Privacy Policy

Last updated October 23, 2026

The short version

Grown-ups set Chickadee up. Kids only scan cards and tap buttons on a jukebox: they never make an account, type their name, or talk to anyone.
We keep only what the jukebox needs: your sign-in, your kids' first names, their songs, their jukeboxes, and the feelings they tap.
Grown-ups you invite into your family see the same kids and songs as you, can add and remove songs, and see your name and email address.
No ads, no analytics or tracking tools, and we never sell personal information or share it for advertising.
You can remove kids, songs, jukeboxes and music logins any time, and ask us to delete everything.

Who we are

Chickadee is run by David Vivero ("we" or "us"). This policy covers the Chickadee website where grown-ups sign in, the Chickadee jukebox app for phones and tablets, and the Chickadee API. Questions go to hello@chickadee.co.

What we collect

From grown-ups, on the website

What	Why
Your email address, and your name if you continue with Google	To sign you in and show who is signed in. Google may also share a profile picture; we don't use it.
A family name, which we start from your first name, who is in your family, and who is its primary grown-up	To keep your kids and jukeboxes together, and let the grown-ups in the family look after them: the primary manages kids, jukeboxes, TIDAL logins and who's in the family, and collaborators pick songs. Everyone in a family sees each other's name, email address, role and when they joined.
Family invites, including the email address of the person you invite	So you can invite other grown-ups into your family. We keep who it's for (the name and email address you type), who sent it and when, and who used it and when, and we email the invite to that address. We keep only a fingerprint (SHA-256 hash) of the invite link. Anyone who opens the link sees the family's name and the name or email address of whoever sent it, and once signed in, the kids' names. Please invite only people who are happy to hear from Chickadee.
Each kid's name	So you and their jukebox can tell kids apart. A first name or nickname is all Chickadee needs.
The songs you pick for each kid	So their jukebox knows what it may play. A TIDAL song that isn't in Chickadee yet joins the shared song library (title, artist, album, cover, TIDAL ID), which other families can use. We note which account added it, but other families never see that.
Each kid's TIDAL login: their TIDAL user ID, username, country, the permissions granted, and a sign-in token	So their jukebox can play from TIDAL. The token is encrypted (AES-256-GCM), only our server can read it, and it is passed only to that kid's jukeboxes.
Jukebox setup codes	To connect a jukebox to a kid. Each code works once and expires after 15 minutes.
API keys	So you can use the Chickadee API. We keep only a fingerprint (SHA-256 hash) and the first characters of each key, its name, and when it was made, last used and revoked. The full key is shown to you once.

From the jukebox app

A random ID. Each jukebox signs in to our database anonymously, with no name, email or phone number.
About the jukebox: whether it runs iOS or Android, the name it shows ("Chickadee" unless you change it), which kid it is for, when it was set up, and when it last checked in with Chickadee.
Feelings. When a kid taps Happy, Calm, Excited, Sad, Silly or Brave for a song, we save that song's number, the feeling and the time, linked to the jukebox's random ID, so the jukebox can play every song that feels that way. Kids can tap a feeling again to take it back.
Camera. The jukebox uses the camera only to read QR codes on song cards, in the song book and on setup codes. It reads them on the device; pictures are never saved or sent anywhere. The app doesn't use the microphone, location, contacts or photos.

The jukebox also keeps a few things on the device itself so it works offline: the kid's name and song list, its settings, album covers, and the TIDAL or Spotify sign-in, which those services' own software keeps in the device's secure storage. Deleting the app removes them.

Automatically

Like any website, Chickadee records basic request logs, such as IP address, browser or app type, the page asked for, the time and any errors, to run and protect the service and fix problems. We don't use them to build profiles of anyone. We don't collect payment details or advertising IDs, and we don't use analytics, advertising or social media trackers on the website or in the jukebox.

Children's privacy

Chickadee is made for families, and kids use the jukebox. This section is our notice to parents about how Chickadee handles children's information.

Kids can't create accounts, type messages, post, or contact anyone through Chickadee. There are no ads or purchases on the jukebox.
A grown-up connects each jukebox with a one-time code from their signed-in account. The jukebox's grown-up settings sit behind a long press and a times-table question.
From the jukebox we collect only its random ID, details about the device, and the feelings a kid taps, and we use them only to run the jukebox. We don't use them for advertising or to build profiles, and we don't share them except with the providers that run Chickadee for us.
The information about your kids that you give us on the website (their names, songs and TIDAL logins) is used only to run their jukeboxes. Every grown-up in your family, including anyone you invite, can see it and change the kids' songs; only the primary grown-up can change the rest.
Parents can review and remove their kids' information on the website at any time, and can ask us to see or delete anything else, including feelings, or to stop collecting it, by emailing hello@chickadee.co. We'll check the request comes from the account's email address first.
The website is for grown-ups. If we learn that a child under 13 made an account, we will delete it.

How we use information

To run Chickadee: signing you in, showing your kids and songs, setting up jukeboxes, signing them in to TIDAL, sending them their songs, and playing feelings playlists.
To keep it safe and working: refusing songs marked explicit, preventing misuse, and fixing problems.
To email you about your account, such as sign-in links and important changes to Chickadee or this policy, and to email the people you invite into your family.

