Privacy Policy

1. Scope and who we are

TinyGuard LLC ("TinyGuard," "we," "us") operates a cloud-based management platform for childcare and elder care facilities. This policy explains how we handle personal data for:

• Facility operators and staff — people who log into the TinyGuard dashboard to manage their facility.
• Families and authorized contacts — parents, guardians, and relatives who access the family portal or receive communications.
• Children and residents — individuals whose care is recorded in the platform. We receive this data from the facility, not directly from individuals.
• Website visitors — people who visit tinyguard.co without an account.

TinyGuard acts as a Business Associate under HIPAA when processing Protected Health Information on behalf of facilities. The facility (Covered Entity) controls how PHI is used; TinyGuard processes it per the signed BAA. See our Business Associate Agreement for full PHI handling details.

2. What data we collect

Account and facility data

• Facility name, address, subdomain, and plan tier
• Owner and staff names, email addresses, phone numbers, roles, and profile photos
• Authentication credentials (passwords stored as bcrypt hashes; we never store plaintext)
• Billing information (processed by Stripe — we store the last 4 digits and card brand, not the full card number)

Care and operational data

• Children's and residents' names, dates of birth, enrollment dates, and care room assignments
• Health records, medication schedules, allergy information, immunization records, and dietary restrictions — entered by facility staff
• Daily care events: meals, naps, diaper changes, medications administered, observations, and incidents
• Check-in/check-out records with timestamps and guardian identity
• Attendance, billing, and Electronic Visit Verification (EVV) records
• Authorized family and emergency contact information

Video and device data

• Live and recorded video from cameras configured by the facility (see Section 6)
• Device identifiers and heartbeat telemetry from Raspberry Pi hardware

Usage and log data

• Access logs: who logged in, from what IP, at what time, and what actions they took
• API request logs (sanitized — no passwords or card numbers)
• Technical error reports — the error message, stack trace, the page where it occurred, browser/device info, a truncated IP address, and your facility/account identifier — retained about 30 days and accessible only to TinyGuard super-administrators, used solely to diagnose and fix platform faults
• Mobile push notification tokens (APNs/FCM) and device platform, when you install our mobile app and enable notifications — used only to deliver the notifications you choose

Communications

• Messages between staff and families through the platform's messaging feature
• Email content for daily reports sent to families

3. How we use it

• Delivering the service: All data collected is used to provide the features your facility has enabled — video monitoring, care logging, billing, EVV, parent communications, and compliance reporting.
• Security and fraud prevention: Access logs and authentication data are used to detect unauthorized access and protect accounts.
• Product improvement: We use aggregated, de-identified analytics to understand how features are used and to improve the platform. We do not sell individual data.
• Communications: We send transactional emails (account confirmations, billing receipts, daily reports) and may send product update emails to facility owners. You can opt out of product emails at any time.
• Legal compliance: We retain certain records as required by law and respond to lawful requests from government authorities.

We do not sell your personal data to third parties. We do not use children's data for advertising purposes.

4. Payment processing and financial data

Subscription and tuition payments are processed by Stripe, which handles both credit/debit cards and ACH bank transfers (Stripe's bank-debit service). When you pay by ACH, Stripe Financial Connections is used to securely verify your bank account.

TinyGuard never stores your full card number, bank account number, or routing number on our servers; payment and bank credentials are handled directly by Stripe. By providing a payment method, you agree to Stripe's Privacy Policy.

5. AI features

Several features call out to AI providers to generate content. A given request is served by one of three providers (Anthropic, OpenAI, or Google) selected by TinyGuard's routing layer; data does not fan out to all three:

• Daily report drafts: Child or resident name, age, and today's logged care events.
• Observation polish: Staff-typed observation text.
• Incident analysis: Incident text and descriptions.
• Lesson-plan generation: Facility curriculum context and room metadata.
• Support chat: Operator-typed support questions and the platform context required to answer them.

AI-generated content (daily reports, suggestions) is always presented to staff for review before being shared with families. TinyGuard does not use AI to make decisions about children's or residents' care.

6. Video and camera data

TinyGuard handles video in two stages:

• Cameras stay on your local network. Camera RTSP streams terminate at the Raspberry Pi on your premises. Cameras themselves never speak directly to the internet.
• Live viewing relayed in real time, not stored. When an authorized viewer (staff, owner, family) opens a live stream from off-site, the Pi publishes the stream through Cloudflare Calls (a real-time WebRTC relay) so the viewer's browser can subscribe. Streams are encrypted in transit (TLS / DTLS-SRTP) but transit Cloudflare's network; they are not stored unless cloud recording is enabled.
• Cloud recording (opt-in). When enabled by the facility, video segments are stored in Cloudflare R2 (US infrastructure, AES-256 server-side encryption) for the retention period you've selected (7–365 days by plan). Segments are accessible only through signed JWT URLs that expire in minutes.

