tiho · legal
Privacy policy
We built tiho to hold as little as possible. It's sleep notes about your baby, visible only to you and the people you invite. This page explains exactly what we collect and where it goes — in plain language, without legalese padding.
On this page
01 Who we are
tiho is a baby sleep-tracking app with AI sleep coaching, for iOS and Android. It is operated by Krasava Ltd (registered in Bulgaria), which is the data controller for the personal data described here. You — the parent or legal guardian — hold the account; your baby is the person the data is about.
This policy covers the tiho app. Our website (tihoapp.com) shows no ads and sets no advertising cookies. It uses privacy-respecting, EU-hosted analytics (PostHog) that by default stores nothing on your device — anonymous page statistics only. If you accept the cookie notice, we set a single first-party analytics cookie so those statistics can tell returning visitors from new ones; decline it and the site works identically. For any privacy question or request, email support@tihoapp.com. Our registered address is available on request.
02 Your baby's data
This is the most important thing to understand about tiho, so it comes first.
The account holder is always an adult parent or legal guardian. Your baby never uses tiho and has no account. Everything tiho holds about your child — their name, date of birth, an optional photo, and sleep records — is information you voluntarily enter, control, and can delete. tiho is not directed to children and collects nothing from a child.
Because that information concerns a minor and can include a photo and sleep details, we treat it with particular care, and we're committed to handling it in line with children's-data protections such as COPPA and the GDPR.
03 What we collect
Account
- A random account ID.
- Your email and name — only what Apple or Google return when you sign in (with Apple you can use Hide My Email). We never collect or store a password.
- Which provider you used (Apple or Google), and a device push token so we can send the notifications you turn on.
Your baby
- Name, date of birth, and pronouns (optional).
- An optional photo — resized on your device to a small image and stored in a private space only you can reach.
- Time zone, locale, and the sleep method you choose (Behavioral or Responsive).
Sleep
- Each sleep's type (nap or night), the put-down / asleep / wake times and derived durations, where your baby slept, and how they fell asleep (from fixed lists).
- Night wakings — time, length, and reason — and the local date and hour.
Notes you write
You can attach a free-text note to a sleep. It's meant for general sleep notes — it is not a place for health or medical information, and we ask you not to put any there. We can't monitor what you type, so if you do choose to include something sensitive, you're doing so on your own initiative. Bear in mind a note is part of the baby's shared journal: anyone you've invited to that baby can see it — a co-parent (who can also edit it) and a coach (read-only, within their access window). On our side, no one at tiho reads your notes; an automated check scans only for a few safety-relevant keywords so the coaching can point you to "see your pediatrician" when it matters, and we don't analyze them for anything else.
Also
- Developmental milestones you log, the AI coaching tiho generates for you (stored with metadata such as age band and method), and your subscription status mirrored from the app store (no card details — those stay with Apple or Google).
- Sharing data: who you've invited, single-use invite codes (stored only as one-way hashes), an optional name or email label you type for an invitee, and an audit log of sharing actions.
What we deliberately don't collect
No advertising identifier (IDFA), no precise GPS location, no password, no biometrics. We don't record sleeping position, swaddle, room temperature, or household risk factors. Our only sense of location is an approximate region inferred from your IP address by our analytics provider — standard for any website, and never precise.
04 How we use it
We use your data to run the app's sleep tracking, generate your coaching and schedule suggestions, deliver the notifications you enable, keep the app stable and secure, and let you share with the people you choose. We do not use it for advertising or profiling, and we never sell it.
05 The legal bases we rely on
Under the GDPR we have to point to a lawful reason for each thing we do with your data. In plain terms:
- To run tiho — performance of our contract with you. Creating your account; storing and showing your baby's sleep; generating the AI coaching that is part of tiho and tiho+; sharing with people you invite; and managing your subscription. You enter this contract by agreeing to our terms in order to use the app.
- Optional extras you switch on — your consent. Push notifications and an optional baby photo. You can withdraw at any time by turning them off or deleting them, without affecting anything done beforehand.
- Notes you write — provided on your own initiative. The free-text note field is for general notes, not health or special-category data, and we ask you not to enter it. If you choose to include something sensitive anyway, you're providing it yourself and consenting to us storing it as your private note; you can delete it at any time.
- To keep tiho safe and working — our legitimate interests. Security, preventing abuse, keeping the app stable, and anonymous analytics that never see your baby — our interest being a reliable, well-made product, weighed against your privacy.
- Legal obligations. Keeping subscription and tax records for as long as the law requires.
The core of tiho — including the AI coaching that defines tiho+ — is part of the service you sign up for, so using the app means agreeing to that processing; it isn't an optional toggle. Anything that genuinely is optional (a photo, push, or anything sensitive you choose to type into a note) is marked as such and is up to you.
06 AI coaching
tiho's coaching is generated by AI. To write it, your baby's recent sleep context — their name and date of birth, the method you chose, recent sleep events and wakings, your notes, milestones, and computed stats — is sent to our AI provider, OpenAI, through their API.
