Privacy policy

ToyHive (toyhive.app) is toy library management software operated by Teewinot Software Consulting Pty Ltd (ABN 50 629 248 139), trading as Toy Hive, based in Australia. You can reach us any time at [email protected].

Toy libraries use ToyHive to run their memberships, loans, and payments. Each library controls the member records it keeps in ToyHive; we store and process that information on the library’s behalf.

• Account details — your name and email address, and a password if you create one. If you sign in with Google or Facebook, that provider shares your name, email address, and profile picture with us. We never see your social media password. If you link an organisation’s Facebook or Instagram page to ToyHive, we use the permissions you grant to publish content, updates, and media directly to that page on the organisation’s behalf, strictly as directed by your users.
• Library records — membership, household, loan, roster, and payment records entered by you or your toy library in the course of running the library. For the library’s team, this can include Working with Children Check or similar clearance details (type, card number and expiry date) that the library records; card numbers are encrypted when stored. We don’t receive information from government screening bodies, and libraries are asked not to record why a check was refused, suspended or cancelled.
• Connected services — if your library connects its Google Business Profile so ToyHive can keep the listing’s opening hours and closures up to date, we store the access credentials Google issues for that purpose only, and use them for nothing else. Disconnecting under Settings > Google listing stops all updates.
• Payment information — payments are processed by Stripe or PayPal. Your card number goes directly to them and is never stored on our servers; we keep only the payment outcome and receipt details.
• Usage and diagnostics — basic page-view analytics, email and SMS delivery status, and error reports that help us keep the service reliable. The analytics are counts, not a record of you: each page view stores a scrambled code in place of your device and, if you are signed in, your account. Those codes are re-scrambled every day, so they let us count how many people used a library today without letting us identify anyone or follow you from one day to the next. We store no IP addresses and no browsing history, and we honour Do-Not-Track.

We use this information to operate ToyHive: signing you in, running your library’s loans and memberships, sending the emails and SMS messages your library asks us to send (reminders, receipts, roster invitations), taking payments, and fixing problems. We do not sell personal information, and we do not use it for third-party advertising.

We use Meta platform data exclusively to display authorised page selections to account administrators and to publish scheduled content to those selected organisation pages.

We share information only with the service providers that run the platform: our hosting provider, our email and SMS delivery providers, Stripe and PayPal for payments, and our error-monitoring service. Each receives only what it needs to do its job. Your library’s administrators can see the records for their own library — never another library’s.

All traffic is encrypted in transit, sensitive fields are encrypted at rest, and each library’s data is isolated from every other library’s. We keep personal information only while it is needed to run your library’s records, and we delete it on request — see our data deletion instructions.

We handle personal information in line with the Australian Privacy Act 1988 and, for New Zealand libraries, the NZ Privacy Act 2020. You can ask to access, correct, or delete your personal information at any time — contact your toy library, or email us directly at [email protected] and we will respond within 30 days.

If we change this policy we will update this page and the date above. Questions are always welcome at [email protected].