Access to video is restricted to authorized staff at your facility. TinyGuard employees do not access your video feeds unless you explicitly grant support access for a specific technical issue.

Facilities are responsible for ensuring that families, residents, and staff have been informed of and consented to video monitoring (and, where audio capture is enabled, audio recording in all-party-consent states) as required by applicable law.

No biometrics, ever. TinyGuard does not perform facial recognition, voice-print derivation, or any other biometric processing on the video that runs through the platform — locked as a standalone covenant in our Master Service Agreement §3 and reaffirmed per state. See the full No-Biometrics Covenant and the broader Legal Stack v1.0 covenants page for the architectural decisions that shape this commitment.

Scope note: this covers TinyGuard's own handling of biometric identifiers derived from the video, audio, and images that run through the platform — the monitored-subject identification that biometric statutes regulate. It does not restrict a user's own device operating-system unlock (for example, Face ID, Touch ID, or fingerprint) of the TinyGuard mobile app: that authentication is performed entirely by the user's device, the biometric template never leaves the device's secure hardware, and TinyGuard receives only a pass/fail signal — TinyGuard collects, derives, stores, and transmits no biometric data.

7. Children's privacy (COPPA)

TinyGuard's platform is not directed at children. Children's personal information is entered into the platform by facility staff, not by the children themselves. We do not knowingly collect personal information directly from children under 13.

Facilities using TinyGuard are responsible for obtaining all required parental consents for the collection and processing of children's information, and for complying with the Children's Online Privacy Protection Act (COPPA) and applicable state law.

If you believe TinyGuard has collected children's data in violation of COPPA, contact us at del@tinyguard.co.

Children's data retention policy (16 CFR § 312.10). TinyGuard maintains a written data retention policy for children's personal information. Children's personal information is collected for one purpose: enabling the facility that enrolls the child to deliver, document, and communicate care (attendance, care logging, daily reports, enrollment-gated video monitoring, and family messaging). It is retained only as long as reasonably necessary for that purpose, and is never retained indefinitely:

• Video recordings are automatically deleted at the end of the facility's selected retention period (7–365 days by plan; where state law sets a minimum, the minimum is enforced).
• Care and enrollment records are retained while the child is enrolled and the facility subscribes; after unenrollment or contract end they are retained only for the record-retention period that state childcare licensing law requires of the facility, then deleted.
• After a facility's subscription ends, data is available for export for 30 days, then returned or deleted at the facility's election (see § 10); records whose retention is required by law are deleted when that mandated period ends.

Deletion uses reasonable measures to protect against unauthorized access to or use of the information. The category-by-category schedule and the business need for each retention period are set out in the full written policy; facilities may request a copy at del@tinyguard.co.

8. Subprocessors

Third-party services that process personal data on our behalf:

We do not authorize subprocessors to use your data for any purpose other than providing services to TinyGuard. We give 30 days' advance notice of material changes to this list.

9. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access is controlled through role-based permissions with JWT authentication and refresh-token rotation. Each facility's data is isolated through tenant-scoped access controls enforced on every database query — one facility cannot access another's records.

We conduct regular security reviews. If you discover a vulnerability, please disclose it responsibly to del@tinyguard.co. See tinyguard.co/security for our full security posture.

10. Data retention

• During service: All facility data is retained and accessible through the dashboard.
• After cancellation: Your data remains available for export for 30 days after your subscription ends. After that window, at your election, TinyGuard returns or deletes your facility content — video recordings, camera configuration, care logs, and messages — on request and per our retention schedule. Certain records are retained as required by law (for example, billing, EVV/Medicaid, tax, and health records) for their mandated retention periods, after which they are deleted.
• PHI (under BAA): Minimum 6-year retention from date of creation per 45 CFR 164.530(j), unless Covered Entity requests earlier destruction.
• Cloud video recordings: Retained per your plan's retention period (7–365 days), then automatically deleted from R2.
• Audit logs: Retained for 6 years minimum.

11. Your rights

Depending on your location, you may have rights including:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data. Facilities can use the account deletion feature in the dashboard; staff can request deletion via del@tinyguard.co.
• Data portability: Export your facility's data in CSV/JSON format at any time through the dashboard.
• Opt-out of AI features: Disable AI processing for your facility by contacting us.

To exercise these rights, email del@tinyguard.co. We respond within 30 days.

California residents: You have additional rights under the CCPA. We do not sell personal information. You may request disclosure of data we collect about you or request deletion. Contact us at the email above.

12. Changes to this policy

We update this policy when our practices change. Material changes will be announced to facility owners via email with 30 days' notice. Continued use of the platform after the notice period constitutes acceptance.

Previous versions are available on request at del@tinyguard.co.

13. Contact us

Privacy inquiries: del@tinyguard.co
General: del@tinyguard.co
Phone: (510) 686-3357
TinyGuard LLC, 7428 SW Ashford St, Tigard, OR 97224