Privacy Policy

What this app is

Tiny Signals helps families log developmental observations — words, gestures, imitation, responses, and notes — and review them as weekly summaries to share with therapists and caregivers.

It is not a medical device. It does not diagnose, treat, or replace medical, developmental, or therapeutic advice.

Tiny Signals is operated by Tiny Signals, based in Ontario, Canada.

Legal basis (Canada)

Tiny Signals complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Quebec, the Act Respecting the Protection of Personal Information in the Private Sector (Law 25).

By creating an account you consent to the collection, use, and disclosure of your personal information as described in this policy.

What we collect

To provide the service we collect:

• Account: your email address and a unique user ID created at sign-up.
• Child profile: the name or nickname and optional date of birth you enter.
• Events and notes: the developmental observations you log, including timestamps, categories, optional free-text notes, and any context you add.
• Crash and error data: anonymous diagnostic reports via Sentry if the app crashes, to help us fix bugs. These do not include event content or child data.

We collect only what is necessary to operate the service (PIPEDA Principle 4 — Limiting Collection).

What we do not collect

• Location data
• Contacts or address book
• Photos or videos (unless you attach one to an event — stored only in your private household)
• Behavioural or advertising data
• Data for sale to third parties

How your data is used

Your data is used only to:

• Sync events across your household's devices
• Let another caregiver you invite view and log for the same child
• Generate the weekly summaries shown in the app

We do not use your data to train AI models, target ads, or share it with anyone outside your household (PIPEDA Principle 5 — Limiting Use, Disclosure, and Retention).

Who can see your data

Only you and the caregivers you explicitly invite to your household can access your child's events.

Data is stored using Supabase (supabase.com) with row-level security — each household's data is fully isolated.

Sentry (sentry.io) receives anonymous crash reports only. Sentry does not receive event content or child profile data.

Cross-border data transfer

Supabase and Sentry are US-based services. By using Tiny Signals, your personal information is transferred to and stored on servers in the United States, which may have different privacy laws than Canada.

We have taken steps to ensure these providers maintain appropriate safeguards. For Quebec residents: this cross-border transfer has been assessed and we are satisfied that equivalent protection is in place.

Data retention

Your data is kept for as long as your account is active.

If you delete your account from Settings → Delete account, all your events, child profile, and household data are permanently deleted immediately. Your sign-in credentials are removed within 24 hours (PIPEDA Principle 5).

Your rights

Under PIPEDA and applicable provincial law you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Withdraw consent (which may limit your ability to use the service)
• Request deletion of your account and data (Settings → Delete account)
• Export your data (Settings → Export all data — CSV format)

Quebec residents additionally have the right to data portability and the right to be forgotten under Law 25.

To exercise any of these rights, contact: support@tinysignals.app

Children's privacy

This app is designed for parents and caregivers (18+) to log observations about their own children. We do not knowingly collect data directly from children.

Child profile information (name, date of birth) is stored only to personalise the app experience within your household and is never shared or sold.

Security

We use industry-standard safeguards including encrypted connections (TLS), database-level row security, and access controls. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information (PIPEDA Principle 7 — Safeguards).

Changes to this policy

If we make material changes to this privacy policy, we will notify you through the app before the changes take effect. Your continued use of the app after that date constitutes acceptance of the updated policy.

Privacy Officer & complaints

Privacy Officer: Tiny Signals
Email: support@tinysignals.app

If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca, or for Quebec residents, the Commission d'accès à l'information at www.cai.quebec.ca.