Privacy policy

Last Updated: 12/03/2026

This Privacy Policy describes how Ted&Co SAS (“Ted&Co”, “Company”, “we”, “us”, or “our”) collects, uses, processes, and protects personal data when you access the website www.tedco.ai, purchase a Ted product, use the Ted&Co mobile application, or interact with the connected teddy bear product “Ted, Smart Teddy” (collectively, the “Services”).

Ted&Co is committed to protecting the privacy and security of its users, including children who interact with the product. This Privacy Policy explains what information is collected, how it is used, how long it is retained, and the rights available to users under applicable data protection laws, including the General Data Protection Regulation (GDPR).

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The controller responsible for the processing of personal data described in this Privacy Policy is:

Ted&Co SAS
100 rue Saint-Dominique
75007 Paris
France

Email: hello@tedco.ai

Ted&Co determines the purposes and means of processing personal data in connection with the Services.

2. Categories of Personal Data Collected

Ted&Co collects personal data in several contexts, including when users visit the website, purchase products, create accounts, or interact with the connected device and mobile application.

When visiting the website, certain technical information may be automatically collected through Shopify infrastructure and related technologies. This may include device identifiers, browser type, IP address, and information relating to interactions with the website.

When placing an order, Ted&Co collects information necessary to process and fulfill purchases. This typically includes the customer’s name, email address, shipping address, and any other information required to complete the transaction and deliver the product.

Payment information is processed directly by authorized payment service providers through Shopify and is not stored by Ted&Co.

When creating a parent account within the mobile application, Ted&Co may collect account information such as the parent’s email address, authentication credentials, parental settings, and device configuration preferences.

The mobile application and connected device may also process device-related information such as device identifiers, firmware version, connection status, and technical diagnostic data necessary to ensure proper functioning and security of the device.

3. Children’s Data and Parental Consent

Ted&Co products are designed to be used by children under the supervision of a parent or legal guardian.

Parents are responsible for creating and managing the parent account used to configure the device and the associated mobile application.

Ted&Co does not knowingly collect personal data directly from children without parental involvement. Any child-related information (such as a child’s name or age range) is provided voluntarily by the parent during device setup.

Parents maintain full control over the child’s profile and may modify or delete child-related information at any time through the parental control application.

If Ted&Co becomes aware that personal data has been collected from a child without appropriate parental consent, the Company will take steps to delete such information promptly.

4. Voice Interaction Data

Ted, Smart Teddy enables voice interactions between the child and artificial intelligence systems.

When a child speaks to the device, the voice interaction is temporarily processed in order to generate a response. During this process, audio input may be transmitted to artificial intelligence systems operated by third-party providers.

Temporary transcripts may be created during processing in order to generate a response.

Ted&Co does not store raw audio recordings of children in the cloud. Full conversation transcripts are not stored in Ted&Co cloud systems.

Voice interactions are processed ephemerally, solely for the purpose of generating a response.

Certain interaction summaries or recent messages may be stored locally within the parent’s mobile application so that parents can review interactions. These messages remain stored on the user’s device rather than in Ted&Co cloud systems.

Operational device data may be temporarily retained to maintain the reliability and security of the Services. Cloud retention for such operational data is limited to a maximum of seven (7) days.

5. Artificial Intelligence Processing

Ted, Smart Teddy uses artificial intelligence systems operated by third-party providers to generate conversational responses.

Voice interactions may be securely transmitted to these systems solely for the purpose of generating a response.

Ted&Co does not use user interactions to train artificial intelligence models.

AI-generated responses are produced automatically and may occasionally contain inaccurate or incomplete information. The product is intended as a conversational and educational companion and should not be relied upon as a source of professional, medical, or legal advice.

6. Purposes of Data Processing

Ted&Co processes personal data only for legitimate purposes related to providing and improving the Services.

Personal data may be used to:

create and manage user accounts
process purchases and deliver products
operate and maintain the connected device and mobile application
ensure security and detect technical issues
provide customer support

Data may also be used to send newsletters or product updates where users have consented to receive such communications.

Ted&Co does not sell, rent, or monetize user data.

