Terms of Use &
Privacy Policy

EpicTiny is a gamified task and routine management application designed for families. It allows parents or guardians ("Administrators") to create daily tasks, define rewards, and track the progress of one or more children through a structured, game-inspired interface.

EpicTiny is offered as a hosted web service accessible from any browser on your family's devices. Family accounts are created online; data is stored securely on EpicTiny's servers and is accessible only through the authenticated account.

EpicTiny was created with the goal of supporting children's daily routines through positive reinforcement earning points, unlocking achievements, and redeeming rewards. The platform was originally built to help children with executive function challenges, including twice-exceptional (2e) children, but is designed to benefit any child regardless of neurological profile.

By registering for an account, or by using EpicTiny in any capacity, you ("the user") agree to be bound by these Terms of Use and Privacy Policy. If you do not agree with any part of these terms, you must not create an account or use the application.

These terms apply to all users of the application, including administrators (parents/guardians) and children who access the child-facing interface.

Administrators must be at least 18 years old to create and manage an EpicTiny account.

EpicTiny is intended to be used as a positive, supportive tool to help children build healthy habits, develop autonomy, and feel proud of their daily accomplishments.

The platform is designed around the following principles:

• Encouragement over punishment tasks and rewards are meant to motivate, not coerce.
• Transparency children should understand the rules of the system they participate in.
• Age-appropriateness tasks, rewards, and expectations should be reasonable and suited to the child's age and ability.
• Respect for the child's dignity the platform should never be used to demean, shame, or pressure a child.

EpicTiny is a tool. Like any tool, its impact depends entirely on how it is used. The creators of EpicTiny have no visibility into, or control over, how individual users configure and use the application within their household.

Examples of misuse (not permitted)

The following uses are explicitly prohibited and contrary to the intended purpose of EpicTiny:

• Configuring tasks, points, or rewards in a way that is punitive, demeaning, or emotionally manipulative toward a child.
• Using the reward system to withhold basic needs (food, rest, affection, or care) based on task performance.
• Deliberately setting unachievable tasks or impossible point thresholds to frustrate or discourage a child.
• Using the application to monitor, control, or surveil a child in ways that violate their privacy or dignity.
• Altering reward values, point balances, or task configurations in ways designed to deceive or manipulate a child's expectations.
• Any configuration or use that could be considered emotional abuse, neglect, or cruelty under applicable law.

Administrator responsibility

The adult administrator of each EpicTiny account assumes full and sole responsibility for:

• How the application is configured and used within their household.
• Ensuring that all use is appropriate, fair, and in the best interest of the child.
• Any outcomes positive or negative resulting from the use of the platform.
• Complying with all applicable laws regarding child welfare and data protection in their jurisdiction.

The creators of EpicTiny cannot be held liable for any direct, indirect, incidental, special, or consequential damage including but not limited to emotional harm, developmental setback, or psychological distress arising from how the application is used by any third party.

Content & Media Policy

Administrators may configure tasks that require children to upload photos or videos as proof of completion. By using this feature, the account administrator agrees that:

• All uploaded content must be appropriate for a family context no nudity, graphic violence, explicit material, or content that violates applicable law.
• Administrators are solely responsible for reviewing, approving, and removing any content uploaded within their family account.
• Content that depicts or endangers the safety, dignity, or privacy of a child is strictly prohibited.
• EpicTiny does not review uploaded content in real time, but reserves the right to investigate reports and suspend or terminate accounts found to contain illegal content, particularly any content that exploits or endangers minors.
• Any illegal content especially anything that violates child protection laws will be reported to the appropriate authorities.

To the maximum extent permitted by applicable law, EpicTiny and its creators shall not be liable for:

• Any misuse of the application by parents, guardians, or any other adults.
• Any harm to a child arising from the configuration or administration of the application.
• Loss of data, system failures, or interruptions in service.
• Any indirect, incidental, punitive, or consequential damages of any kind.
• The suitability of the application for any specific child's needs or circumstances.

EpicTiny is provided "as is" without warranties of any kind, express or implied. Use of the application is entirely at the user's own risk.

EpicTiny takes privacy seriously especially because the application involves data related to children.

What data is collected

When you create a EpicTiny account, we collect and store the following information:

Family account data:

• Family name and administrator name provided during registration.
• Email address used for account verification, important notifications, and support replies. Never sold or shared with third parties.
• Password stored as an irreversible cryptographic hash (bcrypt). Your actual password is never stored or visible in plain text.

Application data:

• Child profiles a username (this does not need to be the child’s real name — any nickname or pseudonym chosen by the administrator is sufficient), profile photo (optional), points balance, streak count, and activity history. The child’s name or username is used only for personalisation within the family account and does not need to identify the child by their real name.
• Task data task titles, instructions, schedules, submission types, and completion records.
• Submissions photos or videos submitted by children as proof of task completion.
• Reward data reward names, descriptions, point costs, and redemption history.
• App settings administrator preferences, theme configuration, and notification settings.
• Contact messages if you use the Contact page, the message content and your email are stored to allow us to reply.

