Your family, your choices
These are the privacy controls available in Samtoon. For questions about your data, contact [email protected].
Accounts and family records
A grown-up owns the account. Children do not need their own login. Family records include a child’s nickname, age band, language, interests, lessons and practice progress. Exact birth dates and school names are not required.
Photos, files and recordings
Uploading lesson photos, PDFs and ordinary recordings requires media consent. Files are private to your family. Preparing a lesson with AI sends the selected material to the configured AI service; review every question before saving it. Optional AI voice features require separate consent.
Sharing lessons
Sharing is optional. A share link contains lesson text, without your family’s files, recordings or child profiles. Anyone who has the link can view the shared text while the link is valid. You can revoke a link from your lesson.
Connected AI apps
Connecting an AI app is optional and only a grown-up can approve it, from a signed-in parent session. An approved app can read your children’s nicknames, age bands, languages and practice progress. It cannot change anything, see photos or recordings, or pay. Disconnect it any time in Settings; deleting your family removes every approval.
Payment information
If you submit an InstaPay payment for an optional plan, the payment reference and any screenshot are associated with your account and reviewed by an administrator.
Export, consent and deletion
Open Grown-ups, then Family settings to export account records, download private files, remove a child, withdraw media consent or request family deletion. Withdrawing media consent removes stored original files and recordings. If deletion cannot finish, sign in again to retry or contact support.
Offline copies
Downloaded lessons and pending progress can remain on a device while it is disconnected. Server deletion cannot immediately erase those copies. Reconnect the device or sign out to clear family data stored by the app.
Usage measurement
We count public page visits, sample starts/completions and signup or plan selections by language, without sending names, account IDs, lesson content or full URLs in those events. These anonymous daily totals expire after 90 days. We honour browser Do Not Track and Global Privacy Control for these events. A short-lived hashed request limiter helps prevent abuse. Administrators can also view aggregate signup, practice and payment-approval totals from existing family records; deleting family records removes them from these reports.
Questions about data handling
Contact [email protected] for questions about storage providers, retention, backups, exports or deletion. This page describes the app’s controls; it does not promise a deletion deadline or a provider retention period.