Tiny TummiesPrivacy Policy
Last updated: 30 September 2026
Who we are
Tiny Tummies is an iOS app made by Thomas Garrett. You can contact me at hello@tinytummies.uk.
What this app is for
Tiny Tummies helps parents track a baby's milk feeds, nappies, first foods, allergen introduction, weight, sickness, and medication. You enter the information; the app stores it so you can see it later.
What we collect
Everything below is information you enter yourself, or that arrives as part of signing in. The app does not collect anything in the background.
About you:
- Your Apple ID email address, provided when you sign in with Apple. If you use Apple's "Hide My Email", we only ever receive the relay address, not your real one.
- A sign-in token from Apple. We keep it for one purpose only: disconnecting Sign in with Apple from your account if you ever delete your account.
- Your first name, and optionally a partner's name, if you choose to enter them. Used only to personalise the greeting.
- Your unit preferences (ml or fl oz, kg or lb).
- Your colour theme, and a colour for each child, if you choose them.
About your children:
- Name and date of birth
- Milk feeds: volume, time, notes, and whether they were sick
- Foods: what they ate, their reaction, allergens tagged, time, notes
- Allergen status: which allergens have been introduced, tolerated, or caused a reaction
- Nappies: wet, dirty, or both, and the time
- Weight
- Sickness: when it happened and any notes
- Medication: name, dose, time, notes, and any reminder you set
Some of this is health data. Allergen reactions, medication records, sickness, and weight are health information about your child. We treat it accordingly and never use it for anything except showing it back to you.
What we don't do
No analytics. There is no tracking SDK in this app. We do not know how you use it, when you open it, or what you tap.
No advertising. No ad networks, no ad identifiers.
No selling or sharing data. Not to anyone, ever, for any price. Sharing records with your own household, described below, is your choice and stays inside that household.
No profiling, and no automated decisions about you or your child.
No location, contacts, photos, or microphone access.
Where your data is stored
Your data is stored in a database run by Supabase, protected so that only the accounts entitled to it can read or write it: yours, and anyone you invite to share your records (see below). The servers are in Stockholm, Sweden, inside the EU. The UK government has decided that data stored in the EU is adequately protected under UK data protection law, so no further safeguards are needed for this arrangement.
Sharing your records with your household (Tiny Tummies Plus)
With Tiny Tummies Plus you can invite people to share your records, such as a partner, a grandparent, or a nanny. Up to six people can share the same children and records, and each person signs in with their own Apple ID.
Everyone in a shared household can see the same children and records, including the health information described above. Entries show who logged them, so whoever is on duty can see who gave the last dose. Only invite people you trust with that information. You are responsible for who you invite.
People who join a household are users of the app too, so everything in this policy applies to them, including what we collect about them when they sign in. A person can leave a shared household.
We do not sell or share shared records with anyone outside the household. If you want a copy of the records in a shared household, or want them deleted, email me and I will help.
Purchases
Tiny Tummies Plus is a one-time in-app purchase handled by Apple. We do not see or store your payment details.
The camera, barcode scanning, and product search
The camera is used only when you actively open the scanner, to read a barcode. Images are processed on your device and never uploaded or stored.
When you scan a product, or type a product name or barcode into a search, that barcode number or search text is sent to Open Food Facts (openfoodfacts.org), a free public food database, to look the product up. Nothing about you, your account, or your child is sent with it. Open Food Facts has its own privacy policy: world.openfoodfacts.org/privacy.
If you'd rather not use this, scanning and product search are entirely optional. You can type food names in by hand.
Notifications
If you set a medication reminder, the notification is scheduled on your device and stays on your device. Nothing is sent to a server, and we cannot see your reminders.
Your legal rights
Under UK GDPR you can:
- See your data. It's all visible in the app.
- Correct it. Every entry is editable.
- Delete it. Settings > Delete all my data wipes every record but keeps your sign-in. Settings > Delete account removes every record, disconnects Sign in with Apple from your account, and deletes the account itself.
- Take it with you. Email hello@tinytummies.uk and I'll send you a copy of your data within one month.
- Object to or restrict processing. Email the same address.
- Complain to the Information Commissioner's Office (ico.org.uk) if you think we've handled your data badly.
How long we keep it
Your data stays until you delete it. There is no automatic expiry: a parent may come back to the app years later, for example with a second child, and expect their history to still be there. If you delete your account, everything is removed.
Children's data
The app is for parents to use. It is not designed for or directed at children, and children are not expected to use it themselves. The information stored about a child is entered by their parent or guardian, who is responsible for it.
Changes
If this policy changes materially, we'll say so in the app before the change takes effect.