What data is NOT collected

• EpicTiny does not use advertising, behavioral tracking, or sell data to third parties of any kind.
• EpicTiny does not collect payment card information directly payments are handled entirely by Stripe, a secure third-party payment processor.
• EpicTiny does not share your personal data with any third party for marketing purposes.
• EpicTiny does not use advertising or behavioral tracking cookies. Session cookies are used solely to keep you logged in during your visit.

Cookies

EpicTiny uses essential cookies required for login and operation of the service. No advertising or tracking cookies are used.

The cookies used by EpicTiny are:

• Session cookie (.EpicTiny.Session) — keeps you authenticated while using the application. It is marked HttpOnly and Secure, meaning it cannot be accessed by JavaScript and is only transmitted over encrypted connections. It expires after 8 hours or when you close the browser.
• Language preference cookie (lang) — remembers your chosen language (English or Português) across visits. It contains only the value “en” or “pt” and carries no personal data. It is not used for tracking.
• Anti-forgery token (__RequestVerificationToken) — a security cookie that protects form submissions against cross-site request forgery (CSRF) attacks. It is session-scoped and discarded when you close your browser.

How your data is used

• To create and operate your family's EpicTiny account.
• To send account verification and transactional notification emails.
• To respond to contact form messages.
• To communicate important changes to the service or these terms.

Legal basis for processing

We process your personal data on the following legal bases:

• Performance of a contract — to create and operate your family account, authenticate access, and deliver the features of the service you registered for.
• Legitimate interests — to send transactional and security notifications, protect the integrity of the platform, and communicate important changes to the service.
• Legal obligation — to comply with applicable laws and respond to lawful requests from competent authorities when required.
• Consent — where you have explicitly agreed, such as when you accept these Terms at registration.

For Brazilian users, these bases correspond to Art. 7º, items II (execução de contrato), I (consentimento), IX (legítimo interesse) and VI (exercício regular de direitos) of the LGPD (Lei nº 13.709/2018). For EU/EEA users, they correspond to Art. 6(1)(b), (a), (f) and (c) of the GDPR respectively.

Service providers

We may share limited information with trusted third-party service providers strictly required to operate the platform such as payment processing, email delivery, authentication, and cloud hosting services. These providers are only given the data necessary to perform their specific function and are not permitted to use it for any other purpose.

Data may be processed and stored in New Zealand, the United States, or other countries where our service providers operate. We take reasonable steps to ensure that any international transfer of personal data is handled with appropriate safeguards in accordance with applicable privacy laws, including the LGPD and GDPR.

Your rights

Users may request access, correction, export, or deletion of their personal information at any time by contacting us through the contact page. We will respond to valid requests within a reasonable timeframe and in accordance with applicable law.

• Access — request a copy of the personal data we hold about you.
• Correction — request that inaccurate or incomplete information be updated.
• Export / Portability — request your data in a portable format where technically feasible.
• Deletion — request that your account and all associated personal data be permanently removed.

These rights apply to the account administrator. Child profiles and their associated data can also be managed and deleted directly through the admin interface at any time. For Brazilian users, these rights are established in Art. 18 of the LGPD. For EU/EEA users, they are established in Arts. 15–17 and 20 of the GDPR.

EpicTiny is designed for use by children under the direct supervision and control of a parent or guardian. The adult administrator creates the family account and manages all child profiles within it.

Child profiles within EpicTiny contain only a username and optional profile photo. Children do not have their own accounts or email addresses they access the app through the family account managed by their parent or guardian.

We do not knowingly collect personal information directly from children. All account registration and personal data entry is performed by the adult administrator.

The administrator (parent/guardian) is responsible for:

• Ensuring the application is used in accordance with the child's best interests.
• Managing and, if desired, deleting any photos, videos, or data submitted by the child.
• Complying with applicable child privacy laws in their country or region (e.g., LGPD in Brazil, COPPA in the United States, GDPR-K in Europe).

Data Storage

EpicTiny stores all family and application data on servers operated by EpicTiny, using industry-standard security practices. Access to your account and its data requires authentication.

While we use reasonable security measures to protect your data, no online service can guarantee absolute security. In the event of a data breach that affects your account, we will notify you as required by applicable law.

Uploaded media files (task submission photos and videos) are stored on EpicTiny's servers and are accessible only to users who are authenticated within your family account. They are not publicly browsable.

The creators of EpicTiny are not responsible for data loss resulting from events beyond our reasonable control, including hardware failures, natural disasters, or force majeure events. We recommend that administrators download or archive any data they consider irreplaceable.

Account Security & Authentication

All passwords are stored as irreversible cryptographic hashes your password is never visible to EpicTiny staff. We recommend choosing a strong, unique password not reused on other services.

EpicTiny supports two-factor authentication (2FA) via email code for family admin accounts. Administrators are strongly encouraged to enable it in their account settings. The responsibility for choosing and maintaining a secure password rests with the account administrator.

