Privacy

Signed out, the Mac app has no account, no server and no telemetry. Your phones’ configuration and the supervision key live on your Mac and nowhere else
Signing in is optional and is the one choice that sends data to us. While signed in, your account stores your email, your phones’ names and who uses them, their settings (which apps are allowed, internet and call rules, schedules, the Home Screen and the look), the people you add to a phone’s Contacts, the calendar links and photos you add to the family’s tiles, and a history of changes. For a phone you add to the account it also keeps what the phone reports (its iOS, model, battery and when it last checked in), what a Mac read over the cable, and what the phone answers when you ask (its Activation Lock code, where it is in Lost Mode). That is what makes backup to a new Mac, the dashboard, and remote changes work
Everything stored is visible on your dashboard at tinyphone.app. The dashboard is the inventory of what we have; nothing is stored that it does not show
We never see the phone’s contents: no messages, no browsing history, nothing from its own photos or contacts. Where the phone is reaches us only when you put it in Lost Mode and ask. Supervision configures a phone; it cannot read it (see /limits)
The supervision key itself never reaches our servers. It syncs between your own Macs through Apple’s iCloud Keychain, end-to-end encrypted by Apple; we could not read it if we wanted to
We never sell or share personal data. Products in Apple’s parental-control category are additionally bound by Apple’s no-data-sale rules, and we are glad about that
Payments are handled by our payment provider; we never see card numbers
Data deletion: delete a phone on the dashboard and its stored settings and history go with it. Delete your account and everything tied to it goes. Signing out stops all backup immediately; already-stored data stays until you delete it
Questions: hello@tinyphone.app