Privacy Policy

Last updated: November 7, 2026. This explains what information GiggleLab collects, why, who can see it, and the choices you have. GiggleLab is run by Rebecca Lewis.

What we collect

• Account details: your email address, username, display name, short bio, avatar colour, an optional profile photo (grown-up accounts only) and password. Your password is stored scrambled (encrypted) by our database provider; we can't read it.
• Your age check: when you sign up we ask for your birth year to check you are 13 or older. We do not save your birth year.
• What you post and do: videos, captions and hashtags, comments, giggles (likes), shares, who you follow or add to your crew, who you block, and reports you send.
• Notifications we create for you inside the app (for example, "someone giggled at your video").
• Technical information: like most online services, our database provider automatically records things like IP addresses, device and browser type and the times you log in, to keep accounts secure and fix problems.
• Your photos and videos: the app only reads a video when you choose it to post. We don't look through your camera roll.
• We don't collect your precise location, your contacts, or your phone number.

Kid accounts (children under 13)

• Children under 13 can't sign up by themselves. A parent or legal guardian creates their account from Family in Settings and gives permission first.
• For a kid account we collect only what's needed to run it: a first name or nickname chosen by the grown-up, a username, a password, the videos the kid posts, the friendly phrases they send, their giggles, and their crew. Kids don't give an email address.
• We keep a record that the grown-up gave permission, and when.
• Kid profiles are private. Only the kid's grown-up, brothers and sisters on the same family account, and crew members every grown-up involved has approved can see them. Kids can't be found in search.
• Every video a kid posts waits until their grown-up approves it. Kids can only comment using a set list of friendly phrases, and no one can type free-text comments on a kid's video.
• Kid accounts never see ads, and we never sell or share children's information for advertising.
• Parents' rights: a grown-up can see their kid's videos and crew in the app, change their password, and permanently delete the kid's account and everything in it (Settings → Family → Remove). You can also email us to review, delete or stop collection of your child's information.

How we use information

• To run the app: create your account, show videos, comments and giggles, send in-app notifications, and let you follow people or join a crew.
• To keep people safe: filter unkind words, look at reports, handle blocks, and stop misuse.
• To fix problems and keep the service secure.
• We don't sell your personal information.

Who can see what

• Grown-up accounts (13+): your username, display name, bio, videos, comments, giggles and who you follow can be seen by other logged-in users, except people you block.
• Kid accounts: see "Kid accounts" above.
• Video files are private. The app opens them with links that only work for people allowed to see that video and stop working after a few hours.
• Reports are private: the person you report isn't told who reported them.

Companies that help us

• Supabase stores our database, accounts, photos and video files on servers in the United States. They process information only to provide this service to us.
• Resend sends our sign-up and password emails to grown-ups. It receives grown-up email addresses only, never information about kids.
• Cloudflare hosts our website and forwards email sent to our contact address.
• Apple delivers the app and, if you choose to share them, crash reports.
• We don't currently show ads from ad companies or use analytics or tracking tools. If we add them for grown-up accounts, we'll update this policy first. They will never be used on kid accounts.
• We may share information if the law requires it, or to protect someone's safety.

How long we keep it

• We keep your information while your account is open.
• You can delete a video at any time from the ⋯ menu on it.
• You can delete your account in Settings → Delete account. This permanently removes your profile, videos, comments, giggles, follows and notifications. Deleting a grown-up account also deletes any kid accounts it runs.
• Kid accounts with no logins for 12 months are deleted automatically, with their videos.
• In-app notifications are deleted after 90 days.
• Reports stay with us while our team reviews them and are deleted 12 months after they are closed. If you delete your account, your name is removed from reports you sent.
• The record that a parent gave permission is kept while the kid account exists and for 12 months after it is removed, then deleted.
• Technical logs kept by our providers are deleted on their own schedule, usually within a few weeks.

Your choices

• Edit your name, bio and photo in Edit profile.
• Make your grown-up account private in Settings.
• Block or report anyone from their profile, and report any video or comment.
• To ask for a copy of your information or for anything else here, email hello@gigglelab.app. Depending on where you live, you may have extra rights under your local laws; we'll honour them.

Security

Database rules make sure people can only see and change what they're allowed to. Connections are encrypted. No system is perfect, so please use a strong password you don't use anywhere else.

Changes and contact

• If we change this policy we'll update the date at the top and, for important changes, tell you in the app. We'll ask parents again before using kids' information in a new way.
• Questions or requests: Rebecca Lewis, hello@gigglelab.app.