TinybeanHome

Privacy Policy

Last updated: 22 July 2026

EasySLD Inc. (“Tinybean,” “we,” “us,” or “our”) operates the website located at mytinybean.com (the “Service”). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have.

This Policy forms part of, and should be read together with, our Terms and Conditions of Use. Capitalised terms not defined here have the meaning given in the Terms.

By using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Policy. If you do not agree, please do not use the Service.

1. WHO WE ARE

The Service is operated by EasySLD Inc., an Ontario corporation, at 15-75 Bayly St W, Unit 280, Ajax, Ontario L1S 7L7, Canada. We are responsible for the personal information in our custody and control. To reach the person accountable for privacy at Tinybean, contact our Privacy Officer using the details in Section 12.

2. INFORMATION WE COLLECT

2.1 Information you provide directly

Account information:

  • your email address;
  • a password, where you register with an email address. If you sign in using Google or Apple, we do not receive or store a password; authentication is handled by that provider;
  • your name (optional); and
  • your due date and the number of babies expected (optional).

Registry information:

  • links to products offered by third-party stores;
  • any notes you add to those links; and
  • registries you choose to link from other platforms.

Baby shower invitation information (all optional, as you choose to provide it):

  • the event name, date, and location;
  • the recipient’s name, and their email address or phone number; and
  • the baby’s name.

Collaborator information:

  • the name and email address of any person you invite to help manage your registry or invitation.

2.2 Information collected automatically

When you use the Service, we automatically collect certain technical information, including your IP address and related network information, your browser and device type, and information about how you interact with the Service. This is collected through analytics and tagging tools described in Section 6.

2.3 Information stored on your device

The Service uses your browser’s local storage to hold application state so the Service functions properly. This is essential to operating the Service, stays on your device, and is not an analytics or advertising cookie. It is not affected by your cookie consent choice.

2.4 Information about others that you provide

When you enter details about an invitation recipient or a Collaborator, you are providing another person’s personal information. You are responsible for having that person’s consent before you do so, as set out in the Terms.

3. HOW WE USE YOUR INFORMATION

We use personal information to:

  1. create and maintain your account and authenticate your sign-in;
  2. provide the Service, including building and displaying your registry, sending baby shower invitations on your behalf, and enabling Collaborator access;
  3. send you transactional communications relating to your account, registry, and invitations;
  4. measure and understand how the Service is used, so we can maintain and improve it;
  5. protect the security and integrity of the Service, prevent fraud and abuse, and enforce our Terms; and
  6. comply with applicable legal obligations.

We do not sell your personal information.

4. HOW WE SHARE YOUR INFORMATION

We share personal information only as described below.

4.1 Service providers

We use trusted third parties to operate the Service. They may process personal information on our behalf, only for the purposes we specify:

  • Supabase and Lovable Cloud — hosting, database, and application infrastructure;
  • Lovable — delivery of invitation and account emails; and
  • Google — analytics and tag/measurement services (see Section 6).

4.2 Registry and invitation recipients

When you share a Registry Link or send an invitation, the information contained in it becomes visible to the people you share it with. As explained in the Terms, we cannot control what recipients do with a Registry Link or invitation once it has been shared, including whether they forward it to others.

4.3 Affiliate networks

The Service uses affiliate links. When a purchase is made through one, the retailer or its affiliate network may report information back to us for the purpose of tracking and attributing affiliate commissions. This reporting is carried out by the retailer or network and is beyond Tinybean’s control; it is governed by that third party’s own privacy policy.

4.4 Aggregated and de-identified information

We may create aggregated or de-identified information that does not identify any individual. We may use and share this information — for example, with retail or brand partners — for purposes such as understanding trends and product interest. We do not share information that identifies an individual User with stores, brands, or other partners.

4.5 Legal and business transfers

We may disclose personal information where required by law, or in connection with a sale, merger, or reorganisation of our business, in which case the recipient will be bound by terms consistent with this Policy.

5. AFFILIATE LINKS AND THIRD-PARTY SITES

The Service links to third-party retailers and platforms. When you follow a link and leave the Service, the destination site collects and uses your information under its own privacy policy, not this one. We are not responsible for the privacy practices of third-party sites. Please review their policies before providing information to them.

6. ANALYTICS AND ADVERTISING TECHNOLOGIES

We use Google analytics and tag technologies (such as Google Analytics and Google’s measurement and advertising tags) to understand how the Service is used and to measure performance. These tools may set cookies or similar identifiers and may collect your IP address, device and browser information, and interaction data.

When you first visit the Service, we present a cookie consent banner that lets you accept or reject all non-essential cookies, including analytics and advertising technologies. We do not load these non-essential technologies unless you accept them. If you reject, they are not activated; essential technologies needed to operate the Service, such as those described in Section 2.3, are always active because the Service cannot function without them.

You can change your choice at any time through the consent controls on the Service, and you may also manage cookies through your browser settings or through Google’s own opt-out tools. Where required, we obtain your consent before setting non-essential cookies.

We use this data to measure and improve the Service. We do not currently use it to build advertising profiles of individual Users beyond the analytics and measurement purposes described here.

7. WHERE YOUR INFORMATION IS STORED

Your information is stored on infrastructure located in the United States, currently in the AWS US-West-1 region (Oregon / Northern California). This location may change as our providers change. By using the Service, you understand that your information will be processed and stored in the United States and potentially other jurisdictions, where it may be subject to access by courts, law enforcement, and authorities under the laws of those jurisdictions. We take reasonable steps to ensure that our service providers protect personal information in a manner consistent with this Policy.

8. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information for as long as your account is active or as needed to provide the Service. We do not automatically delete inactive accounts. You may delete your account at any time (see Section 9). Following deletion, some information may remain in secure backups for a limited period, or be retained where necessary to comply with legal obligations, resolve disputes, prevent fraud, or enforce our Terms.

9. YOUR CHOICES AND RIGHTS

You may:

  • access, correct, or update your account information through your account settings;
  • delete your account at any time from your account settings, which removes your registry, invitations, and checklist from the active Service and renders associated Registry Links inoperative;
  • withdraw consent to non-essential processing, subject to legal or contractual restrictions and understanding that some features may no longer be available; and
  • request access to the personal information we hold about you and ask how it has been used or disclosed.

Depending on your jurisdiction, you may have additional rights under applicable privacy law, including under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). To exercise any of these rights, contact our Privacy Officer using the details in Section 12. We will respond within the time required by applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

10. SECURITY

We use reasonable administrative, technical, and physical safeguards to protect personal information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

11. CHILDREN

The Service is intended for adults aged eighteen (18) or older, as set out in the Terms. We do not knowingly collect personal information from anyone under 18. Information about a baby or child that a User chooses to enter is provided by, and is the responsibility of, that adult User. If we learn that we have collected personal information from a person under 18 in the capacity of a User, we will delete it.

12. CONTACT US

For questions about this Policy, or to exercise your privacy rights, contact:

Privacy Officer
EasySLD Inc.
15-75 Bayly St W, Unit 280
Ajax, Ontario L1S 7L7
Canada
contact@mytinybean.com

13. CHANGES TO THIS POLICY

We may update this Policy from time to time. When we do, we will update the “Last updated” date above, and where changes are material we will notify you by email or through the Service. Your continued use of the Service after an update constitutes acceptance of the revised Policy.