- That context includes your baby's name and date of birth, so the coaching can speak about them naturally and by age. Your own name, email, account ID, and any photos are never sent to the AI.
- Under OpenAI's API data-usage terms, your data is not used to train their models and is not retained for training.
- The AI is informational sleep coaching, not medical advice — see our terms.
This processing is inference only: every output is a suggestion you read and judge for yourself. It makes no automated decision with legal or similarly significant effects.
07 Who processes your data
tiho relies on a short, named list of infrastructure providers — each doing one job. None is an advertiser, data broker, or profiling company.
| Provider | What it handles | Region |
|---|---|---|
| Supabase | Our primary backend: database, sign-in, photo storage, and the secure functions that run the app — holds your account and baby data. | United States |
| OpenAI | Generates the AI coaching from your baby's context — including their name and date of birth (see §06). Never your own name, email, account ID, or photos. | United States |
| PostHog | Privacy-respecting product analytics and error reports, keyed to a random ID — never your baby's data, your notes, or the AI text. | European Union |
| RevenueCat | Manages your subscription entitlement. Receives your random account ID and purchase events — no app data. | United States |
| Apple & Google | Sign-in (the email/name you approve), push delivery, and all payment processing — we never see your card details. | Global |
09 Where your data lives
Krasava Ltd is based in Bulgaria, but your account and baby data are stored in the United States (our backend and AI provider), while our analytics are hosted in the European Union. If you're in the EU/UK, this means your personal data is transferred to the US. Those transfers rely on the appropriate safeguards — Standard Contractual Clauses and each provider's data-processing agreement — and you can ask us for a copy of them.
10 How to delete your data
You can permanently delete your tiho account, and everything tied to it, from inside the app:
- Open tiho and go to the More tab.
- Scroll to the bottom and tap Delete account.
- Press and hold the confirmation button. Deletion happens immediately, and cannot be undone.
What this deletes: your account and sign-in identity (Apple or Google), your baby profiles (name, date of birth, pronouns, photo), every sleep record (naps, nights, wakings, notes, milestones), all AI-generated insights and coaching, every sharing invitation and co-parent/coach access grant you created, and your notification settings and push tokens. Baby photos are erased from storage. If you shared a baby with a co-parent, your own copy is removed with your account.
What is kept: anonymised, aggregated usage statistics that can't be linked back to you or your child (see How long we keep it). Apple and Google hold their own purchase records under their policies, and we retain anonymised billing records where tax and accounting law requires. Deletion from our live database is immediate; any short-term operational backups our provider holds are cycled out within 30 days.
If you can't open the app: email support@tihoapp.com from the address linked to your account, and we'll delete it within 30 days.
Deleting only part of your data: you can remove a single baby, and its whole sleep history, from More → Babies, or delete individual sleep entries from the journal, without deleting your account. Uninstalling the app does not delete your synced data — use Delete account, or email us.
11 How long we keep it
We don't purge data on a timer — your records stay until you remove them (see How to delete your data above). Cancelling a paid subscription is a separate step — do it in the App Store or Google Play so you aren't billed again, which we can't do on your behalf.
Two honest caveats: anonymous analytics events are kept separately and are not removed when you delete your account, and we may retain subscription/purchase records for around 7 years where tax and consumer law requires it.
12 Your rights
Depending on where you live, you can access, correct, export (port), restrict, or delete your personal data, object to processing based on our legitimate interests, and withdraw consent at any time. You can do most of this yourself in the app; for anything else, email support@tihoapp.com and we'll respond within 30 days, free of charge.
tiho makes no automated decisions that produce legal or similarly significant effects — the AI only offers suggestions you read and judge (see §06).
If you think we've mishandled your data, please tell us first so we can put it right. You also have the right to lodge a complaint with a data protection authority — in the EU/EEA, the supervisory authority where you live or work; in the UK, the ICO.
For California residents: we do not sell or share your personal information, and we never have.
13 Security
- Row-level security on every table — you can only reach your own data, or data explicitly shared with you. Coaches are additionally limited to the time window the owner's plan allows.
- Baby photos live in a private bucket with no public access.
- Sign-in uses JWTs; refresh tokens are held in your device's secure keychain. Sensitive operations run through restricted server-side functions, and our keys and signing secrets never ship in the app.
- Invite codes are stored only as one-way (SHA-256) hashes, account deletion is rate-limited, and deletes cascade so nothing is left orphaned.
- If something does go wrong, we'll investigate promptly and notify you and the relevant authority where the law requires it.
14 Changes
We'll post any update here with a new date. For small clarifications, that's all. For a material change — especially one that introduces a genuinely new use of your data — we'll tell you in the app, and where the law requires your consent for that new use, we'll ask for it rather than treat your continued use as agreement.
15 Contact
Krasava Ltd is the data controller. For any privacy question or to exercise a right, email support@tihoapp.com.