Privacy Policy
1 What we collect
There are four situations in which this app talks to a network. All four are listed below — including the two we'd rather you not be surprised by.
| Purpose | What is sent |
|---|---|
| Usage statistics | A randomly generated device identifier (it changes on reinstall), an iCloud user identifier, which features you opened, when a session started and ended, whether you have purchased, and your app and OS version |
| Feedback you send | The message you write, and any image you choose to attach — metadata such as capture location is removed before upload |
| iCloud sync | Training records, course progress, preferences, and the symptoms you have logged — assessment answers and scores, leakage entries, and your safety screening answers. This copy lives in your own iCloud and does not pass through us. |
| Purchase check | None of your data; initiated by the system on your behalf |
2 What we don't collect
This section matters as much as the previous one. We do not collect free-form text (other than feedback you choose to write), symptom values or scores of any kind, your device name, your location, or your contacts. Photos are chosen through the system picker, so the app never gains access to your photo library.
There is no account and no sign-in. We cannot connect any of this to you as a person.
3 iCloud sync (off by default)
This is off by default. Only full-version users can turn it on, and the first time you do, we tell you separately what will be synced.
When you turn it off, we delete the copy in the cloud. We do not offer a "stop syncing but keep the cloud copy" option — that would leave you believing it is off while the data is still up there. Before deleting, we confirm this device already holds a complete copy.
4 Your choices
Settings → Erase data in the app removes every training and symptom record from this device. Turning off iCloud sync deletes the cloud copy. To have a feedback ticket removed, tell us in that ticket.
You can also simply stop using the app: deleting it removes the data on this device, and the random device identifier in usage statistics is replaced by a new one on reinstall, with no way to link it to the old one.
5 Security
We take reasonable technical measures with how your data travels and where it rests: every network request uses an encrypted connection, and on your device the records relating to your body and the records of your training sit in two separate, isolated databases.
But no method of transmission or storage is completely safe, and we cannot promise nothing will ever go wrong. The copy synced to iCloud is held by Apple, subject to Apple's terms and to the security settings on your own Apple Account — we can neither read it nor restore it for you. The security of the device itself (its lock screen, who else uses it) is likewise outside our control.
This page describes the current version. When behaviour changes we update this page and change the date below.
6 Children
This app is intended for adults. We do not direct it at children and we do not knowingly collect information from them.
If you are a parent or guardian and find that a child has used it and left data behind without your consent, tell us using the channel below and we will delete it.
7 Contact us
Settings → Feedback in the app opens a ticket, and we reply there — no email address and no phone number needed.
Tickets go both ways: you can follow up in the same ticket and attach images. That is the fastest route.
If you have not installed the app, or would rather not write inside it, email us at support@tinytwo.me. Replies by email are slower.