Privacy Policy

1. Who we are

Tuckwell is operated by Miguel Twahirwa, an individual based in Ontario, Canada (“we”, “us”). This policy covers the Tuckwell app for iPhone, its widgets and Live Activities, the Tuckwell app for Apple Watch, and this website, trytuckwell.app.

We handle personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the other privacy laws that apply to you. Miguel Twahirwa is responsible for how Tuckwell protects personal information and can be reached at privacy@trytuckwell.app.

2. What Tuckwell collects

If you don’t sign in

You can use every part of Tuckwell without an account. Everything you enter is saved only on your device. We don’t receive it, and there is nothing of yours on our servers.

Your account

To sync and share, you sign in with Apple. Apple gives us an identifier that is unique to you and Tuckwell and, the first time you sign in, the name you choose to share. We never ask Apple for your email address, so we don’t have it. Your name is shown to your family and labels the entries you record; you can change it in the app at any time.

What you choose to record

When you’re signed in, we store what you and your family add to Tuckwell:

• Child profiles: name, birth date or due date, an optional photo, and settings such as whether solid food is on.
• Care records: feeds (bottle amounts, breast side, start and end times, pauses), sleep, diaper changes, solid food, baths, medicine, growth measurements (weight, length and head circumference), milestones, and any notes or tags you add.
• Moments: titles, notes, tags and up to ten photos per moment.
• Your family: caregiver names, role labels (such as “Grandma”) and optional photos, each member’s permission level, invitations, and handoff notes between caregivers.

Every entry also records who added it and when, so your family can see who logged what.

Photos

Tuckwell uses Apple’s photo picker, so it only ever receives the photos you choose. It saves a new copy of each one (no larger than 4096 pixels on the long side) and removes its metadata, including location, before saving. Your originals in Photos are never changed.

Information created as you use Tuckwell

To keep your records in sync and your account secure, our servers keep sign-in sessions, version numbers and timestamps for each change, a one-way fingerprint of each invitation link (never the link itself) with its role and expiry, and a count of recent attempts to join a family so that invitation links can’t be guessed.

Kept on your device only

Reminders you set are scheduled as notifications by your iPhone itself. Preferences such as units and appearance also stay on your device.

From Apple

If you dictate a moment on Apple Watch, Apple turns your speech into text and Tuckwell receives only the text. If you’ve chosen to share analytics with app developers in your iPhone’s settings, Apple may send us crash reports and usage statistics that don’t identify you.

What we don’t collect

Tuckwell doesn’t collect your email address, contacts, location or advertising identifier. It contains no analytics, advertising or tracking software, and it doesn’t track you across other apps or websites.

3. Care and health information

Much of what you log, such as feeds, sleep, diaper changes, medicine and growth, can say something about a child’s health. We treat every care record as sensitive, whether or not a particular law says it is:

• We only have it when you choose to record it and you’re signed in.
• We use it only to show it to you and your family and to keep it in sync.
• We never sell it, use it for advertising, or share it with data brokers, insurers or employers.
• Tuckwell doesn’t analyse it to make predictions or give medical advice.
• You can delete any entry at any time, and delete your account in the app (section 7).

By recording care information, you consent to us storing and processing it in this way. You can withdraw that consent by deleting the information or your account.

4. How we use information

We use the information described above only to:

• save your records and show them across your devices, widgets, Live Activities and Apple Watch;
• share them with the family members you invite, at the permission level you choose;
• verify sign-ins, enforce permissions and protect Tuckwell from abuse;
• reply when you contact us; and
• meet our legal obligations.

We don’t use your information for advertising or profiling, we don’t sell or rent it, and we don’t use it to train artificial intelligence models. Tuckwell never generates images of your family.

5. Where your information is kept

On your devices

Tuckwell’s data lives in the app’s private storage on your iPhone, protected by iOS. Sign-in credentials are kept in the iPhone’s Keychain and never leave that device. If you back up your iPhone to iCloud or a computer, the backup may include Tuckwell’s on-device data; Apple handles backups under its own privacy policy.

Widgets, Live Activities and the Apple Watch app receive a short summary, such as your child’s name and the time of the last feed. They never show photos. Anyone who can see your Lock Screen or watch can see what those surfaces show, so choose the ones you’re comfortable with.

In the cloud, if you sign in

Your family’s records and photos are stored with Convex, Inc., our cloud database and file storage provider, on servers in the United States. This means your information may be accessed by courts, law enforcement and national security authorities in the United States under that country’s laws.

Information is encrypted in transit between your devices and our servers. Every request is checked against a live sign-in session and your family membership, and photos are never given a public link. No system is perfectly secure, but if a breach of our safeguards creates a real risk of significant harm to you, we’ll notify you and the Office of the Privacy Commissioner of Canada as the law requires.

6. Who can see your information

Your family

Everyone in a family can see its children, care records, moments and photos. The family’s owner decides who is in it: editors can record care and memories, and viewers can only look. An invitation is a link that works once and expires after seven days. Anyone who opens an unused link can join, so send it only to the person you mean to invite; the owner can revoke unused invitations in Family.

