the website. We encourage you to learn about third parties’ privacy and security policies before providing them with information.

20. Children’s Privacy Policy

We respect children’s privacy, and it is our greatest priority to protect any such limited data. The Children’s Privacy Policy explains our data collection, use, and protection processes. All references to “children” or “child” in this Children’s Privacy Policy shall mean children under 16 years of age, and all references to the term “parent” shall include legal guardians.

The most important point to note is that the Tilli website is not intended for children. Children need not access it. We don’t market to them and never knowingly collect any personal information from children.

All the learning and play experiences that add up to the “Tilli experience” for children are limited to the Tilli app. The app is tailor-made to limit the use of children’s information and protect their privacy. Our apps contain no external links to third-party websites or services.

Parents and educators can download the app from the Google Play Store. We encourage parents and educators to complete the simple onboarding process to help children get started. Downloading the app doesn’t trigger the collection of any personally identifiable information.

We comply with the Children’s Online Privacy Protection Act (“COPPA”) to the best of our knowledge, and we only collect analytics data (which does not include personally identifiable information) from the app. This data is anonymized and used in aggregate solely to improve the play and learning experience of the Tilli app. This data is not used for any commercial purposes.

If the service is being used by a school and/or teacher (the “Educational Institution”) with students under 16 years of age, such Educational Institution agrees that it has reviewed our Terms of Use and our Privacy Policy. The app only requests personally identifiable information from parents and/or teachers. We will never knowingly solicit, nor will we accept, personally identifiable information from users known to be under 16 years of age. We collect only the minimum amount of information needed about students from teachers.

If a parent or educator discovers any information shared or collected without approval, please email us at [email protected]. We will do what is needed to delete such information from our systems.

21. Governing Law: Visitors Residing Outside the United States

This Privacy Policy and the privacy practices of our service are governed solely under the laws of the United States without regard to its conflict of law principles. Those who use our service and reside outside the United States are responsible for compliance with local laws. If you reside outside of the United States, by using our service you consent to the collection, transfer, storage, processing, and use of your personal information in the United States of America in accordance with this Privacy Policy.

22. Updates to Our Privacy Policy

We reserve the right to update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” at the top of this Privacy Policy. We encourage you to check this page periodically for any updates. If you continue to use the service following the posting of an updated version, we will treat your continued use as acceptance of the updated version.

If we make material changes to this Privacy Policy, we may notify you more prominently. If we change the way we handle personal information collected from children users (if applicable), we will first notify and obtain verifiable consent of a parent or legal guardian.

23. Contact Us

If you have any remaining questions about how we treat your privacy, just let us know. You can contact us by email at [email protected].