Privacy Policy

This policy applies to Tantrum Tracker version 4 and later.

Who we are

Tantrum Tracker is operated by Bad Yorkie Studios LLC, a California limited liability company.

This policy explains what Tantrum Tracker collects, why, who else can see it, and how to remove it. It covers the mobile app on iOS and Android.

The short version

• You are the user. The person you track is not. Tantrum Tracker is for a parent or legal guardian, or an adult who has their permission, such as a caregiver or a professional working with the family. The person whose behaviour you record, usually a child, has no account, no login, and never uses the app. Everything recorded about them is entered by you.
• Your records have one home. Either they live on your device only, or, if you subscribe, in Google's cloud service. Your device can still hold copies: the original app's data if you upgraded, media too large to upload, and temporary copies of what you view. See "The two ways your data is stored".
• We do not sell or share your personal information, and there is nothing here to sell it to: no advertising, no ad identifiers, no tracking across other apps or websites, and no data brokers. We collect usage statistics that are not tied to your account or your child's records (which screens and features are used) to improve the app. They never include your child's records.
• We never collect your location.
• You can delete everything, from inside the app.

The two ways your data is stored

On your device only. If you use Tantrum Tracker without a subscription, including if you upgraded from the earlier iOS version, your records are stored only on your device. They are not transmitted to us, and we cannot see them. Some users in this mode have no account with us at all.

In the cloud. If you subscribe, your records are stored in Google's cloud service so you can reach them from any device you sign in on and share them with people you invite. This is the only mode in which we hold your data.

Your records have one home at a time, and moving between the two happens only at the defined moments described below: when you first subscribe, and if a subscription ends. But "one home" does not mean your device is empty when the cloud is the home. A subscriber's device may still hold:

• the original app's data, if you upgraded from the earlier iOS version. We never delete it unless you ask us to from Settings; otherwise it goes when you delete the app;
• photos or videos that could not be uploaded (too large, or beyond your storage allowance). They stay on your device only (the gallery marks the ones that were too large);
• copies of cloud photos you have viewed, and their preview images, kept on your device so they open quickly. Your device may clear them at any time (videos are streamed, not stored); and any photo or video you choose to save to your device, which is then yours to keep;
• on iPhone, what the widget and the Apple Watch app show: the child's first name, today's count, the severity of the most recent episode, and any episodes logged from the watch or widget that are waiting to reach the app. The Apple Watch itself keeps its own copy of the child's first name and today's count. All of it is cleared when you sign out. (Android has no widget or watch app.)

During a move, when you subscribe or at the end of a grace period, both places hold your records until the move finishes. After a grace period ends, the cloud copy is removed later, on the schedule described below.

What we collect

About you, the account holder

• Email address: required to create an account. If you use Sign in with Apple, this may be an Apple private relay address.
• Display name: optional.
• Password: we never store or see it. Authentication is handled entirely by Google's cloud service Authentication.

About the person you are tracking

Entered by you, and only what you choose to enter:

• Name
• Age as a whole number, if you choose to enter it. ⚠️ We do not collect a date of birth. There is no such field anywhere in the app.
• Home address, city, state, postal code
• Phone number(s) and email address(es)
• Name, phone and email of a guardian and of a care provider

Records you create

• Behavioural episodes: date, time, duration, severity, the name of a place you type (for example "Daycare"), selections from category lists, and free-text notes.
• Health markers: gluten and casein indicators with severity, a medication indicator, and a free-text medication name. This is health information.
• Photographs and video. Video includes its audio.

Technical information

• Usage statistics: which screens you open, which features you use, and how long things take, tied to an app-instance identifier that is not connected to your account. Never the contents of any record: no names, no episodes, no health markers, no notes, no media, and nothing you type. Collected through Google's cloud service with its advertising features switched off. You can turn this off in Settings → Privacy.
• Crash and error reports via our crash-reporting service, including the type of device and OS version. These carry an account identifier and no personal information. We actively strip it.
• A token that lets us send notifications to your device. While you are signed in, it is stored with your account so that we can send you notices about your own subscription: when it ends, when the grace period is about to end, and on its last day, each at most once. It is deleted when you sign out or delete your account. We never use it for marketing.
• Purchase and subscription status from our subscription-management provider and the app stores.

What we do not collect

We want to be specific, because privacy policies often list these by default:

• ❌ Location. No geolocation of any kind, precise or approximate. The app does not ask for location permission on either platform. Only the free-text place name you type is stored.
• ❌ Content in usage statistics. Our usage statistics record which screens and features are used, never what you typed, logged, or photographed, and they are never shared with advertisers.
• ❌ Advertising. No ads, no ad identifiers, no advertising partners, no cross-context behavioural advertising.
• ❌ Your contacts. If you use the contact picker to fill in a child, a guardian or a care provider, the app receives only the single contact you select and uses only its name, address, phone and email, never a birthday. It never reads, requests, or uploads your address book.
• ❌ Payment card details. Apple and Google handle all billing. Card details never reach the app or us.
• ❌ Date of birth.

Who else receives data

We use the following service providers. Each acts on our behalf and is permitted to use the information only to provide its service to us.

We do not sell or share your personal information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in California law. We have never done so.

