Privacy

The short version: signed out, everything stays on your Mac. Signing in stores your phones' settings in your account, and the dashboard shows you exactly what that is. We never sell data.

• Signed out, the Mac app has no account, no server and no telemetry. Your phones' configuration and the supervision key live on your Mac and nowhere else
• Signing in is optional and is the one choice that sends data to us. While signed in, your account stores your email, your phones' names and who uses them, their settings (which apps are allowed, internet and call rules, schedules), and a history of setup actions. That is what makes backup to a new Mac, the dashboard, and, for phones you explicitly add to the account, remote changes work
• Everything stored is visible on your dashboard at tinyphone.app. The dashboard is the inventory of what we have; nothing is stored that it does not show
• We never see the phone's contents: no messages, no photos, no browsing history, no location. Supervision configures a phone; it cannot read it (see /docs/limits)
• The supervision key itself never reaches our servers. It syncs between your own Macs through Apple's iCloud Keychain, end-to-end encrypted by Apple; we could not read it if we wanted to
• We never sell or share personal data. Products in Apple's parental-control category are additionally bound by Apple's no-data-sale rules, and we are glad about that
• Payments are handled by our payment provider; we never see card numbers
• Data deletion: delete a phone on the dashboard and its stored settings and history go with it. Delete your account and everything tied to it goes. Signing out stops all backup immediately; already-stored data stays until you delete it
• Questions: hello@tinyphone.app