Jellies is a children’s video app. We do not sell personal data, we do not show advertising, and we do not build advertising profiles of children. We collect the minimum needed to run an account, sync a library across devices, and keep the service working. A parent controls the account, and a parent can delete it — along with everything in it — at any time.
1. What we collect
Account data. The parent’s email address, a hashed password or the identifier returned by your sign-in provider, and the country you selected. If you subscribe, our payment processor gives us the last four digits of the card, its expiry, the billing country, and a subscription status. We never receive or store full card numbers.
Child profile data. The first name or nickname you type, the age or age band you select, and an avatar colour. A nickname is enough — you are not required to give your child’s real name or date of birth.
Library and usage data. Which shelves and videos you approved, what has been downloaded to the device, playback position, minutes watched, and daily-limit settings. This is what makes the screen-time dashboard and “keep watching” work.
Device and diagnostic data. Device model, operating system version, app version, language, a randomly generated install identifier, crash reports, and error logs. The install identifier is not an advertising identifier and is reset when the app is deleted.
Support data. If you email us, we keep the message and our reply so we can follow up.
We do not collect precise location, contacts, photos, microphone or camera input, biometric data, or browsing activity outside the app.
2. Children’s data
Jellies is designed for family use under parental control, and the account holder must be an adult. We handle children’s data in line with the Children’s Online Privacy Protection Act (COPPA) in the United States, the UK Age Appropriate Design Code, and Article 8 of the GDPR.
In practice this means:
- A child cannot create an account, subscribe, or change privacy settings. Those actions sit behind the parent area.
- There is no free-text messaging, no comments, no user-generated uploads, and no way for a child to be contacted by another person through Jellies.
- Kid Mode contains no external links, no purchase paths, and no advertising.
- We collect no more from a child profile than is needed to play approved videos and apply the limits a parent set.
- We do not use a child’s activity to profile them, to target content commercially, or to train advertising models.
A parent may review, correct, export, or delete a child’s profile at any time from the parent area, or by writing to hi@jelliesapp.com.
3. How we use data
- To create and maintain your account and subscription.
- To sync approved shelves, downloads, and playback position between your devices.
- To apply the daily limits, age filters, and Kid Mode lock you configured.
- To show you the screen-time dashboard.
- To fix crashes, diagnose playback failures, and measure whether a release made things worse.
- To answer your support requests.
- To send service messages — receipts, renewal notices, and security alerts. Marketing email is opt-in and separate.
- To detect fraud, abuse, and payment problems, and to meet our legal and tax obligations.
4. Legal bases
Where the GDPR or UK GDPR applies, we rely on: contract for running your account and subscription; legitimate interests for keeping the service secure, preventing fraud, and understanding aggregate reliability; consent for optional marketing email and any optional analytics you enable; and legal obligation for financial records. You may withdraw consent at any time without affecting the rest of the service.
5. Who we share with
We do not sell personal data and we do not share it for cross-context behavioural advertising. We use a small number of processors who are contractually bound to act only on our instructions:
- Cloud hosting and storage — to run the service and store your library.
- Content delivery — to stream and download video efficiently.
- Payments — to take subscription payments and issue refunds.
- Crash and error reporting — to receive diagnostic reports.
- Email delivery — to send receipts, resets, and service notices.
- Customer support tooling — to manage support conversations.
We may also disclose data where we are legally required to, or to protect the safety of a child or another person. If Jellies is ever acquired, we will tell account holders before their data moves, and the acquirer will be bound by this policy or one at least as protective.
6. Advertising
There is no advertising in Jellies. No banners, no pre-rolls, no sponsored videos, no product placement inserted by us, and no third-party ad SDKs in the app. We do not use advertising identifiers, we do not run retargeting pixels inside the app, and we do not share child data with ad networks or data brokers.
7. Retention
We keep account and library data for as long as the account is open. Screen-time history is kept for 24 months, then aggregated. Crash and diagnostic logs are kept for 90 days. Support conversations are kept for 24 months. Payment and tax records are kept for as long as the law requires, usually seven years.
When you delete your account we remove your profiles, library, and screen-time history within 30 days, other than records we must keep for legal or accounting reasons. Backups are purged on a rolling 35-day cycle.
8. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, receive a portable copy, object to or restrict certain processing, withdraw consent, and — in the United States — opt out of sale or sharing, which we do not do in any case. You also have the right not to be discriminated against for exercising these rights.
Most of this is self-service in the parent area, including export and account deletion. Otherwise write to hi@jelliesapp.com and we will respond within 30 days. If you are in the EEA or UK you may also complain to your local supervisory authority.
9. Security
Data is encrypted in transit with TLS and at rest with AES-256. Passwords are hashed with a modern key-derivation function and are never stored in readable form. Access to production data is limited to staff who need it, is logged, and requires multi-factor authentication. We run regular backups, dependency scanning, and third-party penetration tests. No system is perfect; if a breach affects you, we will notify you and the relevant regulator within the timeframes the law sets.
10. International transfers
We operate in several regions, so your data may be processed outside your country. Where data leaves the EEA or UK we rely on adequacy decisions or Standard Contractual Clauses with additional technical safeguards. You can ask us for a summary of the transfer mechanisms in use.
11. Changes
If we change this policy we will update the date at the top. For material changes we will email account holders and show a notice in the parent area at least 14 days before the change takes effect.
12. Contact us
Privacy questions and rights requests: hi@jelliesapp.com
Everything else: hi@jelliesapp.com
Jellies Ltd, data controller. Postal address and Data Protection Officer contact details are available on request.