Privacy Policy

Who is responsible for your data

TatoTot, operated by Chris Smith trading as TatoTot, is the data controller for the information described here. If you are in the UK or the EU, we process your information under the UK GDPR / GDPR. You can reach us any time at support@tatotot.app.

What we collect

• Account details — your email address and a securely hashed password. We can never see your password.
• Baby profiles — name, birthday, sex and an icon you choose.
• Entries you log — sleep, feeds, solids, pumping, nappies, play & care and tummy time, growth measurements, temperature and medicine notes, teething, appointments and milestones.
• Sharing details — when you invite a co-parent, caregiver or viewer, we store who has access to a baby and their role, so we can show each person only what they are allowed to see.
• App preferences — theme, units and region, your home screen layout, your night-time window, reminders you set and whether widgets are enabled.
• Subscription status — whether TatoTot+ is active on your account, the plan and its renewal date. Payments are taken by Apple; we never see your card details.
• Support messages — anything you send us through Feedback & support, including photos you attach.
• Ask TotAi conversations — your questions and the assistant's answers, saved to your account so the chat continues across devices.
• Technical information — basic error reports and server logs (such as the time of a request and a generic error message) used only to keep the app working.

We do not collect your location. Region and units are guessed from your device's own language and time zone settings, on your device, and you can change them at any time.

Why we can use it (legal bases)

• To provide the app — storing your entries, syncing them with people you invite, and running features you use. This is necessary to perform our contract with you.
• Health-related entries — temperature, medicine, growth and illness notes are special category data. We process them only because you have chosen to record them, with your explicit consent, and you can delete them at any time.
• To keep the app safe and working — error reports, abuse prevention and support replies, based on our legitimate interest in a reliable, safe service.

How it is stored and who can see it

Your data is stored in an encrypted, access-controlled database, and encrypted in transit. Every record is tied to your account, and database rules stop anyone else reading it. Only you — and anyone you explicitly invite to a baby — can see that baby's entries. Each invited person has a role that limits what they can see and do:

• Co-parent — logs everything and sees growth, health and appointments.
• Caregiver — logs feeds, sleeps and nappies only. No growth, health or appointment history.
• View only — can follow the day but cannot change anything.

You can change a person's role or remove them at any time under Sharing. Our support team can read tickets you send us so we can reply. We do not browse your logged entries.

Who we share it with

We do not sell your data. We use a small number of providers who process data strictly on our instructions:

• Hosting and database — to store your account and entries securely.
• AI provider — receives only the message and context described below when you use Ask TotAi.
• Apple — handles TatoTot+ payments and, if you use them, widgets, Siri shortcuts and push notifications on your device.
• Email delivery — for sign-in, password reset and invite emails.

Some providers operate outside the UK/EU. Where that happens, transfers are covered by standard contractual clauses or an equivalent safeguard.

Your separate choices (consent)

Creating an account only signs you up to the basic routine tracker. Two things need their own, separate consent, and both are off until you switch them on:

• Health tracking — medicine doses, temperatures, teething and growth measurements. This is special-category health data under UK GDPR Article 9, so we rely on your explicit consent (Article 9(2)(a)).
• Ask TotAi — sending your baby’s first name, age and a summary of recent entries to our AI provider so it can answer your questions.

Each choice is recorded with the date and the version of the wording you agreed to. You can turn either one on or off at any time in Settings → Privacy & data. Turning one on always shows the full explanation again first — nothing is ever pre-ticked, and it is never a silent toggle.

If you decline or withdraw, that part of the app is switched off and no further data of that kind is collected or sent. Health entries you already saved are kept but hidden, so you can turn the feature back on later; you can also erase them permanently at any time. Everything else — sleep, feeds, nappies, play, milestones, calendar and trends — keeps working exactly as normal. Declining never limits your access to the rest of TatoTot.

Ask TotAi

When you ask a question, your message is sent to our AI provider along with a summary of your baby's logs so the answer is useful: your baby's first name and age, exact entries from the last two days, a day-by-day summary of the past week, and month-by-month averages since you started logging. If you ask for a daily rhythm plan, the plan you save is stored on your account and shared with anyone who has access to that baby.

Your conversations are not used to train any AI model. You can delete the conversation in the app at any time. Answers are general information, not medical advice.

Widgets, Siri and notifications

If you add a Home or Lock Screen widget, a limited summary of your baby's most recent activity is made available to your own device so the widget can display it. Reminders and notifications are sent only when you turn them on, and you can switch them off in the app or in your iPhone settings.

How long we keep it

We keep your data for as long as your account exists. Deleting an entry removes it immediately. Deleting your account permanently erases your data; backups holding residual copies are rotated out within 30 days. Support tickets may be kept for up to 12 months so we can handle follow-up questions.

Children

TatoTot is for adults. Accounts are created and used by parents and caregivers, not by children. We do not knowingly allow children to register. The information you record is about your baby, and you control all of it.

Your rights and choices

• Edit or erase individual entries at any time in the app.
• Erase all of a baby's entries under Settings → your baby's entries.
• Access or export — ask us for a copy of everything stored about you and we will send it within one month.
• Correct, restrict or object — ask us to fix inaccurate information or limit how we use it.
• Withdraw consent — stop recording health entries or using Ask TotAi at any time, without affecting anything done before.
• Delete your account under Settings → Delete account. This permanently removes your login, your babies' profiles and every entry, growth record, health note, support message and Ask TotAi conversation. It cannot be undone.

If you are in the UK you can complain to the Information Commissioner's Office (ico.org.uk); in the EU, to your local data protection authority. We would rather hear from you first so we can put things right.

Changes to this policy

If we make a meaningful change we will update the date at the top and tell you in the app.

Contact

Questions about your data? Use Feedback & support inside the app, or email support@tatotot.app.