For grown-ups

Our Privacy Notice

This is the complete version. Our Privacy Promise is the short version and it says the same things; if the two ever disagree, tell us, because that is a bug.

1. Who we are

Mini Songwriter is operated by Vanech Inc.

Address: 2402 – 634 Church Street, Toronto, Ontario, Canada M4Y 0G9
Telephone: +1 416 303 4606
Email: hello@minisongwriter.com

Vanech Inc. is the only operator collecting or maintaining personal information from children through this service. Write to us at the address above about anything in this notice and a person will answer.

2. What we collect about your child

Their first name.
Their birthday, if you give one. It is optional, you can clear it at any time, and it is used for two things and nothing else: keeping the words at roughly the right age, and making your child a birthday song on the day. The date is never sent to anyone outside Mini Songwriter — the songwriter is told a rough age band and, on the day, that it is a birthday.
Which child slot they are in your account.
The story they tell about their day, in their own words — we keep up to 2,000 characters of it.
The sound and singer chosen for each song.
The lyrics written from that story, and the finished song and its cover picture.

That is the whole list. We do not ask for a surname, an address, a school, a photograph, or anything biometric, and there is no facial or voice recognition anywhere in this product. Your child has no login, no password and no email address with us; they reach Mini Songwriter through your account.

This service does not let a child make personal information publicly available. There is no profile, no sharing feed, no comments and no other children. My Songs is private to your account, and the only way anything leaves it is when you download it yourself.

3. What we collect about you, the parent

Your email address and password, a display name if you give one, your time zone, the record of your consent (when you gave it and which version of the Privacy Promise you agreed to), and your subscription state. Your card details are held by Stripe, our payment processor — we never see or store a card number.

4. How we use it

To write and record one song a day from the story your child tells, to keep those songs in My Songs for your family to play and download, to take payment, and to answer you when you write to us. That is all. There is no advertising in this product, we do not profile your child, and we never sell or rent anything about your family.

5. Who else receives it, and why

GoogleYour child’s first name, and the story they told — the first 1,200 characters of itTo write the lyrics for that one song

ElevenLabsThe finished lyrics and the song title, which contain your child’s first nameTo perform and record that one song

CloudflareThe finished song files and their cover artTo store them privately so My Songs can play them back

RenderEverything the account holds, because it runs the database it is kept inTo host the service and its database

StripeThe parent’s card details and the amount, plus an internal reference for their household — nothing about a child, and no child’s nameTo take the $1.00 that proves a grown-up is a grown-up, to give it back, and to take the subscription payment

ZohoNothing from the product. Zoho runs our email — so if you write to us about your child, your message sits in that mailbox, the same as any email you send anyone. If you ask us to reset your password, our reply with the link comes from that mailbox tooTo receive and hold the mail you send us, so a person can answer you

Google and ElevenLabs may use what they receive only to make that song, and for nothing of their own. Cloudflare, Render and Zoho hold what is put there, on our instruction. Nobody on this list is allowed to use your child’s information for their own purposes, and there is nobody else who receives anything about your family.

6. Your child’s voice

When your child speaks instead of typing, the recording never leaves the device. The words are turned into text by software running inside your own browser; no audio is uploaded, none is stored by us, and none reaches any company on the list above. The temporary file the browser uses is overwritten with random data and deleted as soon as the words have been read out of it — whether that succeeded or failed. What continues on from that moment is text, and it is treated exactly like a story your child typed.

7. How long we keep things — our retention policy

The Rule requires us to publish this, and it requires it to be specific.

Songs, lyrics and the stories behind themFor as long as your account is openThe product is a keepsake — a song your child made is meant to still be there years later. That is the business need, and it is the whole promise

Your child’s first name and, if you gave one, their birthdayFor as long as your account is openTo make the songs about them, to keep the words at roughly the right age, to give them a birthday song, and to keep each child’s songs separate

Consent recordsFor as long as your account is open, and the record of consent events is kept as evidence after deletionTo be able to show that consent was given, and when, and to what words. Kept as a history — a withdrawal does not erase the fact that consent once existed

Your billing stateFor as long as your account is openTo run the subscription

Download bundles you ask us to make7 days, then automatically deletedSo you can fetch a big file after we have built it

Everything, after you cancel90 days from cancellation, on a date we show you, then deletedSo you can take it all with you and change your mind

Your email address and name, if you never give consent30 days from when we asked, then your email address, your name and the empty account are deleted. You do not have to do anythingIt is the only thing we hold, and we hold it only to ask you. Nothing about your child exists, because nothing about your child is collected before you say yes

Deletion receiptsKept after deletion, deliberatelyTo prove a file was destroyed. A receipt holds a fingerprint of the deleted object — enough to show it is gone, not enough to rebuild one byte of it

When something reaches the end of that list we delete it, and we check: the sweep re-reads storage afterwards and only records the deletion as verified once it finds nothing there. The 90-day date is read in your time zone, not ours, and if you resubscribe on day 89 nothing is lost.

8. Your rights, and how to use them

As the parent you can, at any time:

Review everything we hold about your child — on your Account screen, Download my family’s data builds a file with every song and every word in it;
Delete one child’s data — open that child’s profile and choose Delete ⟨name⟩’s data. Or delete everything: on your Account screen, Delete my account. Either way we keep a receipt showing it is gone;
Refuse any further collection — on your Account screen, Withdraw my consent. From that moment nothing new is collected, used or shared: no new songs, no new child profiles, and your children’s screens close. It deletes nothing — everything already made stays exactly where it is, and you can give consent again whenever you like.

If you would rather write to a person than tap a button, use the email address or telephone number in §1 and we will do it for you. We may need to check you are the account holder before we act.

9. Cookies and identifiers

One cookie, for you, not your child: it keeps you signed in. There is no analytics service, no advertising pixel, no third-party tracker, and no persistent identifier is collected from a child anywhere in this product.

10. Changes

If we change what we do with your family’s information, we do not quietly update this page. The Privacy Promise is versioned, your consent points at the exact words you agreed to, and a material change puts that question back in front of you before it takes effect.

Last updated: 2026-09-18. Privacy Promise version 2026-09-09.1.

Back to the start

Your account and privacy controls