Tiny Rhythm — Privacy Policy
Tiny Rhythm is a baby sleep-routine tracker for parents and caregivers. We built it to be private by design. This policy explains, in plain language, what information the app handles, where it lives, and the choices you have.
The short version: your app data stays on your device and in your own Apple iCloud account. We do not operate a server that receives your baby’s information, we do not put analytics or ads in the app, and we never sell or share your information. The public website at tinyrhythm.app uses cookieless Plausible Analytics for aggregate page views only. That is separate from the app.
1. Who we are
Tiny Rhythm (“we,” “us,” the “app”) is published by the developer of Tiny Rhythm. You can reach us any time at support@tinyrhythm.app.
2. Our privacy posture
- Local-first. The app stores your data in a database on your device. It works offline.
- Your iCloud, not our server. If you use sync or caregiver sharing, your data is stored in your own Apple iCloud account using Apple’s CloudKit. We do not run a backend that your data passes through, and we cannot see it.
- No analytics, no tracking, no ads in the app. The iOS app contains no analytics, advertising, telemetry, or crash-reporting SDKs. We do not track you across apps.
- The marketing website is separate. tinyrhythm.app uses Plausible Analytics, a cookieless EU-hosted visitor counter. It records aggregate page views, referrers, and device type. It does not use cookies, does not store personal identifiers, and does not follow you around the web. It cannot see your baby’s logs.
- No sale of data. We never sell, rent, or trade your information.
- No AI training. We do not use your data to train models.
3. Information the app handles
You choose what to enter. The app is designed to track an infant’s routine, so the information it stores can include:
- Baby profile: the name or nickname you enter, date of birth, and an optional profile photo.
- Routine logs: sleep and wake times, and (if you enable those features) feeds, diaper changes, and routine activities.
- Notes: any free-text notes you add to an entry.
- App settings: your schedule preferences, reminder settings, and similar configuration.
- Caregiver sharing identifiers: if you invite a caregiver, Apple uses the recipient’s Apple ID / iCloud identity to deliver the share. We do not maintain a separate contact list or account directory.
The app does not collect your contacts, location, browsing history, advertising identifiers, or device identifiers for tracking.
4. Where your information is stored
- On your device: in a local database (and, for the optional profile photo, in the app’s local storage), protected by your device’s security and iOS data protection.
- In your Apple iCloud (optional): if your device is signed in to iCloud, the app syncs to the private database of your own iCloud account via Apple CloudKit, governed by Apple’s iCloud terms and privacy policy. We do not have access to your iCloud account or its contents.
- Profile photos are stored locally and, when sync is active, uploaded to your own iCloud as a CloudKit asset — never to a developer server.
5. Caregiver sharing
Tiny Rhythm lets you share a baby’s record with co-parents or caregivers using Apple’s CloudKit sharing (CKShare):
- You control it. Sharing only happens when you invite someone, and you decide who.
- What is shared: the shared baby’s profile and routine logs, so an invited caregiver can view and add entries.
- How it travels: through your iCloud and the caregiver’s iCloud via Apple, not through us.
- Stopping sharing: as the owner you can remove a caregiver or stop sharing anytime. A caregiver can leave; leaving removes the shared data from their device but does not delete the owner’s copy.
6. Backups and export
- On-device safety snapshots let the app recover your data after an interruption. They stay on your device and are not sent anywhere.
- Manual export. An export you create is a file you control — when you save or share it, treat it like any other sensitive file and keep it somewhere private.
7. What the developer can see
Nothing about your baby’s data. The app has no developer server and no analytics SDK, so we do not receive your baby’s information, your logs, your photos, or in-app usage statistics. If you email support, we only see what you choose to include. The marketing website only shows us aggregate visit counts from Plausible (which pages were viewed, not who you are).
8. Third parties
- Apple iCloud / CloudKit stores and transmits your data when you use sync or caregiver sharing. Apple processes it as the operator of iCloud, under Apple’s own privacy policy.
- Apple App Store / StoreKit processes any Tiny Rhythm Premium subscription purchase. We do not receive or store your payment details and do not track your purchase history — Apple handles the transaction and manages your subscription.
- Plausible Analytics (EU) counts aggregate visits on tinyrhythm.app only. It is not in the iOS app and does not receive app data.
- We do not put advertising networks, analytics SDKs, data brokers, or social-media SDKs in the app.
9. Children’s privacy
Tiny Rhythm is intended for parents and caregivers to track information about their own child. It is not directed to children, and children do not use the app or create accounts. Information about your child that you enter stays under your control on your device and in your own iCloud; we do not collect it.
10. Data retention and deletion
- You control retention. Your data remains until you delete it.
- Delete all data. Settings → Delete all data permanently erases your local data — the on-device database, local backup snapshots, and cached profile photos — and cancels scheduled reminders. If you are the owner of a synced baby, it also requests deletion of that data from your iCloud (records, photo assets, and the share); because iCloud deletion runs over the network, it completes once your device is online. If you are a caregiver who joined a shared family, it removes the shared data from your device and leaves the share; it does not delete the owner’s data.
- Uninstalling removes the local copy from that device. Use Delete all data first if you also want to remove the iCloud copy.
11. Security
Your information is protected by your device’s security and iOS data protection, and — when synced — by Apple’s iCloud security. Because your data does not pass through a developer server, the common risks of a central database breach do not apply here.
12. Your choices
- Use the app fully offline by not signing in to iCloud or not using sharing.
- Decline notifications — reminders are optional.
- Decline photo access — the profile photo is optional.
- Export your data anytime, and delete it anytime, from Settings.
13. Not medical advice
Tiny Rhythm provides general sleep education and scheduling support. It is not medical advice and does not diagnose, treat, or prevent any medical condition, and it does not claim to prevent SIDS. For concerns about your child’s breathing, feeding, weight gain, illness, or anything that feels wrong, consult your pediatrician or a qualified healthcare provider.
14. Changes to this policy
If we make material changes, we will update the effective date above and, where appropriate, note the change in the app or its App Store listing.
15. Contact
Questions about this policy or your privacy? Email support@tinyrhythm.app.