Privacy

Last reviewed: 14 September 2026. Plain-language summary of what we actually do. This is not legal advice; a formal policy review is noted at the end.

What we store

Account: your email address and your timezone.
Yoto authorization: access and refresh tokens from Yoto's official OAuth, stored encrypted. We never see or store your Yoto password.
Devices: your players' Yoto device IDs and names, and their online/playback status.
Routines: the schedules, quiet-time, volume, routine and override settings you create.
Activity: enforcement and connectivity events (e.g. "playback blocked", "connection interrupted") used to run the service and show you it is working.

What we do NOT collect

No child names, ages, emails, or profiles.
No precise location.
No advertising identifiers or behavioural advertising profiles.
No cross-site tracking, fingerprinting, session replay or keystroke recording.

Billing

Payments are handled by Stripe. When you subscribe, Stripe receives your email and payment details directly; we store only Stripe's customer and subscription identifiers and your subscription status. We never see or store card numbers.

Analytics

We use first-party, server-side product analytics to understand our funnel (for example, how many visitors start a trial). We do not use Google Analytics advertising features, Meta Pixel, or any third-party behavioural tracker. We do not store raw IP addresses for analytics, and we record only a normalized referrer domain, never full referrer URLs.

Cookies & local storage

Public marketing pages set no cookies. When you sign in, we use a single essential, first-party session cookie to keep you logged in. We do not use non-essential or advertising cookies. Because measurement is server-side and minimal, our aim is to keep any consent surface as small as possible — see the open questions below.

Retention & deletion

Raw analytics events are retained for 180 days and then deleted; we keep only aggregated statistics longer. You can request deletion of your account and associated data, or disconnect Yoto at any time from your account page. Deleting your account removes your tokens, players and routines.

Contact

For privacy requests, email privacy@audinook.com (placeholder for launch).

Open questions for legal review

Whether the essential login session and minimal server-side analytics require a consent banner under GDPR/ePrivacy in each target market; the final data-processing agreement with Stripe; and the definitive retention windows. These are flagged for review before public launch and are documented in the repository.

Audinook is an independent third-party application and is not made by, affiliated with, or endorsed by Yoto.