Privacy Policy

Last updated: October 1, 2026

How Little Soul Academy collects, uses, and protects your family's information.

The short version

  • We collect only what we need to run Little Soul Academy: your email, your first name, your baby's name if you choose to share it, your baby's age, and your purchase details.
  • We never see or store your card details. Stripe handles payments.
  • We don't sell your information, and we don't use advertising trackers on this site.
  • You can ask to see, correct, or delete your information at any time by writing to hello@littlesoulacademy.com.

Who we are

Little Soul Academy ("we," "us," "our") is an early childhood platform for parents of babies and young children, founded by Fatima Esmail. The person responsible for your information is Fatima Esmail, trading as Little Soul Academy, Rua do Congo, 1990-296 Lisboa, Portugal.

Because we're based in Portugal, we follow the EU General Data Protection Regulation (GDPR). We give every family the same protections, wherever you live.

Questions about your privacy can go to hello@littlesoulacademy.com.

What we collect

Information you give us

  • When you join our waitlist: your first name, your email address, whether you're expecting or your baby has arrived, and your due date or baby's birth date if you share it. We use this to send you news that fits your baby's stage.
  • When you ask for a free guide: your email address and, sometimes, your first name.
  • When you buy: your name, email address, billing country, and the details of what you bought. Your payment card is entered directly with Stripe. We never receive or store your full card number.
  • When you set up your account: your first name, your baby's name (optional), and your baby's age, so we can open the right part of the PlayKit for you.
  • When you write to us or take part in a founding member call or private circle: whatever you choose to share.

Information collected as you use the site

  • Sign-in and progress: which parts of the PlayKit you've opened and downloaded, so your journey picks up where you left off.
  • Technical data: like any website, our hosting provider receives your IP address, browser type, and device information when you visit. This is used to keep the site running and secure.
  • Email engagement: our email provider may tell us whether an email was opened or a link was clicked. You can turn image loading off in your email app to prevent this.

About your baby

Little Soul Academy is for parents and caregivers, not for children to use. The only information about your baby we ask for is their age (or your due date, if you're expecting) and, if you like, their first name. Because a due date tells us you're pregnant, we only collect it with your consent, and you can ask us to delete it at any time. Please don't send us your baby's health records or other sensitive details. If you mention something about your baby's health in a message to us, we'll use it only to answer you.

How we use it, and why we're allowed to

The GDPR asks us to name the legal reason for each use. Here they are in plain terms.

What we doWhy we're allowed to
Give you access to what you bought, send sign-in links, and support youTo fulfil our agreement with you
Take payments, keep purchase records, and handle refundsTo fulfil our agreement with you, and to meet tax and accounting laws
Send waitlist updates, free guides, newsletters, and offersYour consent. You can unsubscribe in any email.
Send important account messages (a change to your access, a payment problem)To fulfil our agreement with you
Keep the site secure and prevent fraud or account sharingOur legitimate interest in protecting the service and our members
Track which partner referred you, so they receive their commissionOur legitimate interest in running our partner program

We don't sell your information, share it for advertising, or use it to make automated decisions about you.

Who we share it with

We use a small number of trusted services to run Little Soul Academy. Each one only receives what it needs to do its job.

ServiceWhat it does for us
StripePayments and payment plans
SupabaseMember accounts, sign-in, and PlayKit progress
ResendSending sign-in emails
BrevoNewsletters, free guides, and waitlist emails
CloudflareWebsite hosting and security
Google DriveHosting some free downloadable guides

If you came to us through one of our doula or midwife partners, we let that partner know a purchase was made so they can be paid. We don't share your purchase details beyond what's needed for that.

We may also share information if the law requires it, or with professional advisers (like an accountant) who are bound to keep it confidential.

Information that leaves the EU

Some of the services above are based in, or use servers in, the United States and other countries outside the EU. When that happens, we rely on the protections the GDPR allows, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework, so your information stays protected to the same standard.

Cookies and browser storage

We keep this simple. Right now, Little Soul Academy doesn't use advertising cookies, tracking pixels, or analytics cookies.

We do use your browser's storage to keep you signed in to your PlayKit. This is essential for the site to work, so it doesn't need your consent. Stripe's checkout and Cloudflare's security tools may also set their own essential cookies to prevent fraud and protect the site.

If we ever add analytics or advertising tools, we'll update this policy and ask for your consent first.

How long we keep it

  • Account and PlayKit data: for as long as you have an account. If you ask us to close it, we delete it within 30 days.
  • Purchase records: for as long as Portuguese tax and accounting laws require.
  • Email list: until you unsubscribe. After that we keep only your email address on a "do not email" list, so we don't contact you by mistake.
  • Messages to us: for up to 2 years after we last hear from you, unless they relate to a purchase.

Your rights

You can ask us to:

  • show you the information we hold about you, and give you a copy
  • correct anything that's wrong
  • delete your information
  • limit how we use it, or stop using it for a particular purpose
  • send your information to you or another service in a common format

Where we rely on your consent, like for newsletters, you can withdraw it at any time. Just write to hello@littlesoulacademy.com. We'll reply within one month, and there's no charge.

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to a data protection authority. In Portugal, that's the Comissão Nacional de Proteção de Dados (CNPD) at cnpd.pt. If you live elsewhere, you can contact your local authority.

Keeping it safe

Your account uses passwordless sign-in links, so there's no password to be stolen. Information is encrypted as it travels between your device and our services, and access to member data is limited to the people who need it to run Little Soul Academy. No system is perfectly secure, but if something ever went wrong that affected your information, we'd tell you and the relevant authority as the law requires.

Changes to this policy

As Little Soul Academy grows, this policy may change. We'll update the date at the top of the page, and if the change is significant, we'll let members know by email before it takes effect.

Contact

For anything about your privacy, write to hello@littlesoulacademy.com, or by post to Fatima Esmail, Little Soul Academy, Rua do Congo, 1990-296 Lisboa, Portugal.