Privacy Policy

You need an account to use Tiny Toes. You sign in with Apple or with a 6-digit code sent to your email address; Tiny Toes has no passwords for you to create.

Account information

• Email address. The address you sign in with. If you use Sign in with Apple and choose Hide My Email, we receive Apple’s private relay address instead of your real one.
• Name (optional). Only if you share it when signing in with Apple. Accounts created with an email code have no name.
• Identifiers. An account ID we create for you. If you use Sign in with Apple, we also keep the identifier Apple gives us for your Apple Account and a Sign in with Apple token (stored encrypted), which we use only to revoke Tiny Toes’ access to your Apple Account when you delete your account.

What you log

• Your babies: name, and if you add them, date of birth and sex.
• Entries: the type (breastfeed, pumping, bottle, wasted milk, solids, weight, nappy or sleep), date and time, and the details you enter: amounts, milk type (formula or breast milk), milk left over, side, duration, weight, pee or poop, poop colour and consistency, and notes.

This is information about your baby’s feeding, growth and health that you choose to record. It is stored on your phone and in your Tiny Toes account so it can sync with your other phones and your family.

Family information

• Which family (household) your account belongs to, and who else is in it.
• Invitation codes you create, and your partner’s email address if you choose to add it to an invitation.

Technical information

• Server logs. When the app talks to our server, it records your IP address, the time, which function was used (for example “sync” or “sign in”), the result and how long it took. Logs don’t contain what you log about your babies.
• Abuse-prevention counters. To stop people guessing sign-in or invitation codes, we count recent attempts per email address, IP address and account. These counters store only a one-way hash of the address or ID, never the address itself.

On your phone only

Your settings (units, appearance, whether feeding guidance is shown and which location’s guidance to use) stay on your phone and are not sent to us. The guidance location is a setting you choose (it starts from your phone’s region setting); Tiny Toes never uses your device’s location. Your sign-in tokens are kept in the iOS Keychain.

• No analytics, crash-reporting, advertising or tracking SDKs, and no advertising identifier. Tiny Toes doesn’t track you across other companies’ apps or websites.
• No access to your location, contacts, photos, camera, microphone or the Health app.
• No payment details (Apple handles payments; see Subscriptions and payments).

If you have chosen in your iPhone’s settings to share analytics with app developers, Apple may give us crash reports and app usage statistics that don’t identify you. That is controlled by Apple and your iPhone settings, not by Tiny Toes.

We use your information only to provide Tiny Toes:

• to create your account, sign you in and keep you signed in;
• to email you the sign-in codes you ask for (this is the only email the service sends; there are no newsletters or marketing emails);
• to store and sync your babies and entries between your phones and with your family;
• to run family sharing: invitations, joining and leaving a family, and showing members’ names and email addresses to each other;
• to keep the service secure and working: limiting repeated attempts, preventing abuse and fixing problems;
• to delete your account and revoke Sign in with Apple when you ask; and
• to reply when you contact us.

We don’t use your information for advertising, profiling or selling, and we don’t look at what you log unless you ask us to help with a problem or the law requires it.

Legal bases (UK, EU and similar laws). We process your account and logged information because it is needed to provide the service you asked for (performance of a contract), and server logs and abuse-prevention counters for our legitimate interest in keeping the service secure. Information about your baby’s feeding, growth and health, and about breastfeeding and pumping, is health information: special-category (sensitive) information under the UK and EU GDPR and the Australian Privacy Act. We process it only with your consent, which you give by choosing to record it in Tiny Toes, and only to store and sync it for you and your family. You can withdraw consent at any time by deleting the entries, the baby or your account.

Each account starts in a family of its own. Nobody else can see your logs unless they join your family with an invitation code from someone in it, or you join theirs. A family can have up to 6 people.

• Everyone in a family can see the other members’ names and email addresses.
• Everyone in a family sees, adds, changes and deletes the same babies and entries. Deleting or erasing entries, or removing a baby, does so for everyone.
• If you invite someone by email, they can see your name and email address with the invitation. An invitation code works once and expires after 7 days.
• When you join a family, your existing babies and entries are added to that family.
• When someone leaves a family, they keep a copy of everything logged up to that point, and the family keeps its records. Neither can delete the other’s copy afterwards.

Only invite people you trust. Tiny Toes Premium subscriptions are not shared between family members; see Subscriptions and payments.

Your account, babies, entries, family and invitations are stored with Amazon Web Services in the Asia Pacific (Sydney) region, in Australia. Sign-in is run by Amazon Cognito, and sign-in code emails are sent by Amazon Cognito from no-reply@verificationemail.com. If you live outside Australia, your information is transferred to and stored in Australia, and we protect it as described in this policy wherever you live.

