Last updated: 21 September 2026
The Little Lights ("The Little Lights", "TLL", "we", "us" or "our") respects your privacy and recognises that information relating to children, neurodivergence, health and family life can be particularly sensitive.
The Little Lights is designed so that The Little Lights administrators and staff do not have access to the contents of users' private records through the administrative platform. Some features may automatically process information, including uploaded reports, using artificial intelligence or other technology in order to provide functionality requested by the user.
This Privacy Policy explains what information we collect, how it is processed, how we protect it, who may process it on our behalf and what rights may be available to you.
The Little Lights is operated by:
The Little Lights is designed primarily for parents, guardians and carers aged 18 or over. Children should not create their own The Little Lights accounts. Parents and guardians may create profiles for children and store information relating to them.
Where you provide information about a child, you confirm that you are:
Depending on how you use The Little Lights, information may include:
Account information, such as: name; email address; account ID; authentication information; account preferences; country or region; subscription information.
Child profile information, such as: name or nickname; age or date of birth; interests; routines; communication preferences; sensory preferences; developmental information; educational information.
Health and developmental information, such as: autism; ADHD; AuDHD; developmental differences; diagnoses; suspected diagnoses; sensory needs; therapy information; assessment information; professional recommendations.
Private journal and tracking information, such as: journal entries; observations; behaviours; triggers; strategies; sleep-related observations; emotional experiences; routines; wins; milestones; parent wellbeing information.
Uploaded reports, such as: diagnosis reports; assessment reports; occupational therapy reports; therapy reports; educational reports; related documents.
Technical information, such as: device type; browser; IP address; approximate location or region; app/web version; security logs; login activity; error and crash information; session information.
Usage information, such as: features used; feature frequency; platform performance; navigation patterns; technical interactions.
Private records may include:
The Little Lights administrators, staff and internal administrative users cannot access, open or manually read the contents of these private records through the administrative platform. The Little Lights team does not routinely review or monitor the contents of users' private journals, reports or child records.
This does not mean that information is never technically processed. The underlying systems and authorised service providers may process information where required to securely store data or provide features requested by the user.
Certain features within The Little Lights may use artificial intelligence or automated systems. For example, when you choose to upload a diagnosis, assessment or therapy report and request a summary, the contents of that report must be processed automatically in order to generate the requested summary.
The purpose of this processing is to provide the feature you have chosen to use. The Little Lights administrators and staff do not manually read the report as part of this process.
AI-generated summaries are intended to help you organise and understand information. They are not professional medical interpretations, diagnoses or treatment recommendations. AI systems may occasionally misunderstand, omit or inaccurately summarise information. You should refer to the original report and an appropriately qualified professional when making important decisions.
Health, diagnosis, disability, developmental and psychological information may be treated as sensitive personal information or special-category data under applicable privacy laws. Where required, The Little Lights will request appropriate explicit consent before processing this information.
Users choose whether to provide this information and which optional features they wish to use.
Before a user first enters or uploads relevant health, developmental, diagnosis or assessment information, The Little Lights should request affirmative consent. Suggested wording:
"I consent to The Little Lights processing the health and developmental information I choose to provide about my child in order to provide these app features, including automated processing where required to provide features I choose to use."
We may store: date and time consent was given; consent version; and user/account identifier.
Uploaded reports may contain particularly sensitive information. Where you choose to upload a report:
While administrators cannot access private record contents through the admin platform, authorised administrative users may access limited operational information required to manage the Service. This may include:
Administrative users must not be given access to private journals, reports, detailed child records or other sensitive private-content fields.
We may process information to:
The Little Lights does not sell your personal information or your child's personal information. This includes:
We do not use private child, diagnosis, health, report or journal content to create targeted advertising profiles. We do not provide this private information to advertisers or data brokers. We do not share private records with third parties for their own independent marketing or commercial purposes.
The Little Lights may use third-party technology providers in order to operate the platform. These may include providers of:
These providers may technically process information on our behalf where required to perform the service we have engaged them to provide. Where they act as service providers on our behalf, they should process information only for the relevant contracted purpose and subject to appropriate privacy, confidentiality and security protections.
This service-provider processing should not be described as selling data or sharing it for unrelated third-party commercial purposes.
Where an external AI provider is used to deliver a feature such as report summarisation, relevant content may need to be sent securely to or processed by that provider. The purpose is solely to provide the feature requested by the user.
The Little Lights should configure AI service providers, where technically available, so that private TLL user content is not used by the provider for unrelated advertising or independent purposes. The Privacy Policy should be updated if the technical AI processing arrangement materially changes.
Payments and subscriptions may be processed by Stripe or another authorised payment provider. The Little Lights may receive information such as:
The Little Lights does not store full payment-card details.
We may use technical and usage information to understand:
Where reasonably possible, analytics should be aggregated or de-identified. Private journal content, uploaded report contents or detailed child health information must not be used for general product analytics.
The Little Lights is designed for adults to manage. Children should not directly create their own accounts.
Where parents or authorised carers store information about children, we aim to:
The Little Lights may use service providers located in other countries. This means information may be processed outside the country where you live. Where applicable law requires safeguards for international transfers, we will use appropriate legal, contractual or technical protections.
Private information associated with an active account may remain stored while the account remains active so that it remains available to the user.
If you delete information or your account, information should be deleted or anonymised within a reasonable period subject to:
Backups may retain deleted information temporarily before being overwritten or securely removed.
Cancelling your subscription does not automatically delete your account. If your membership ends:
Account deletion is different from cancelling a subscription. When you request account deletion, your personal records should be deleted according to this Privacy Policy and any applicable legal or technical retention requirements.
Account deletion may permanently remove:
Where available, users should be encouraged to export anything they wish to retain before deleting their account.
Where technically feasible, users should be able to export or download relevant personal information. This may include:
Depending on where you live, you may have rights including:
These rights may be subject to legal exceptions. To make a privacy request, contact: holly@thelittlelights.co
We may need to verify your identity before fulfilling certain requests.
Where processing relies on consent, you may have the right to withdraw that consent. Withdrawing consent may prevent certain features from continuing to operate. Withdrawal does not necessarily make previous lawful processing unlawful.
Where UAE privacy legislation applies, we aim to process personal information in accordance with applicable requirements regarding:
Where UK or European data-protection law applies, our lawful bases may include:
Where required for sensitive health or diagnosis information, we will seek appropriate explicit consent.
Additional privacy laws and rights may apply depending on where you live. Nothing in this Privacy Policy is intended to limit rights that cannot legally be excluded.
Because The Little Lights may store highly sensitive family information, appropriate technical and organisational safeguards should be implemented. These may include:
The administrative interface must remain configured so that The Little Lights administrators and staff cannot access users' private report contents, journals or other private records.
No digital platform can guarantee absolute security. Users should use strong passwords and protect access to their devices.
If we become aware of a personal-data breach, we will investigate it and take appropriate action. Where required by applicable law, we will notify affected individuals and/or relevant regulators.
The Little Lights website and web application may use cookies or similar technologies for:
Where required, consent should be requested before using non-essential cookies.
If you choose to receive marketing communications from The Little Lights, you may unsubscribe at any time. Private records relating to you or your child must not be used to determine personalised marketing content.
Service-related messages concerning your account, privacy, security, billing or subscription may still be sent where necessary.
We may update this Privacy Policy as The Little Lights develops or as our technology, legal requirements or data-processing practices change. The latest version should show its current update date.
Where a material change affects sensitive personal information or existing consent, additional notice or renewed consent should be requested where required.
Questions or privacy requests can be sent to:
The Little Lights
Version 1.0