We don't sell personal information, share it for targeted advertising, or use it for anything else without asking you first.

Who we share it with

We share information only with the services that run parts of Chickadee for us, and only what each one needs:

Service	What they get, and why
Supabase	Our database and sign-in provider. It stores everything described above, on servers in the western United States (Oregon), and sends sign-in emails through Postmark.
Postmark	Delivers our emails: sign-in links and family invites. It gets the address each email goes to and what the email says (for an invite, the name you typed, your name and email address, your family's name and the invite link). We turn off its open and link tracking, and it keeps a record of each email for a limited time.
Vercel	Hosts the website, so it handles every request to it, including your IP address.
Better Stack	Keeps the website's request and error logs, described above, on servers in the United States, so we can find and fix problems.
Google	Only if you choose "Continue with Google". Google tells us your name and email to sign you in. Google's privacy policy covers your Google account.
TIDAL	You sign in to a kid's TIDAL account on TIDAL's own page. Their jukebox then plays music with that login, so TIDAL sees what is played on that account, as with any TIDAL app. Our server also searches TIDAL's catalog and looks up songs, which sends nothing about you. When you press Listen on a song, your browser loads TIDAL's own player, so TIDAL receives your IP address and browser details and may set its own cookies. It plays a 30-second preview, or the whole song if you're signed in to TIDAL in that browser, and TIDAL's privacy policy covers it.
Spotify	Only on Android, and only if a grown-up connects it. The jukebox asks the Spotify app on the device to play songs, so Spotify sees what is played on that account.
Musixmatch	We send a song's recording code (its ISRC) to check its lyrics and whether they're explicit, and nothing about you. When you open a song card that shows lyrics, your browser loads a tiny image from Musixmatch that counts the view, as its license requires, so Musixmatch receives your IP address and browser details.
Wikipedia	We look up an artist's name for the "About the artist" text on song cards. Nothing about you is sent.

We may also share information if the law requires it, or if we need to protect someone from harm. If Chickadee is ever passed to someone else to run, we'll tell you before your information moves, and this policy will still apply to it.

Cookies

The website uses only the cookies it needs to work: sign-in cookies that keep you signed in until you sign out, a short-lived, encrypted cookie while you connect a kid's TIDAL account, which is deleted when you finish or after 10 minutes, and, if you're in more than one family, a cookie that remembers which one you're looking at. There are no advertising or analytics cookies. TIDAL's player, which loads only after you press Listen, may set TIDAL's own cookies.

How long we keep it

Kids, their songs, jukeboxes and TIDAL logins stay until you remove them or delete your account. Removing a kid also removes their song list, jukeboxes, setup codes and TIDAL login.
Removing a jukebox disconnects it from your family straight away. Its feelings stay linked only to its random ID until a kid takes them back or you ask us to delete them.
Setup codes stop working after 15 minutes, and invites after 7 days or once used. Revoked API keys stop working at once.
We erase the email address on an invite once it's used, and delete unused invites 30 days after they stop working.
Removing a grown-up from your family, or leaving it, ends their access straight away, and stops the API keys, unused setup codes and invites they made for it.
When you ask us to delete your account, we delete it within 30 days. Your family and everything in it goes too, unless other grown-ups are still in it, in which case it stays with them, and if you were its primary grown-up, the one who joined first after you takes over. Songs you added stay in the shared library, without any link to you.
Request logs and database backups are kept for a limited time and then deleted on our providers' schedules.

Your choices

On the website, every grown-up in a family can:

add or remove kids' songs
leave the family, and sign out

And the family's primary grown-up can:

rename or remove kids, and disconnect a kid's TIDAL account
rename, move or remove jukeboxes, and cancel setup codes
rename the family, invite grown-ups, cancel invites, remove grown-ups, and hand the primary role to someone else
revoke API keys

Disconnecting TIDAL on the website stops new jukeboxes getting the login. A jukebox already signed in stays signed in until you choose Disconnect TIDAL in its grown-up settings, where you can disconnect Spotify too.

Email hello@chickadee.co to get a copy of your information, correct it, or delete your account and everything with it. Depending on where you live, for example California, the EU or the UK, the law may give you these rights and others, such as objecting to how we use your information. We offer them to everyone, and we won't treat you differently for using them. If you're in the EU or UK, we use your information to provide the service you asked for, and you can complain to your local data protection authority.

Security

Chickadee uses encrypted connections everywhere. Database rules let each family see only its own information, TIDAL tokens are encrypted, API keys are stored only as fingerprints, and each jukebox can read only its own kid's songs. No system is perfect, so please tell us at hello@chickadee.co if you find a problem.

Where it's stored

Chickadee's information is stored and processed in the United States. If you use Chickadee from elsewhere, your information is transferred there.

Changes

If we change this policy, we'll update the date at the top. For important changes, we'll email you or tell you on the website before they take effect.

Contact

David Vivero, hello@chickadee.co. See also our Terms of Use.