Administrators are strongly encouraged to:

• Use a strong, unique password not used on other services.
• Never share the admin password with the child or unauthorized individuals.
• Contact us immediately through the contact page if they suspect unauthorized access.

Automatic Account Removal

EpicTiny accounts that remain inactive for 12 consecutive months may be automatically removed. Inactivity is defined as no login activity by the account administrator during that period.

Before any automatic removal, the account holder will receive an email notification at least 30 days in advance. The notification will include instructions to reactivate the account and prevent deletion.

Upon removal, the following data is permanently deleted:

• All child profiles, including usernames, photos, and point balances.
• All task templates, schedules, and configurations.
• All progress records, task submissions, and completion history.
• All reward definitions, redemption history, and badge data.
• All uploaded media files (photos and videos submitted by children).
• All app settings, announcements, and customisations.

Deleting your data

You may request deletion of your account and all associated data at any time by contacting us through the contact page. Individual child accounts, task records, and media submissions can also be deleted through the admin interface at any time.

Task Submission Review Window & Auto-Approval

When a child submits a task that requires admin review (e.g. text, photo, or video submissions), the administrator has 2 days to approve or reject it. If no action is taken within this period:

• The submission is automatically credited with full points to the child's balance.
• Any associated uploaded files (photos, videos) are permanently deleted from EpicTiny's servers after this period.

Reward Redemption Review Window & Auto-Approval

When a child requests a reward redemption, the administrator has 2 days to approve or reject it. If no action is taken within this period:

• The redemption is automatically approved the reward is considered granted and the points remain deducted.
• The redemption record is removed from the system after this period for housekeeping purposes.

Administrators are encouraged to review pending redemptions promptly to avoid unintended automatic approvals.

Free Trial

New accounts receive a free trial of 7 days with full access to all EpicTiny features. No payment information is required to start the trial. At the end of the trial period, a paid subscription is required to continue using the service.

Paid Subscriptions

EpicTiny offers monthly and annual subscription plans. Current pricing is displayed on the pricing page and may be updated from time to time. Existing subscribers will be notified in advance of any price changes.

Subscriptions are processed exclusively through Stripe (card payments). EpicTiny does not store your payment card information. All payment data is handled securely by Stripe.

Cancellation

You may cancel your subscription at any time. Cancellation stops future billing; your account remains active and accessible until the end of the current billing period. After cancellation, your account and data are retained subject to the automatic inactivity removal policy described in Section 8.

Refund Policy

Subscription fees are generally non-refundable once a billing period has begun. We do not provide pro-rated refunds for unused days within a paid period.

Exceptions may be considered at our discretion in the following circumstances:

• You were charged in error (e.g., a duplicate charge or a charge after cancellation).
• The service was completely unavailable for a significant and documented portion of your billing period due to a failure on our end.

To request a refund review, contact us through the contact page within 30 days of the charge. Include the date, amount, and reason. We will review every case in good faith.

Free trial periods are always free you will never be charged without your explicit consent when starting a paid plan.

Free Access for Families Who Need It

EpicTiny believes every family deserves access to tools that help their children thrive, regardless of financial circumstances. If a subscription is not affordable for your family, please reach out through the contact page we will work something out.

Community donations also help us provide free or reduced-cost access to families who need it. Every contribution goes directly toward keeping EpicTiny available and growing.

These Terms of Use are governed by the laws of New Zealand, where EpicTiny is operated from. The New Zealand Privacy Act 2020 applies to the collection and handling of personal data described in this document.

EpicTiny makes good-faith efforts to respect the privacy rights of users in all regions. If you are located outside New Zealand, your local consumer protection and data privacy laws may also apply, including:

• European Union users: GDPR rights apply (access, rectification, erasure, portability). Contact us to exercise them.
• United States users with children: By using EpicTiny, you confirm that you are an adult administrator complying with applicable laws, including COPPA, in your jurisdiction.
• Brazilian users: The LGPD (Lei nº 13.709/2018) principles are respected. Contact us to exercise your rights under that law.

Dispute Resolution

We prefer to resolve any concerns through direct, good-faith communication. If you have a complaint or disagreement, please contact us first most issues can be resolved quickly and informally.

If a dispute cannot be resolved through direct communication, it shall be submitted to the courts of New Zealand. Nothing in these terms limits your rights under mandatory consumer protection laws in your country of residence.

EpicTiny reserves the right to update these Terms of Use and Privacy Policy at any time. Continued use of the application after any changes constitutes acceptance of the updated terms.

It is the user's responsibility to review these terms periodically. The date of the most recent revision is always displayed at the top of this document.

For material changes that affect user rights or data handling, we will make reasonable efforts to notify registered account holders by email in advance.

If you have questions, concerns, or feedback about these terms, your data, or EpicTiny in general, please reach out through the contact page or email us directly at contact form.

If you would like to request deletion of your account and data, or have a question about your subscription, the contact page is also the right place to start.

If you have concerns about the welfare of a child whether related to this application or otherwise please contact the appropriate child protection services in your region immediately.