Privacy Policy for Tante

1. What this policy covers

This policy covers the Tante app and the Lyn account you use in it. It explains what information is processed, why, and where it ends up. The website and the other apps from Lyn have their own policies.

2. Your account

Tante only works with a Lyn account, and it is created by an adult (section 11). The account is the same in all the apps from Lyn. We store:

• Your email address, your language, when the account was created, and your display name and country if you have chosen them
• Your password, only as a hash that cannot be turned back into the password, never in plain text
• For each sign-in: the time, the IP address, the browser or app, and the country, which we look up from the IP address on our own server

Every sign-in requires a code we send by email. The sign-in history is used to detect suspicious sign-ins and is kept as long as the account exists. When your password is changed or reset, we email you an alert with the time and the country, looked up from the IP address on our own server. The country is not stored. About the account, we only send you email about codes, password changes and resets, email changes and account deletion. When you contact us, you also get a confirmation and our reply by email (section 5). If the account is used for abuse, we can ban it. We then store the time and the reason with the account, and the data stays until the account is deleted. A banned account cannot be deleted in the app, but you can ask for deletion by email as described under “Deletion”.

3. The stories

The stories are the same for everyone who uses Tante. We keep no listening history on your account or in our database: not which stories you listen to, when, or how far you have come. The only trace is the request logs (the last point below), which are deleted after 30 days.

• When you play or download a story, the app gets a link to the audio from our server. The link only works for a few hours. The audio is fetched with it directly from our storage at UpCloud in Finland, which sees your IP address and which file is fetched
• The pictures for the stories are fetched through our server
• The app asks the server whether the stories you have downloaded still exist, by sending which stories they are. If a story has been removed, the app deletes it from your phone. The question is not stored
• The request logs (section 7) show which story was fetched, from which IP address and when, and for some requests which account. They are used only for operations and security, and are deleted after 30 days

4. On your phone

This is stored on your phone and is not sent to us:

• The stories you download, with the audio and the picture, and how far you have come in each story
• The theme and that the greeting you get the first time you open the app has been shown

The language in the app is also stored on the phone, but the app sends it to our server, which stores it with your account (section 2). You can delete the downloads in the app, one or all of them. They are also deleted when you delete the app, and when a story is removed from Tante. If you sign out, the downloads stay, but they are not shown until someone signs in again. If your phone backs up to Google or iCloud, the settings and how far you have come may be included, but not the audio.

5. Contact us

Under “Contact us” in the app you can send us a request. We store your email address, the title, category, description and any images you attach, and that it came from Tante. We use them only to answer you and fix problems. You can ask us to delete your request at any time.

6. Deletion

You can delete your account in the app under Account. If you sign in again within 90 days, you get the account back. After 90 days, the account and the sign-in history are deleted for good. The account is shared by the apps from Lyn, so what you have stored with it in the other apps is deleted too, except what you have contributed to the product catalog, which stays in the catalog linked to an ID that no longer belongs to an account.

If you no longer have the app, you can ask us to delete your account by writing to support@lynsoftware.com from the email address on the account.

If the account was banned, or you have contributed to the product catalog from another app from Lyn, we keep your email address, the dates and your last IP address for three years after the account is deleted, so it can be traced if there is a legal claim. After that, this is deleted too. Deleted data may remain in encrypted database backups for up to 60 days. If the police order us to preserve data about a specific user, we take an encrypted copy of what exists at that time and keep it only for as long as the order applies. We hand over data only when the law requires it.

7. Security and abuse

To protect the service, the server processes your IP address and information about the app (version, platform and a random ID for the installation) for each request, for example to limit the number of attempts and stop attacks. When there is suspicious activity, we store the IP address, the app or browser, the country (looked up from the IP address on our own server), what was attempted and when, and the account when it is known, so the address can be blocked. The information about the activity is deleted after 90 days. A block (the IP address and the reason) is kept until it expires and deleted 90 days after that. Requests are logged (IP address, app or browser, the address without parameters and the response) and deleted after 30 days.

8. Legal basis

We process your account, the stories and your requests to us to provide the service you asked for. The sign-in history, security and the information about bans are based on our legitimate interest in protecting the service. The display name is based on your consent, which you withdraw by clearing the field. Preserving data under a police order is based on a legal obligation.

9. Where information is processed

Our servers and database are hosted by UpCloud in Norway, and our files by UpCloud in Finland. The audio in the stories is fetched directly from the storage in Finland (section 3). Everything else the app sends to our servers first passes through Bunny.net (Slovenia), which stops attacks and overload before they reach the servers. Bunny uses only servers in the EU, and sees your IP address and what the app sends, but does not store the content. Bunny logs the requests (your IP address shortened, app or browser, country, the address and the response), and requests that look like attacks with the full IP address. The logs are deleted after three days. Email is sent through an email provider in the EU (the Netherlands). We use no analytics tools or advertising networks, and we never sell information.

10. Your rights

You can ask for access to the information we have about you, have it corrected or deleted, and receive a copy of it. You can do most of this yourself in the app, and we handle the rest when you contact us. If you think we process your information incorrectly, you can complain to the Norwegian Data Protection Authority (Datatilsynet).

11. Children

Tante is made for children to listen to stories, but the account is for adults: an adult creates it and signs in on the child's phone or tablet. We do not ask for information about the children. When a child uses the app, the same is processed as when an adult does (sections 3 and 7), linked to the adult's account.

12. Changes

When this policy changes, the new version is published here with a new date at the top.

13. Contact

The data controller is Fredrik Magee. Questions about privacy, or a request for access or deletion: