Tiny Rhythm — Privacy Policy

Effective date: June 30, 2026

Last updated: October 12, 2026

Tiny Rhythm is an iOS baby sleep and routine tracker for parents and caregivers, published by Nicolas Hesson. Contact support@tinyrhythm.app about privacy or support.

Information used by the app

The app stores the information you enter: a baby’s name or nickname, birth date, optional due date and photo, timezone, sleep and wake records, optional feeding, diaper and routine entries, notes, schedule preferences and reminder settings. It also keeps local technical state needed for reminders, purchases, sync, recovery and pending deletion. You do not create a Tiny Rhythm account.

Device storage and iCloud

Your primary records are in a local database. Core sleep logging and suggestions work offline. When your device is signed in to iCloud and CloudKit is available, the app can automatically sync owned records and photos to your private iCloud database. Not inviting a caregiver does not turn off your own iCloud sync. Availability depends on your Apple account, device settings, storage and connection.

Invited caregivers access shared records through Apple’s CloudKit shared database. We do not operate a server that receives these routine records, and this implementation does not give us access to users’ private or shared CloudKit records. Apple operates iCloud under its privacy policy and service terms.

Caregiver sharing

An owner chooses whom to invite. Apple processes the invitation and account identity. Caregivers with access can view the shared baby’s profile, photo and routine records and add or change entries according to their sharing permissions. Share only with people you trust. Sync can be delayed or unavailable offline.

Owners can remove participants; caregivers can leave a share. Leaving does not erase the owner’s records. Revoking access cannot recall files, screenshots or other copies a recipient already saved, and changes may take time to reach another device.

Photos and reminders

A profile photo is optional and is stored locally and as a CloudKit asset when sync is active. The app requests photo access for this purpose. Reminder permission is optional; reminders are scheduled locally. Reminder text may appear on your lock screen according to your notification settings. Apple CloudKit also uses background notifications for sync. The app does not use HealthKit, advertising identifiers or location tracking.

Backups and exports

Recovery snapshots and app-created exports are kept in app storage. Device or computer backups may include app data and these files, depending on your settings. This is separate from CloudKit sync.

Backup and CSV exports contain profiles you own; a caregiver cannot export a joined profile and should ask its owner for a copy. Exports are readable, not encrypted by Tiny Rhythm. Saving or sharing an export sends a copy to the destination you choose, which may have its own storage and privacy practices. Keep copies private. Deleting data in Tiny Rhythm cannot delete copies saved outside the app or previously made device backups.

Purchases

Optional Premium subscriptions use Apple’s StoreKit. Apple processes payment and renewal. The app reads transaction and entitlement information on the device to unlock features and restore purchases; it does not send that information to a developer payment server. We do not receive your payment-card details. Deleting app data or uninstalling does not cancel a subscription; manage it in your Apple subscription settings.

Analytics, support and this website

The app has no advertising or third-party analytics or crash-reporting integration in this release implementation. We do not sell routine records or use them for AI training.

If you email support, we and our email provider receive your address, message and attachments. Send only what is needed; avoid child photos, full exports and sensitive notes. We use support correspondence to answer and resolve the request, retain it only as needed for support and applicable obligations, and can consider deletion requests at the address above. This is separate from the app’s private routine database.

Our public website is hosted through Cloudflare. Visiting it involves ordinary network information, such as an IP address and request details, being processed by the hosting provider to deliver and secure pages. The website does not receive your app’s baby records. The sleep guide is available without an email signup. This policy does not promise that hosting or email providers process no personal information.

The current website waitlist form saves the email address, optional question and submission time only in that browser’s local storage. It does not send those fields to us, register you with an email service or enable us to send a launch notification. These entries have no automatic expiry in the current page and remain until the browser removes them or you clear Tiny Rhythm’s website data in your browser settings. They are separate from app data and are not removed by the app’s Delete all data action. A website analytics event can count a form submission without including those fields.

The website uses Plausible Analytics to measure page visits and selected website interactions, and Cloudflare Web Analytics to measure website usage and performance. These website services are separate from the app and do not receive its routine database. Their requests involve network and browser information; see Plausible’s data policy and Cloudflare’s Web Analytics collection information. Our statement that the app has no third-party analytics does not mean this website has no analytics.

Retention and deletion

Records remain until you delete them. In Settings → Delete all data, the app clears local routine records and requests removal of local photos, recovery snapshots, app-created exports and reminders. Some minimal technical state and pending CloudKit cleanup identifiers remain to finish deletion safely. File cleanup can fail; if you suspect remaining files, contact support without attaching an export.

For owned records, the app queues deletion of its private CloudKit zone, including records, assets and shares. For shared records, it queues leaving the shares without deleting another owner’s data. Cloud cleanup is not necessarily immediate: reopen the app with a working connection and the same iCloud account so pending requests can finish. Account changes, sign-out, network errors or uninstalling before cleanup finishes may leave cloud data in place. Local deletion alone is not confirmation of cloud deletion.

Uninstalling removes the app’s local container but does not itself delete previously synced iCloud data, external exports, recipients’ copies or device backups. Manage external copies and backups separately through the service or device where you saved them.

Children’s information and your choices

Tiny Rhythm is operated by adults; it has no child-facing account or mode. Only enter and share a child’s information when you have authority to do so. You can use a nickname, omit a photo and notes, decline notifications, export your records, and delete them. Use device iCloud settings to manage iCloud availability; simply avoiding caregiver invitations does not disable sync.

Security and medical boundary

Protection depends on your device security, Apple account and chosen backup/export destinations. Keep your passcode and Apple account secure. We do not promise end-to-end encryption for every path or absolute security.

Tiny Rhythm provides general sleep education and scheduling support, not medical advice, diagnosis or treatment. It does not claim to prevent SIDS or guarantee sleep outcomes. Ask a qualified pediatric clinician about health, feeding, growth or safety concerns.

Changes and contact

We will update this page when practices change and provide additional notice where appropriate. Privacy questions and requests: support@tinyrhythm.app.