Below is a summary of the key changes introduced in the new version of our Privacy Notice that comes into effect on 19th August 2026. You can still access the previous Privacy Notice for comparison.
Summary of Key Changes
DBS check provider: Our DBS (criminal record) check provider is now Personnel Checks. Previous versions of this notice referred to uCheck.
Aggregate statistical analysis: We've clarified that we may use register data (including records of when a child was absent because they were unwell) to produce aggregate, anonymised statistics about the childminding sector - for example, to compare illness rates in different types of childcare setting. Only aggregate statistics are produced or published; no individual child, family or childminder is identified.
Government childcare search (for childminders): We've explained that we may share the public details of a childminder's service (such as name, the area they work in, registration details, fees, hours, quality grading and a link to their tiney profile) with national childcare-search services operated by or on behalf of government, such as the Department for Education's "Find a Provider" tool, so that families can find childminders. This currently operates as a regional trial. Childminders can ask us not to share their details for this purpose at any time.
Anti-money laundering and compliance screening: Because the tiney wallet is an FCA-regulated e-money service, we are legally required to carry out anti-money laundering checks on childminders who hold a tiney wallet account. We've added a section explaining that we use ComplyAdvantage to screen childminders (and, where a childminder operates through a company, its directors and company associates) against sanctions lists, politically exposed persons (PEP) databases and adverse media. This data is transferred to the United States under appropriate safeguards.
Accessing your account to provide support: We've explained that a trained member of our customer care team may securely view the tiney app as you see it in order to help you with a query or investigate a technical problem (sometimes called "impersonation" or "view as user"). This does not give staff access to any data they could not already reach through our internal tools, photographs in learning journals are automatically blurred during these sessions, and private messages between you and a child's parents/guardians (or, if you are a parent/guardian, between you and your childminder) cannot be viewed or sent during these sessions. Any change to your account or data is only made with your permission, every session is recorded in an audit log, and the capability is limited to trained team members and used only to provide support or resolve issues.
Use of AI tools: We've given more detail about how we use AI tools. In particular, we now explain that we use the Anthropic Claude API to help us respond to data subject rights requests (such as subject access requests), handle complaints, investigate and manage safeguarding and quality concerns, carry out data protection compliance investigations, and analyse our operational data for business intelligence. AI is only used for these defined purposes, a trained member of our team always reviews the output before it is relied upon, and AI is never the sole basis for a decision affecting you. Anthropic processes this data in the United States under appropriate safeguards and does not use it to train its models.
If you have any questions or concerns about these changes, you are encouraged to contact our Data Protection Officer, Edd Read, at data-protection@tiney.co.
