🐰 ToddleBits

Introduction

Welcome to ToddleBits ("we," "our," or "us"). We are committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Password (encrypted and securely stored)
• Profile information you choose to provide

Child Information

To track your child's milestones, you may provide:

• Child's name or nickname
• Date of birth
• Photos and videos of milestones
• Notes and descriptions of developmental moments

Device & Usage Information

We automatically collect:

• Device type and operating system
• App usage patterns and feature interactions
• Crash reports and performance data

On-Device Face Recognition

ToddleBits includes an optional photo-import feature that helps you sort photos by child. This feature uses on-device face detection to find faces in a photo and compares them against a face "signature" — a numeric representation, not a photo — that the app creates on your device for each child profile you add.

• Processing: Face detection and matching run entirely on your device using Apple's and Google's on-device machine learning frameworks. No face image, face landmark, or face signature is ever transmitted off your device.
• Storage: Face signatures are stored only in the app's local storage on your device, associated with the child profiles in that app installation.
• Sharing: Face data is never sent to ToddleBits' servers, never shared with any third party, and never used by any third-party AI or machine-learning service.
• Retention & deletion: Face signatures persist on-device only until you delete the associated child profile or uninstall the app, at which point they are removed immediately. We do not hold a server-side copy.

How We Use Your Information

We use the collected information to:

• Provide and maintain the ToddleBits service
• Store and organize your child's milestone memories
• Generate insights about your child's development
• Send important service notifications
• Improve our app's features and user experience
• Ensure security and prevent fraud

Data Storage & Security

Your data is stored securely using industry-standard encryption and security practices:

• Encryption: All data is encrypted at rest and in transit
• Access Control: Strict access controls ensure only you can access your data
• Authentication: Secure, token-based authentication protects your account
• Transmission: All data transmitted over HTTPS/TLS encryption

Third-Party Services

We work with trusted service providers to operate ToddleBits. These providers help us with:

• Secure data storage and database management (Supabase)
• Media/content storage and delivery (Cloudflare R2)
• Crash reporting and product analytics (Sentry, Amplitude)
• App updates and push notifications
• Transactional email delivery

All service providers are contractually obligated to protect your data in accordance with applicable privacy laws and industry best practices. We only share the minimum data necessary for them to provide their services.

Optional shopping suggestions: ToddleBits has an off-by-default setting ("Show shopping suggestions based on your photos" in Settings). If you turn it on, we send only non-identifying, text-based information — a photo's category/tag label and your child's age range — to our affiliate partners (Awin, Cuelinks) so they can suggest relevant products. We never send photos, names, or any face data as part of this feature, and you can turn it off at any time in Settings.

Children's Privacy

ToddleBits is designed for parents and guardians to track their children's milestones. We take children's privacy seriously:

• We do not knowingly collect personal information directly from children under 13
• Child data is only accessible by the parent/guardian account holder
• Photos and information about children are never shared publicly
• Parents can delete all child data at any time

Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Delete your account and all associated data
• Export: Download your data in a portable format
• Withdraw Consent: Opt-out of optional data collection

Data Retention

We retain your data for as long as your account is active. Upon account deletion:

• Personal data is deleted within 30 days
• Media files are permanently removed from storage
• Anonymized analytics data may be retained for service improvement

Permissions We Request

ToddleBits requests the following device permissions:

• Camera: To capture photos and videos of milestones
• Photo Library: To select existing photos for milestones
• Notifications: To send milestone reminders (optional)

All permissions are optional and can be managed in your device settings.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the "Last Updated" date.