Tiny & Mine privacy policy
Effective 16 October 2026.
Who we are
Tiny & Mine is made by Rajgopal & Co Pty Ltd (ABN 34 695 070 298), Victoria, Australia. This policy says what the app keeps, where, why, and what you can ask of us. It is for adults: parents, carers and the helpers they invite.
Free in beta
Tiny & Mine is free while in beta; we'll tell you before that changes.
On your phone first
Everything you record (feeds, sleeps, nappies, medicines, notes, vaccinations) is stored on your phone. If you don't turn on family sharing, it stays there.
Your plan
When Tiny & Mine first opens it gets a random install id from our server, with no family data, ready for when plans start. Nothing you record is sent with it, and nothing syncs until you turn on sharing.
Health information
Much of what you record is health information, which the law treats as sensitive: feeds, sleep, medicines, temperatures, symptoms, growth, vaccinations, pregnancy and postnatal check-ins (bleeding, mood, recovery). Children's profiles (names and dates of birth) are entered by their parents. We use all of it only to show it back to your family, never for anything else. Our support tools show accounts, plans and messages, not what you record.
Family sharing
If your family turns on sharing, your records sync to the Tiny & Mine server in Amazon Web Services' Sydney region, so the parents and helpers you invite see the same timeline. Parents see everything. Helpers see the children's profiles and records, handover notes, the expressed-milk stash and the names of family members, not a mother's own records.
Photos and documents
If you attach a photo or PDF to a record (such as your child's allergy action plan), it is kept on your phone and, if your family shares, on our server with your records, so the parents and the carers who look after that child can open it, even offline. Photos are made smaller on your phone before they are sent, and are shown back unchanged apart from that resizing. Attachments are never sent to speech-to-text, AI, analytics or our support tools. When you delete the record, its files are deleted from our server within 30 days (and from the backups up to 7 days after that); leaving a family removes its files from your phone.
Backups
The server streams a backup of its database to AWS storage in Sydney, kept for 3 days, and AWS keeps a daily copy of the whole server for 7 days. When you delete a record, the server keeps only a marker that it was deleted (its id, kind, child and time, none of what it said) so every phone removes it too. The deleted content stays in the backups for up to 7 days.
How data travels
Traffic between the app and our server, including voice recordings, is encrypted and goes through Cloudflare's network: the encrypted connection ends at Cloudflare and travels on to our server through a Cloudflare tunnel.
Signing in
If you sign in with Apple or Google, they receive the sign-in request. We keep the account id they give us, your email address and your name; for Apple, also a refresh token, used only to revoke the sign-in when you delete your account. Session tokens are stored only as hashes. We never see your Apple or Google password.
Messages to us
If you write to us from the app, we keep your message, the app's version, your phone's operating system version, platform and store, and which account, family or phone sent it, so we can reply. Only we read it. We delete messages 12 months after the conversation ends or goes quiet, and straight away when you delete your account.
Notifications from your family
If you turn on alerts from your family, your phone gives us a push address from Apple (iPhone) or Google (Android) so we can tell you when someone in your family starts labour mode, gives you a task or ticks one off, when a carer leaves a handover note or a record to check, or when we reply to your message. We keep that address with your sign-in, only until you sign out, turn alerts off, or your account or access is deleted. A notification never includes names, what you recorded or any medical details: it only says what kind of thing happened, and you open the app to see it. Apple or Google delivers it, so they see that short text. You can turn each kind off, or set quiet hours, in Family > Notifications.
Your voice
Voice commands are turned into text on your phone by its built-in on-device recogniser; the audio isn't sent to Apple or Google. On a phone that can't do that, the recording is sent to our server only if your family shares, turned into text there, and discarded straight away; without sharing, you type instead. We never store recordings. If you ask Siri to log something ("Hey Siri, log in Tiny and Mine"), Siri turns what you say into text under Apple's own privacy terms, then Tiny & Mine opens with that text for you to check.
Overseas
Our server and backups are in Sydney. Some of the services we rely on are run from overseas or by overseas companies: Cloudflare (a US company with a global network) carries traffic to the server, and Apple and Google (US) handle sign-in and delivering notifications. Each receives only what it needs to do that job.
Logs and limits
Your IP address is held in memory for a short time to limit repeated attempts. Server logs may record IP addresses and the pages requested; they are kept only briefly and overwritten as they fill. With each sign-in session we keep the app version and phone platform last used, to know which versions are still in use. We keep a record of support actions on your account (such as free time given or a phone signed out) for 2 years.
What we never do
No ads. We don't sell or rent your data. No third-party analytics or tracking. We count active families on our own server, as totals only.
How long we keep it
Your account and family data until you delete them; logs briefly; backups up to 7 days after a deletion; messages 12 months after a conversation ends or goes quiet; push addresses until you sign out or turn alerts off; a record of each notification sent (its kind and whether it was delivered, never its text) for 30 days.
Deleting your account
Delete your account from the Family tab, or say "delete my account". Before anything is deleted the app shows exactly what goes: your account and your messages to us, and the family if you are its last parent (its children, entries and helpers' access). We remove it from our server and ask Apple to revoke the sign-in straight after. If another parent stays in the family, the family carries on: the entries you made stay with it, with your name on them, unless you delete them first. Without the app, see /delete-account.
A copy of your data, and your rights
You can download your data in the app at any time, as a readable summary and a complete JSON file, or ask us for a copy at [email protected] with your account id. You can also ask us to correct anything. We reply within 30 days. A copy we prepare for you is kept for 7 days for you to download, then deleted. If you are unhappy with our answer you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
This policy is effective from 16 October 2026. If we change it in a way that matters, we say so in the app before the change applies, and the date here changes.
Contact
Questions or requests: [email protected].