Sharing with people you invite

If you invite someone to a Support Circle, they can see the records for the specific person you choose to share, according to the role you give them. You control who is invited and can remove access at any time.

When you send an invitation, we store the invited email address so that person can join. If the invitation is not accepted, declined, or withdrawn within 30 days, it expires and the address is deleted. If you received an invitation you did not want, email privacy@badyorkiestudios.com and we will remove your address.

Information about other people

The app lets you record details about people other than yourself: the child, a guardian, and a care provider. They have not agreed to this policy. You are responsible for having the right to provide their information, and the Terms of Service say so. We use those details only to show them back to you and never to contact anyone.

How long we keep information, and how to delete it

⚠️ If your subscription ends

This is the part most likely to surprise you, so we state it plainly.

If a paid subscription ends, you enter a grace period. During it you keep access to your data, you are shown how many days remain, and you can save your photos and videos to your device's photo library.

What happens at the end of the grace period: open the app and sign in, and your records and your photos and videos are moved back onto your device, where you keep them. That is true for every subscriber, whichever version you started with. The app keeps working in its free, on-device mode. You can also move them earlier, from the reminder in the app. Your cloud copy is removed once the move completes; resubscribing later moves everything back to the cloud.

If you do not open the app, nothing is moved: your cloud data is deleted no sooner than 30 days after your subscription ends, and only for accounts that have not returned by then. We email you, and if your device allows it we also send you a notification, before anything is deleted, with reminders as the deadline approaches. Resubscribing at any point during the grace period stops the process entirely.

Support Circles. If you own a Support Circle and your subscription ends and the grace period passes, the circles you own close and their members lose access to the records you shared with them; you keep the records on your own device once you open the app. If your own subscription ends while you are a member of someone else's circle, you leave it.

Note: at the time of writing, automatic deletion is not yet switched on; the schedule above describes how the feature is designed to operate.

If our business changes hands

If Bad Yorkie Studios LLC is sold as a company, nothing about your data changes: the same company holds it under this policy. If instead the Tantrum Tracker assets are sold or transferred, the successor must accept this policy and our Consumer Health Data Privacy Policy for everything collected before the transfer. We will post notice in the app and on this page before any such transfer, and you will have the chance to download or delete your records first.

Security

• In transit: all connections to our service providers are encrypted.
• In our cloud storage: your records and media are encrypted at rest by Google.
• On your device: your records are protected by your device's own encryption, which is active when your device has a passcode set. The app does not add a second layer of encryption of its own, so a device passcode matters.
• Access controls: server rules restrict each account to its own data, and to data explicitly shared with it. Those rules are covered by an automated test suite.
• Genuine-app checks: requests for your records that do not come from a genuine copy of the app are blocked.
• Optional App Lock: you can require a PIN or biometrics to open the app. The PIN is stored in your device's secure storage. The widget and the Apple Watch app sit outside that lock and show only the child's first name, today's count and, on the widget, the severity of the latest episode as dots, and nothing else from the record.

⚠️ Removing the app does not delete your data, and does not necessarily sign you out. If you subscribe, your data remains in the cloud. On some devices your sign-in is kept by the operating system's secure storage, so reinstalling the app can leave you signed in. To end access, sign out or delete your account.

Children

Tantrum Tracker is for adults. The account holder must be an adult: the parent or legal guardian, or someone who has their permission. The person whose behaviour is recorded is a subject of records rather than a user. They have no account, no credentials, and no way to interact with the app. All information about them is entered by the adult account holder.

No part of the app is designed for a child to use, and we do not knowingly collect information directly from anyone under 18. If you believe a child has created an account, contact us at privacy@badyorkiestudios.com and we will delete it.

Health information

The records you keep about a child (profile, behaviour episodes, health markers including medication, notes, photos and video) are health information about an identified person, and we treat all of it as consumer health data, with the protections that term carries under state law, wherever you live. We ask for your specific consent before you create your first child's record; that consent covers every child you add. We ask again, separately, each time you share a child's records with a Support Circle. You can withdraw consent, download the records, or delete them at any time in Settings → Privacy. Our full Consumer Health Data Privacy Policy is at https://www.badyorkiestudios.com/consumer-health-data.

We are not a healthcare provider, health plan, or clearinghouse, and Tantrum Tracker is not subject to HIPAA. We say this to be accurate, not to claim a standard we do not meet.

Your choices and rights

• See your data: it is all visible in the app.
• Correct it: edit any record.
• Delete it: delete individual records, photos and videos, a tracked person, or your whole account from within the app.
• Export it: export your records to CSV, and save your photos and videos to your device.
• Stop sharing: remove anyone from a Support Circle at any time.

Tantrum Tracker is offered in the United States and Canada, and your information is stored in the United States. The rights described above apply to every user, wherever in those countries you live. Contact us at privacy@badyorkiestudios.com.

Notifications

The app can ask for your permission to send you notifications, and you can turn them off in your device settings at any time. We send each of the subscription notices described above by push notification and by email, so if notifications are off on your device the email still reaches you.

Changes to this policy

If we make a material change, we will post the new policy here and update the date at the top. If the change affects how we handle information we already hold, we will give notice in the app.

Contact

privacy@badyorkiestudios.com
Bad Yorkie Studios LLC, 2108 N St Ste N, Sacramento, CA 95816