A copy of your babies and entries is also stored in the app on your phone (and on your family members’ phones) so it works offline.

Emails you send to support@tinytoes.io are received by Amazon Web Services in the same Sydney region, which keeps a copy for 30 days and then deletes it automatically. Each email is then forwarded to the mailbox where we read and answer support email, which is hosted by Google (Gmail), so Google also stores your email and any attachments, and may store them outside Australia.

We don’t sell, rent or trade your information, and we don’t share it with advertisers or data brokers. We share it only:

• with the members of your family, as described above;
• with Amazon Web Services, which hosts the service and processes information on our behalf under its data processing terms;
• with Google, only for emails you send us: they are forwarded to the Gmail mailbox where we read and answer them;
• with Apple, when you use Sign in with Apple or buy a subscription. Apple’s own privacy policy covers what Apple does; and
• when the law requires it, or to protect the safety, rights or security of our users, the public or us.

If you are in the United States: we don’t “sell” or “share” personal information as those terms are used in US state privacy laws, and we don’t use it for targeted advertising.

Tiny Toes Premium is bought through the App Store and payments are processed by Apple. We never see or store your payment details. The app checks with Apple on your phone whether your subscription is active, and that status is not sent to our server. Subscriptions belong to your Apple Account and are not shared with your Tiny Toes family.

Signing out

Signing out (Settings, then Sign out) ends that session on our server straight away (if your phone is online) and removes Tiny Toes data from your phone. The app remembers your email address on the phone to fill in the sign-in screen; deleting your account removes it. Your data stays in your account and comes back when you sign in again.

Deleting your account in the app

In Tiny Toes, go to Settings and tap Delete account. When you confirm:

• your sign-in account is deleted straight away, and you are removed from your family;
• your account record (email, name and identifiers), the invitations you created and the abuse-prevention counters linked to your account are deleted;
• if nobody else is in your family, all its babies and entries are deleted from our servers shortly afterwards. If other people are still in your family, the babies and entries stay with them, because they are their records too;
• if you signed in with Apple, we ask Apple to revoke Tiny Toes’ Sign in with Apple access. If Apple can’t be reached, we keep retrying automatically for about a day, then by hand; the encrypted token is deleted within 15 days; and
• Tiny Toes data is removed from your phone.

Deleting your account doesn’t cancel an App Store subscription. Cancel it in your Apple Account settings (the Delete account screen in the app has a Manage subscription button).

You can also stop using Sign in with Apple with Tiny Toes at any time in your iPhone’s Settings: tap your name, then Sign-In & Security, then Sign in with Apple. If you can’t use the app, email support@tinytoes.io from the address on your account and we will delete it for you.

Tiny Toes is for parents and carers, who must be adults. It is not directed at children and children must not create accounts. The information about babies in Tiny Toes is entered by their parents or carers, who control it and can change or delete it at any time. We don’t knowingly collect information from children. If you think a child has created an account, email us and we will delete it.

• All communication between the app and our server is encrypted with HTTPS.
• Information is encrypted at rest by AWS, and stored Sign in with Apple tokens are additionally encrypted with their own key.
• Each family’s records can only be read by members of that family.
• You never create a password: you sign in with Apple or with a one-time code that expires after an hour. Repeated wrong codes are blocked.
• Sign-in tokens are stored in the iOS Keychain. Access tokens last an hour, and signing out while online ends the session at once.

No system is perfectly secure. Keep your email account and phone secure, because anyone who can read your email can request a sign-in code.

• See and correct: everything you log is visible in the app and can be changed or deleted there.
• Delete: delete entries, babies or your whole account in the app at any time.
• Feeding guidance: turn it off in Settings. It works entirely on your phone.
• Access, a copy and other requests: depending on where you live (for example under the Australian Privacy Act, the UK GDPR or the EU GDPR), you may have the right to access, correct, delete, restrict or object to the use of your information, or to receive a copy. Email us and we will respond within 30 days.

If you’re not happy with our response, you can complain to your privacy regulator, such as the Office of the Australian Information Commissioner (OAIC), the UK Information Commissioner’s Office (ICO) or Ireland’s Data Protection Commission.

This website has no cookies, analytics, advertising or tracking, and loads no scripts, fonts or images from other sites. We haven’t turned on visitor logging. Pages are delivered by Amazon CloudFront, which necessarily processes your IP address to send them to you.

If we change this policy, we will update it here and change the date at the top. If a change significantly affects how we use your information, we will also say so in the app or on this website before it takes effect.

Questions, requests or complaints about privacy: support@tinytoes.io (Chris Kelly, developer of Tiny Toes).