Our service providers

We share information only with the providers that help us run Tuckwell, and only as much as each one needs:

• Convex stores signed-in accounts, records and photos (section 5).
• Apple provides Sign in with Apple, the App Store, dictation, device backups and crash reports, under Apple’s Privacy Policy.
• Our website host serves trytuckwell.app (section 11).
• Our email provider handles messages you send us.

When the law requires it

We may disclose information if the law requires it, such as under a valid court order, or where it’s needed to protect someone’s safety. Where the law allows, we’ll tell you first.

If Tuckwell changes hands

If Tuckwell is sold or transferred, your information may move to the new operator, who must continue to protect it as this policy describes. We’ll tell you before that happens.

7. How long we keep it

• On your device: until you delete it, or until you delete the app, which removes Tuckwell’s data from that device.
• In the cloud: for as long as your account and family exist.
• Deleted entries: when you delete an entry, it disappears from Tuckwell for everyone in your family and its photos are erased from our storage. So that every device learns about the deletion, our database keeps the deleted entry, hidden from everyone, until your family’s data is deleted.
• Unused photos: photos that were uploaded but never attached to anything are erased automatically after about a day.
• If you leave a family: entries you recorded stay with that family, labelled with the caregiver name they were recorded under.
• If you delete your account: you can do this yourself in Tuckwell, under More, then Delete account. Your account and sign-in stop working straight away. Every family that only you use is erased with its children, care records (including hidden deleted entries), moments, photos, handoffs and invitations. You’re removed from families you’ve joined, and they keep the entries you recorded, labelled with your caregiver name. If other people still use a family you own, Tuckwell asks you to transfer it to one of them, or remove them, before it deletes your account.
• Emails: for as long as we need to help you and keep a record of the conversation.

Account deletion usually finishes within minutes, and always within 30 days, except where the law requires us to keep something. Copies may remain in our providers’ backups for a limited time until they are overwritten. Deleting your account also removes its data from the iPhone you delete it on, and clears its widgets, Live Activities and Apple Watch. Any other iPhone you signed in on is signed out; the copy saved there stays on it, locked behind sign-in, until you delete Tuckwell from that iPhone.

8. Your choices and rights

In the app

• View, edit and delete care records and moments.
• Change your name, and archive a child or caregiver.
• As a family owner, change members’ roles, remove access, revoke invitations and transfer ownership.
• Turn reminders off in Tuckwell or in your iPhone’s notification settings.
• Delete your account, under More, then Delete account. Before anything is deleted, Tuckwell shows what happens to each of your families. Section 7 explains what deletion removes and what your families keep.
• Sign out, or stop using Sign in with Apple for Tuckwell from the Sign in with Apple list in your iPhone’s Settings. This signs you out, but doesn’t delete what we hold. Deleting your account doesn’t remove Tuckwell from that list; you can remove it there yourself.

By asking us

Email privacy@trytuckwell.app to:

• get a copy of your information;
• correct anything you can’t fix in the app;
• delete your account if you can’t do it in the app, for example because you no longer have your iPhone; and
• withdraw consent, or ask about how we handle your information.

A parent or guardian can make these requests about their child’s information. We’ll take reasonable steps to confirm a request comes from you before acting on it, and we’ll respond within 30 days.

If you’re not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or to the data protection authority where you live.

9. Children

Tuckwell is made for adults: parents, guardians and the caregivers they invite. It isn’t directed to children, and you must be 18 or older, and have reached the age of majority where you live, to use it.

Tuckwell holds information about children because their parents and caregivers choose to record it. Only add a child you’re a parent or legal guardian of, or one whose parent or guardian has asked you to help record their care. If you believe a child is using Tuckwell, contact us and we’ll delete the account.

10. If you’re outside Canada

We’re based in Canada and store signed-in data in the United States. Wherever you live, you can use the choices and rights described in section 8.

European Economic Area, United Kingdom and Switzerland

We process your information:

• to provide the Tuckwell features you ask for, such as syncing and sharing (performance of a contract);
• with your explicit consent for care and health information, which you give by choosing to record it and can withdraw by deleting it;
• for our legitimate interests in keeping Tuckwell secure, preventing abuse and answering your messages; and
• to meet legal obligations.

You have the right to access, correct, delete, restrict, object to the processing of, and receive a portable copy of your information, and to withdraw consent at any time. Canada is recognised as providing adequate protection for personal information. For transfers to the United States, we rely on the safeguards the law recognises, such as standard contractual clauses. You can complain to your local supervisory authority.

United States

We don’t sell or share personal information, including for targeted advertising, and we don’t use sensitive information to infer anything about you.

11. This website

trytuckwell.app sets no cookies, runs no analytics or advertising, and loads no third-party scripts or fonts. Our website host keeps standard server logs, such as IP addresses and the pages requested, to deliver the site and protect it from abuse.

12. Changes to this policy

We’ll update this policy as Tuckwell changes. The date at the top shows when it last changed. If we make a material change, we’ll tell you in the app or on this site before it takes effect.

13. Contact us

For anything about your privacy or this policy: