Privacy Policy

What data we store

• Your account — created with Sign in with Apple. On our server we store only a one-way cryptographic hash of your Apple identifier and, if you set one, a display name. We do not store your email address on our server.
• Your family's Gems — quotes, moods, dates, and optional photos you add. Synced through our server so your family can see them; photos are encrypted at rest (AES-256).
• Kid profiles — names, birth dates, and optional profile photos, shared only within your family circle.
• Family membership — who belongs to your family circle and their role (parent, child, extended family).
• Likes and comments — reactions and comments family members leave on Gems, with the author's chosen display name.
• Subscription status — managed entirely by Apple via the App Store. We never see or store your payment information.

Where your data lives

Family sharing runs on a server we operate in Frankfurt, Germany(hosted by cloudservers.dk, an EU provider). Your family's data never leaves the EU. All traffic is TLS-encrypted, photos are additionally encrypted at rest, and access is enforced per family — only the people you explicitly invite can see your family's data.

Your own device additionally keeps a personal backup of your data in your private iCloud accountvia Apple CloudKit, governed by Apple's privacy policy. Nightly server backups are encrypted and stored on a second EU server, and are deleted after 30 days.

What we never do

• We never sell your data to any third party.
• We never show you advertising.
• We never use your children's information for any purpose outside the app.
• We never track your behavior across other apps or websites.
• We never store your IP address — it is used transiently for abuse protection and never written to our logs or database.

Children's privacy

Tiny Gems is designed for parents and caregivers and is not intended for direct use by children under 13. Child profiles (names, photos, birth dates) are stored privately in your iCloud account. No child information is shared publicly without your explicit action.

When and if public sharing features are introduced, all child information will be anonymized by default (age only, no name or photo) before any content is visible outside your family circle.

Error logging

If the app encounters an error, a brief technical log entry is saved locally on your device in the app's private documents folder. This log is never transmitted to us automatically. You can share it with us manually if you contact support.

Local notifications

Tiny Gems may send local notifications to remind you of memories (On This Day) or when a family member adds a new Gem. These are generated on-device and do not pass through any external server.

Sign in with Apple

We use Sign in with Apple for authentication. Apple may allow you to hide your email address. The data we receive from Apple is limited to your user identifier, name (on first sign-in only), and optionally your email address. We use this only to identify your account.

Data deletion

You can delete your account at any time from within the app (Settings → Delete Account). This permanently deletes your account and data from our server: if you own the family circle, the entire circle and its photos are erased; if you are a member of someone else's circle, you choose whether the memories you contributed are erased everywhere or left with the family (with your name, if you agree). Your device's iCloud backup can be managed independently in Settings → [Your Name] → iCloud on your iPhone.

Under the GDPR you also have the right to access, correct, or export your data — contact us and we will help.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

Who processes your data

• Screaming Donkey Studio (Denmark) — data controller.
• cloudservers.dk — server hosting in Frankfurt, Germany (EU).
• Apple — Sign in with Apple, the App Store, and your personal iCloud backup.
• Vercel — hosts this website (tinygems.app), including the page invite links pass through. Standard web server data (such as IP addresses) is processed briefly to serve the site; the app itself never sends your family's data to Vercel.

Contact

Questions or concerns? Reach us at noway@screamingdonkeystudio.com