Privacy Policy

Effective Date: February 2026 | Last Updated: 26 September 2026

Tiny Sleeps ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"). It also covers our website, tinysleeps.app (see section 1.4).

1. Information We Collect

1.1 Information You Provide

Baby Profile Information:

• Baby's name (or nickname)
• Date of birth
• Premature birth status and due date (if applicable)
• Sex (optional)
• Your answers during set-up about your baby's routine, sleep environment and your goals

Tracking Data:

• Sleep sessions (start time, end time, wake-ups)
• Feeding records (type, amount, time)
• Diaper changes (type, time)
• Supplement and medication logs
• Notes you add
• Who logged each entry
• Sleep schedules the App works out from your logs (suggested nap and bedtime times)

Account Information:

• Your name
• Email address: the one you sign up with, or the one Sign in with Apple shares with us (Apple can hide your real address and give us a private relay address instead)
• Your password, if you sign up with email (our authentication provider stores it only in hashed form)
• Authentication tokens

Care Circle:

• The name you give each person you invite, their email address if you enter it, and their role (for example co-parent or caregiver)
• When they join, their own account information as described above, and when they were last active

1.2 Information Collected Automatically

Device Information:

• Device type and operating system
• App version
• Time zone settings

Diagnostic Information:

• Crash reports and error logs, including the app screens and actions leading up to a problem. These can include technical identifiers (random IDs the App uses internally, such as an installation ID, account ID or baby profile ID), but not your name or email address.

1.3 Information We Do NOT Collect

• Location data
• Photos or media from your device
• Contacts
• Health data from Apple Health or similar services

Note: Future versions of the App may offer optional Apple Health integration. If implemented, this will be clearly disclosed and will require your explicit consent before any data is accessed or shared.

1.4 Our Website

Our website is hosted by Cloudflare. We use Cloudflare Web Analytics to count visits and see which pages are read. It does not use cookies and does not build a profile of you. Like any web host, Cloudflare processes your IP address to deliver pages and protect the site.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Track and display your baby's sleep, feeding, and care patterns
• Generate Insights: Calculate wake windows, identify patterns, and provide schedule recommendations
• Sync and Share: Keep your data in sync across your devices and with the people you invite to your baby's care circle
• Consultant Sharing: If you choose to, share data with a sleep consultant (not all versions of the App have this yet)
• Keep the App Working: Use crash reports and error logs to find and fix problems, and check that suggested schedules work as intended
• Communicate: Send important updates about the App or your account

3. Data Storage and Security

3.1 Where We Store Data

• Data is stored on secure cloud servers using Supabase
• Data is encrypted in transit using TLS
• Data is encrypted at rest

3.2 Data Retention

• We retain your data for as long as your account is active
• You can ask to delete your account at any time, in the App or by email (see section 5.3)
• When we delete an account, we delete the account itself, the baby profiles it set up and everything logged for them. We do this without undue delay and within 30 days of your request. If you choose the App's 30-day grace period, the 30 days start when the grace period ends
• Crash reports are deleted automatically by our crash-reporting provider after its standard retention period

3.3 Security Measures

• Encryption in transit and at rest
• Secure sign-in with Sign in with Apple, or with email and password
• Access controls: a baby's records can be read only by the accounts that have been given access to that baby
• Monitoring for errors and problems

4. Data Sharing

4.1 We Do NOT Sell Your Data

4.2 People You Invite

Tiny Sleeps is built for sharing a baby's care. When you invite someone to your baby (for example a co-parent, a grandparent or a nanny):

• They can see the baby's profile and the entries logged for that baby, and add their own
• Each entry shows the name of the person who logged it, and people in the care circle can see each other's names
• The account that set up the baby decides who is invited and can remove people at any time. If this changes, we will update this policy

4.3 Consultant Sharing (Optional)

Not all versions of the App have this yet. Where it is available, and only if you choose to enable consultant collaboration:

• You can generate secure, time-limited share links
• Only data you choose to share is accessible
• You can revoke access at any time
• Share links expire automatically

4.4 Service Providers

We share data with service providers who help us operate the App and the website:

• Supabase - Cloud database and authentication services
• Apple - Sign in with Apple, and distribution of the App through the App Store
• Sentry - Crash and error reporting. Reports can include device and app details, technical IDs (such as installation, account or baby profile IDs) and the screens and actions before an error. They are set up not to include your name or email address
• Cloudflare - Website hosting and cookie-free visitor counts

Analytics: The App does not use third-party analytics or advertising services (such as Google Analytics, Mixpanel, or similar tracking tools). Sentry receives crash and error reports only, so we can fix problems. The App does not display ads and does not track you across other companies' apps or websites, so it does not use Apple's App Tracking Transparency (ATT) framework.

