Last updated: 5 November 2026. Published by Ornova Labs ("we").
LittleSteps is a learning app for children aged 2 to 5, used together with a parent or carer. It is built to collect as little as possible: no ads, no tracking, no advertising ID, no location, and children never type their real name, upload photos or chat with anyone.
The app works fully without an account. A grown-up creates a child profile with a nickname (not a real name is fine), an age band (2–3, 3–4 or 4–5), the language Orbi speaks and the alphabets to learn. This profile, the child's learning progress, Star-Seeds, Treehouse items and settings are saved only on the device. Nothing about the child is sent to us.
A parent can sign in with an email address in the grown-ups area (behind a parental gate) to back up progress and use a subscription on other devices.
| What | Why | When |
|---|---|---|
| Parent's email address | Sign-in with a one-time code, and messages about the account | When the parent signs in |
| Country (from the device's region setting) | Applying the right privacy and consent rules | When the parent signs in |
| Consent records (which choices were switched on, when, and which notice version) | Proving and respecting the parent's choices | When the parent changes a choice |
| Child profile: nickname, age band, instruction language, alphabets | Showing the same profile on the family's devices | Only if the parent switches on "Back up progress" |
| Learning activity: which lesson and step, whether it was completed or helped, number of tries and hints, time spent, date and time, app version | Backing up progress and showing the parent's progress view | Only if the parent switches on "Back up progress" |
Sign-in codes are stored only as a one-way hash and expire within minutes. Sign-in tokens are kept in the device's secure storage.
No photos, audio or video recordings, contacts, precise or approximate location, advertising ID, or data from other apps. We do not use third-party analytics or advertising tools, and we do not sell, rent or share personal information for advertising.
Subscriptions are bought through Google Play or the App Store; we never see card or payment details. To link a subscription to the family, the store and our subscription service provider (RevenueCat) receive a random family ID and the purchase details (product, dates, status). They do not receive the child's profile.
We use a small number of providers that process data only on our instructions: our server host (data is stored on servers in the United States), an email delivery provider that sends sign-in codes, and RevenueCat for subscription status. Lesson downloads come from our own server.
Account data is kept while the account exists. When a parent deletes a child profile or the account, it disappears from the app at once and is permanently erased from our servers within 30 days. Server logs (which include IP addresses) are kept for up to 14 days for security.
In the app, open Grown-ups → Account & sync to:
Child profiles can be deleted under Grown-ups. You can also ask us by email to access, correct or delete data, or to stop any processing: see how to delete your data. We will answer within 30 days.
LittleSteps is designed for young children and follows the children's privacy rules that apply where it is offered, including COPPA (USA), the Digital Personal Data Protection Act (India) and the law of Bangladesh. We only collect information about a child after a parent has verified their email address and switched on the relevant choice. A parent can review, export or delete it at any time. Purchases, account settings and links outside the app are only available behind the parental gate.
All connections to our server use HTTPS. Access to the server and database is restricted. No system is perfectly secure, but we take reasonable steps to protect data and will inform affected parents and authorities of a breach as the law requires.
If we change this policy in a way that affects children's data, we will tell parents in the app and ask for consent again where required.
Ornova Labs, Malda, West Bengal, India · ornovalabs@gmail.com