Your child’s record is not an advertising profile

Pre-launch review date: 22 July 2026

1. Who this notice covers

This notice covers guardians, invited caregivers, relatives and other people using TinyTrack. Child health and care records are treated as sensitive information. A caregiver is also a data subject and receives notice about their identity, device and activity records.

2. Information we process

We process account and authentication details; household relationships and permissions; child identity, birth and prematurity details; care, growth, vaccination, medication and development records; photos and documents; reminders and delivery status; support, billing and security records; and technical data needed to protect sessions and synchronize devices. Telegram communities never receive private child records.

3. Why we use it

We use information to provide the family-care service, synchronize authorized caregivers, deliver requested reminders, protect accounts, respond to support and data-rights requests, meet legal obligations and improve reliability using de-identified product measures. We do not sell child or health data, run advertising profiles, or use health records for targeted marketing.

4. Guardian choices and household sharing

Guardians choose who joins a household and which child and capabilities each person may access. Invitation links require authentication and do not grant access by themselves. Equal guardians may have independent rights, so deletion or transfer requests can require an ownership review.

5. Service providers and transfers

Approved providers may process only the data needed for regional cloud hosting, storage, email, push, payments, monitoring, support and security scanning under contract and access controls. The current provider and transfer register is published on the subprocessors page. Production activation requires an assessment of each cross-border data flow.

6. Retention

Active family records follow the household retention setting, currently limited to 1–10 years. Authentication challenges, revoked sessions, notification metadata, support cases, audit evidence and backups have separate documented schedules. Legal holds may pause deletion for a defined purpose and period. Restored backups reapply the deletion ledger before serving users.

7. Your controls and rights

In account settings you can review sessions, revoke access, correct records through auditable revisions, download JSON/CSV/PDF copies, withdraw consent and request deletion. We verify identity and authority before fulfilling a request and show its status. Requests also cover relevant processors unless a documented legal exception applies.

8. Security and support access

TinyTrack uses encryption, least-privilege roles, household database isolation, private object storage, rate limits, monitored audit events and tested recovery controls. Staff cannot browse family records. Identifiable support access requires a case, reason, limited scope, guardian approval, expiry and a parent-visible history.

9. Contact, complaints and changes

Privacy requests can be submitted from account settings or the support page. Before public registration, TinyTrack must publish the legal controller name, address, privacy/DPO contact, complaint route and final Saudi-counsel-approved effective date. Material notice changes will be versioned and presented for renewed acknowledgement where required.