If we introduce paid subscriptions, App Store payments will be charged by Apple. If another provider (for example a subscription service) needs limited account or subscription data, we will name it in this policy before that begins.

4.5 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal process
• Protect our rights or safety
• Prevent fraud or abuse

5. Your Rights and Choices

5.1 Access Your Data

You can view all your data within the App at any time.

5.2 Get a Copy of Your Data

You can ask for a copy of your data by emailing support@tinysleeps.app. We may ask you to confirm the request from the email address on your account, and we will send your data in a common format (such as CSV or JSON) within 30 days. An export option inside the App is planned.

5.3 Delete Your Data

You can delete your account and all data through:

• The App: Settings > Delete Account (for the account that set up the baby). If a co-parent still shares your baby, the App will ask you to hand the baby over to them first
• If you joined a baby that someone else set up: ask them to remove you, or email us and we will delete your account within 30 days
• Contacting us at support@tinysleeps.app

5.4 Your Choices

• Consultant sharing is off unless you turn it on
• You decide who is in your baby's care circle
• Crash reporting helps keep the App working and cannot be switched off in the App. Crash reports do not include your name or email address

6. Children's Privacy

Tiny Sleeps is for parents and caregivers, not for children to use. We do not knowingly collect personal information directly from children under 13 (or the age of digital consent where you live). Information about your baby is entered by the adults who use the App and is controlled through their accounts. If you believe we hold information that should not have been collected, contact us at support@tinysleeps.app and we will delete it.

7. International Data Transfers

Our service providers (Supabase, Sentry, Cloudflare and Apple) may process data in the United States, the European Union and other countries. Where data is transferred from the European Economic Area or the UK to a country without an adequacy decision, we rely on our providers' data protection terms, including Standard Contractual Clauses. Ask us at support@tinysleeps.app for details.

8. California Privacy Rights

If you are a California resident, you have additional rights under the CCPA:

• Right to know what data we collect
• Right to delete your data
• Right to correct your data
• Right to opt-out of sale (we do not sell data)
• Right to non-discrimination

We do not sell personal information or share it for cross-context behavioural advertising. To make a request, email support@tinysleeps.app.

9. European and UK Privacy Rights (GDPR)

If you are in the European Economic Area or the UK, we process your personal data on these legal bases:

• Contract: to provide the App you signed up for (tracking, schedules, syncing and sharing with the people you invite)
• Legitimate interests: to keep the App and website secure and working, including crash reporting and cookie-free website statistics
• Consent: where we ask for it, for example optional consultant sharing

Information about your baby is personal data about your child, provided by you or by people you invite. Sleep, feeding, nappy, medication and prematurity records can count as health information; we use them only to provide the tracking you ask for.

You have the right to access, correct, delete, restrict, port or object to the processing of your data, and to withdraw consent where we rely on it. To exercise these rights, contact us at support@tinysleeps.app. You also have the right to complain to a data protection authority, for example the Information Commissioner's Office in the UK or the authority in your EU country.

10. Changes to This Policy

We may update this Privacy Policy from time to time, and the "Last Updated" date above will always change. For significant changes, we will also tell you in the App or by email where we can. If you do not agree with an updated policy, you can stop using the App and ask us to delete your account.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: support@tinysleeps.app

12. Apple App Store Requirements

This App complies with Apple's App Store Review Guidelines regarding privacy:

• We use data only for the purposes described in this policy
• We provide a clear data deletion mechanism
• We do not use data for tracking without consent

By using Tiny Sleeps, you acknowledge that you have read and understood this Privacy Policy.