Security at Tinyclock

Families trust us with sensitive information, so security is part of how we design Tinyclock. This page describes the principles we are building to. It will be updated as the apps are released.

Principles

• Collect less. Data we never collect cannot leak. We avoid collecting message content, contacts and browsing history.
• Protect what we collect. Data is encrypted in transit and at rest.
• Make privacy visible. Children can see when location is on, and what parents can see.
• Delete by default. Request recordings and location history are short-lived and deleted automatically.

Account security

• Sign in with Apple, Google or email
• Two-step verification for parent accounts
• Parent approval for sensitive changes, such as removing a child's device

Data handling

• Limited internal access, on a need-to-know basis
• Separate storage and stricter handling of recordings and location
• Regular reviews of third-party services we depend on

Reporting a vulnerability

If you find a security problem, please write to hello@tinyclock.app with details. We will respond quickly, keep your report confidential and thank you for helping to keep families safe.