Ted&Co does not use personal data for advertising profiling or for training artificial intelligence models.

7. Data Minimization

Ted&Co is committed to minimizing the collection of personal data, especially when products are used by children.

The Services are designed to operate with the smallest amount of personal information necessary.

Parents are encouraged not to provide sensitive personal information about children when configuring the device.

Ted&Co does not collect precise location data, biometric identifiers, or other sensitive categories of personal data from children.

8. Legal Basis for Processing

Under the GDPR, Ted&Co processes personal data on several legal bases depending on the context.

Processing necessary to provide the Services is based on the performance of a contract with the user.

Processing related to compliance with legal obligations, including accounting and tax requirements, is based on Ted&Co’s legal obligations under applicable law.

Certain processing activities, such as sending marketing communications, rely on user consent, which may be withdrawn at any time.

Ted&Co may also process limited technical data where necessary to ensure the security and reliability of the Services, based on the Company’s legitimate interests.

9. Data Retention

Ted&Co retains personal data only for as long as necessary for the purposes described in this Privacy Policy.

Parent account data is retained until the user deletes the account or requests deletion of their data.

Order and transaction records may be retained for up to ten (10) years to comply with accounting and tax obligations under French law.

Operational device data stored in cloud systems is retained for a maximum period of seven (7) days.

Voice recordings and full conversation transcripts are not stored in Ted&Co cloud systems.

Users may request deletion of their data at any time through the application or by contacting Ted&Co.

10. Data Sharing

Ted&Co does not sell personal data to third parties.

Personal data may be shared with trusted service providers that assist in operating the Services. These may include:

payment processors
cloud infrastructure providers
artificial intelligence service providers
technology platforms required to operate the mobile application and connected device

These providers process data only on behalf of Ted&Co and are contractually required to protect personal data.

11. International Data Transfers

Some service providers used by Ted&Co may be located outside the European Economic Area.

Where personal data is transferred outside the EEA, Ted&Co ensures that appropriate safeguards are in place in accordance with applicable data protection laws.

Such safeguards may include the use of European Commission Standard Contractual Clauses (SCCs) or other legally recognized mechanisms.

12. Cookies and Website Technologies

The Ted&Co website is hosted using Shopify infrastructure. Shopify may place cookies or similar technologies on users’ devices to enable core website functionality, maintain session information, process shopping carts, and support analytics.

Some cookies are necessary for the operation of the website, while others may help improve website performance and user experience.

Users may control cookie settings through their browser configuration.

13. Security Measures

Ted&Co implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

These measures include:

secure communication protocols
encryption of data in transit
access control systems
system monitoring

The Ted product does not include cameras or visual recording capabilities.

Ted&Co continuously reviews and improves its security practices to maintain the integrity and confidentiality of user data.

14. User Rights

Under the GDPR, individuals have certain rights regarding their personal data.

These rights may include:

the right to access personal data
the right to correct inaccurate data
the right to request deletion of personal data
the right to restrict processing
the right to data portability
the right to object to certain types of processing

Users may exercise these rights by contacting Ted&Co at:

hello@tedco.ai

Users also have the right to lodge a complaint with the competent supervisory authority.

In France, the competent authority is the Commission Nationale de l’Informatique et des Libertés (CNIL).

15. Marketing Communications

Users may choose to receive newsletters, product announcements, or updates from Ted&Co.

Such communications are sent only where the user has provided consent or where permitted by applicable law.

Users may unsubscribe from marketing communications at any time by following the unsubscribe instructions contained in the message.

16. App Store and Platform Providers

If the Ted&Co mobile application is downloaded through platforms such as the Apple App Store or Google Play Store, those platforms may independently collect information in accordance with their own privacy policies.

Ted&Co does not control the data practices of these third-party platforms.

17. Changes to This Privacy Policy

Ted&Co may update this Privacy Policy from time to time to reflect changes in the Services, legal requirements, or business practices.

Updated versions will be published on the website.

Continued use of the Services after the publication of an updated Privacy Policy constitutes acceptance of the revised policy.

18. Contact

For questions or requests relating to this Privacy Policy or the processing of personal data, users may contact: