1. Who we are
Tuckwell is operated by Miguel Twahirwa, an individual based in Ontario, Canada (“we”, “us”). This policy covers the Tuckwell app for iPhone, its widgets and Live Activities, the Tuckwell app for Apple Watch, and this website, trytuckwell.app.
We handle personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the other privacy laws that apply to you. Miguel Twahirwa is responsible for how Tuckwell protects personal information and can be reached at privacy@trytuckwell.app.
2. What Tuckwell collects
If you don’t sign in
You can use every part of Tuckwell without an account. Everything you enter is saved only on your device. We don’t receive it, and there is nothing of yours on our servers. The app still talks to Superwall about Tuckwell Pro, and if you open a gift link in Tuckwell, it asks our servers about that gift (see “Tuckwell Pro and purchases” and “Gifts” below).
Your account
To sync and share, you sign in with Apple. Apple gives us an identifier that is unique to you and Tuckwell and, the first time you sign in, the name you choose to share. We never ask Apple for your email address, so we don’t have it. Your name is shown to your family and labels the entries you record; you can change it in the app at any time.
What you choose to record
When you’re signed in, we store what you and your family add to Tuckwell:
- Child profiles: name, birth date or due date, an optional photo, and settings such as whether solid food is on.
- Care records: feeds (bottle amounts, breast side, start and end times, pauses), sleep, diaper changes, solid food, baths, medicine, growth measurements (weight, length and head circumference), milestones, and any notes or tags you add.
- Moments: titles, notes, tags and up to ten photos per moment; who each moment is shared with; and the hearts and replies people in your family leave on it.
- Your family: caregiver names, role labels (such as “Grandma”) and optional photos, each member’s place in the family (home, close family or the village) and permission level, invitations, and handoff notes between caregivers.
Every entry also records who added it and when, so your family can see who logged what.
Photos
Tuckwell uses Apple’s photo picker, so it only ever receives the photos you choose. It saves a new copy of each one (no larger than 4096 pixels on the long side) and removes its metadata, including location, before saving. Your originals in Photos are never changed.
If you save a photo from a moment to your iPhone, Tuckwell asks your permission to add to your Photos library. That permission only lets it add the photo; it can’t see or read your library.
Information created as you use Tuckwell
To keep your records in sync and your account secure, our servers keep sign-in sessions, version numbers and timestamps for each change, a one-way fingerprint of each invitation link (never the link itself) with its role, place in the family and expiry, and a count of recent attempts to join a family so that invitation links can’t be guessed.
Tuckwell Pro and purchases
Tuckwell Pro is bought through Apple’s App Store. Apple handles payment, and we never see your card or billing details. So that everyone in your family gets Pro, when you’re signed in the app sends us the purchase records Apple signs for it: the product, Apple’s transaction number, the purchase and expiry dates, and whether it came from an offer code. We keep a record of which account each purchase belongs to.
Tuckwell uses Superwall to show Tuckwell Pro offers and to make and restore purchases. Superwall receives events from the app, such as when it opens and when an offer is shown, bought or restored, along with your IP address and details of your device and the app, such as the device model, iOS version, language, region and app version. This starts when the app opens, whether or not you’re signed in. When you sign in, we give Superwall a random billing number we create for your account, never your name or anything else about your account. Superwall then sends us purchase events for that billing number, so we can keep Pro on for your family.
Gifts
Once you’ve recorded entries on three different days, or someone you invited has joined your family, you can send Tuckwell Pro gifts. We work this out from what we already hold. When you send a gift, we store the name you chose to show on it; when it was sent, claimed, cancelled or will expire; a one-way fingerprint of the link (never the link itself); and the Apple offer code reserved for it. The “Who’s it for?” name you can add stays only on your iPhone.
If someone sends you a gift, we store nothing about you except the time its link was claimed. The gift page doesn’t ask who you are. If you open a gift link in Tuckwell, the app sends the link to our servers to look up the gift, whether or not you’re signed in. You redeem the code with Apple.
Kept on your device only
Reminders you set are scheduled as notifications by your iPhone itself. Preferences such as units and appearance also stay on your device, as do the names you add to gifts you send.
From Apple
If you dictate a moment on Apple Watch, Apple turns your speech into text and Tuckwell receives only the text. If you’ve chosen to share analytics with app developers in your iPhone’s settings, Apple may send us crash reports and usage statistics that don’t identify you.
What we don’t collect
Tuckwell doesn’t collect your email address, contacts, location or advertising identifier. It contains no advertising or tracking software, its only analytics are Superwall’s measurement of Tuckwell Pro offers and purchases, and it doesn’t track you across other apps or websites.
3. Care and health information
Much of what you log, such as feeds, sleep, diaper changes, medicine and growth, can say something about a child’s health. We treat every care record as sensitive, whether or not a particular law says it is:
- We only have it when you choose to record it and you’re signed in.
- We use it only to show it to you and your family and to keep it in sync. It’s never sent to Superwall.
- We never sell it, use it for advertising, or share it with data brokers, insurers or employers.
- Tuckwell doesn’t analyse it to make predictions or give medical advice.
- You can delete any entry at any time, and delete your account in the app (section 7).
By recording care information, you consent to us storing and processing it in this way. You can withdraw that consent by deleting the information or your account.
4. How we use information
We use the information described above only to:
- save your records and show them across your devices, widgets, Live Activities and Apple Watch;
- share them with the family members you invite, at the permission level you choose, and share each moment only with the people chosen for it;
- show Tuckwell Pro offers, process and restore purchases, and keep Pro on for every family a paying member belongs to;
- let you send Tuckwell Pro gifts and remind you before a link expires, and count, in totals only, how many gifts are sent, claimed and redeemed;
- verify sign-ins, enforce permissions and protect Tuckwell from abuse;
- reply when you contact us; and
- meet our legal obligations.
We don’t use your information for advertising or profiling, we don’t sell or rent it, and we don’t use it to train artificial intelligence models. Tuckwell never generates images of your family.
5. Where your information is kept
On your devices
Tuckwell’s data lives in the app’s private storage on your iPhone, protected by iOS. Sign-in credentials are kept in the iPhone’s Keychain and never leave that device. If you back up your iPhone to iCloud or a computer, the backup may include Tuckwell’s on-device data; Apple handles backups under its own privacy policy.
Widgets, Live Activities and the Apple Watch app receive a short summary, such as your child’s name and the time of the last feed. They never show photos. Anyone who can see your Lock Screen or watch can see what those surfaces show, so choose the ones you’re comfortable with.
In the cloud, if you sign in
Your family’s records and photos, and your purchase and gift records, are stored with Convex, Inc., our cloud database and file storage provider, on servers in the United States. Superwall, Inc., which is based in the United States, keeps what it collects under its own privacy policy. This means your information may be accessed by courts, law enforcement and national security authorities in the United States under that country’s laws.
Information is encrypted in transit between your devices and our servers. Every request is checked against a live sign-in session and your family membership. A request for a moment, its photos, its hearts or its replies is also checked against who that moment is shared with. Photos are never given a public link. No system is perfectly secure, but if a breach of our safeguards creates a real risk of significant harm to you, we’ll notify you and the Office of the Privacy Commissioner of Canada as the law requires.
7. How long we keep it
- On your device: until you delete it, or until you delete the app, which removes Tuckwell’s data from that device.
- In the cloud: for as long as your account and family exist.
- Deleted entries: when you delete an entry, it disappears from Tuckwell for everyone in your family, and its photos, and any hearts and replies on it, are erased from our storage. So that every device learns about the deletion, our database keeps the deleted entry, hidden from everyone, until your family’s data is deleted.
- Unused photos: photos that were uploaded but never attached to anything are erased automatically after about a day.
- Purchases: the record of which account a purchase belongs to is kept while your account exists. Purchase events Superwall sends us are erased after 90 days.
- Gifts: kept while your account exists, so you can see what you’ve sent.
- If you leave a family: entries you recorded stay with that family, labelled with the caregiver name they were recorded under, as do the hearts and replies you left.
- If you delete your account: you can do this yourself in Tuckwell, under More, then Delete account. Your account and sign-in stop working straight away. Every family that only you use is erased with its children, care records (including hidden deleted entries), moments, photos, hearts, replies, handoffs and invitations. You’re removed from families you’ve joined, and they keep the entries you recorded, labelled with your caregiver name. The hearts and replies you left are erased from every family. Your purchase records, billing number and gifts are erased; gift links nobody has claimed stop working, and a gift someone already claimed stays theirs to redeem with Apple. Deleting your account doesn’t cancel an App Store subscription; manage that in your iPhone’s Settings. If other people still use a family you own, Tuckwell asks you to transfer it to one of them, or remove them, before it deletes your account.
- Emails: for as long as we need to help you and keep a record of the conversation.
Account deletion usually finishes within minutes, and always within 30 days, except where the law requires us to keep something. Copies may remain in our providers’ backups for a limited time until they are overwritten. Deleting your account also removes its data from the iPhone you delete it on, and clears its widgets, Live Activities and Apple Watch. Any other iPhone you signed in on is signed out; the copy saved there stays on it, locked behind sign-in, until you delete Tuckwell from that iPhone.
8. Your choices and rights
In the app
- View, edit and delete care records and moments.
- Choose who sees each moment you save, change it later, and decide whether others can reply to it or save its photos.
- Take back a heart, or remove a reply you wrote.
- Change your name, and archive a child or caregiver.
- As a family owner, move people between home, close family and the village, remove access, revoke invitations and transfer ownership.
- Turn reminders off in Tuckwell or in your iPhone’s notification settings.
- Restore purchases under More, and manage or cancel a subscription in your iPhone’s Settings, under your name, then Subscriptions.
- Delete your account, under More, then Delete account. Before anything is deleted, Tuckwell shows what happens to each of your families. Section 7 explains what deletion removes and what your families keep.
- Sign out, or stop using Sign in with Apple for Tuckwell from the Sign in with Apple list in your iPhone’s Settings. This signs you out, but doesn’t delete what we hold. Deleting your account doesn’t remove Tuckwell from that list; you can remove it there yourself.
By asking us
Email privacy@trytuckwell.app to:
- get a copy of your information;
- correct anything you can’t fix in the app;
- delete your account if you can’t do it in the app, for example because you no longer have your iPhone;
- ask Superwall, through us, to delete what it holds about your billing number; and
- withdraw consent, or ask about how we handle your information.
A parent or guardian can make these requests about their child’s information. We’ll take reasonable steps to confirm a request comes from you before acting on it, and we’ll respond within 30 days.
If you’re not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or to the data protection authority where you live.
9. Children
Tuckwell is made for adults: parents, guardians and the caregivers they invite. It isn’t directed to children, and you must be 18 or older, and have reached the age of majority where you live, to use it.
Tuckwell holds information about children because their parents and caregivers choose to record it. Only add a child you’re a parent or legal guardian of, or one whose parent or guardian has asked you to help record their care. If you believe a child is using Tuckwell, contact us and we’ll delete the account.
10. If you’re outside Canada
We’re based in Canada and store signed-in data in the United States. Wherever you live, you can use the choices and rights described in section 8.
European Economic Area, United Kingdom and Switzerland
We process your information:
- to provide the Tuckwell features you ask for, such as syncing, sharing, Tuckwell Pro purchases and gifts (performance of a contract);
- with your explicit consent for care and health information, which you give by choosing to record it and can withdraw by deleting it;
- for our legitimate interests in keeping Tuckwell secure, preventing abuse, answering your messages, showing Tuckwell Pro offers, and understanding in totals how those offers and gifts are used; and
- to meet legal obligations.
You have the right to access, correct, delete, restrict, object to the processing of, and receive a portable copy of your information, and to withdraw consent at any time. Canada is recognised as providing adequate protection for personal information. For transfers to the United States, we rely on the safeguards the law recognises, such as standard contractual clauses. You can complain to your local supervisory authority.
United States
We don’t sell or share personal information, including for targeted advertising, and we don’t use sensitive information to infer anything about you.
11. This website
trytuckwell.app sets no cookies, runs no analytics or advertising, and loads no third-party scripts or fonts. Our website host, Vercel, keeps standard server logs, such as IP addresses and the pages requested, to deliver the site and protect it from abuse.
Gift pages run no scripts at all. To show the right button, a gift page checks whether it was opened on an iPhone, and doesn’t keep that. Claiming a gift takes you to Apple’s website to redeem the code, where Apple’s Privacy Policy applies.
12. Changes to this policy
We’ll update this policy as Tuckwell changes. The date at the top shows when it last changed. If we make a material change, we’ll tell you in the app or on this site before it takes effect.
13. Contact us
For anything about your privacy or this policy:
Miguel Twahirwa, TuckwellOntario, Canada
privacy@trytuckwell.app