PRIVACY

Privacy Policy Last updated: July 30, 2026 Loud Unicorn LLC ("we," "us," "our") built SitterSync. This policy explains what data SitterSync collects, why, and how it is handled. 1. What Data We Collect and Why Session Data: - Child's first name or nickname — entered by the parent when creating a session. - Session code — a short code the app generates so a sitter can join. - Care log entries — feeds, naps, diaper changes, medication given, and free-text notes, with timestamps, entered by the sitter or the parent during a session. Local Device Data: - App preferences and settings — stored locally via UserDefaults - Whether this device is acting as parent or sitter - Subscription and purchase status — whether you have unlocked paid features, verified locally via Apple StoreKit 2 2. What We Do NOT Collect - We do not collect email addresses, phone numbers, or government-issued identifiers - We do not collect advertising identifiers (IDFA/IDFV) and do not use advertising SDKs - We do not sell or share data with advertisers or data brokers - We do not use analytics SDKs (no Firebase, Amplitude, or Mixpanel) - We do not use crash reporting services - We do not access your location, camera, microphone, contacts, or photo library - We do not collect a child's date of birth, medical records, or any health identifier - We do not build a profile of any child or sitter 3. Where Your Data Lives Session details and care log entries are stored in Apple CloudKit so the sitter's device and both parents' devices see the same live log. App preferences stay on the device. We operate no servers of our own and hold no separate copy. Important: this app uses Apple CloudKit's public database, which means records are stored in a shared CloudKit namespace rather than in a private per-user container. Access is gated by the session or family code, not by per-record encryption. Treat anything you type into the app as shareable with anyone who has the code. Do not enter medical record numbers, financial details, addresses, or other sensitive identifiers. For SitterSync specifically this matters a lot, so be deliberate: use a first name or nickname only, never a full name. Do not enter your address, your child's school, medical record numbers, allergies with identifying detail, or anything else you would not want a stranger with the code to read. 4. Data About a Child SitterSync exists to pass care information between a parent and a sitter, which means it necessarily holds information about a child. We have kept that surface as small as we could: a first name, timestamps, and short log entries. There is no account, no photo, no birthdate, no medical field, and nothing is sent to us. The parent creating a session decides what goes in. Please keep it to the minimum a sitter actually needs. End the session when the sitter leaves so the code stops working, and delete the session when you no longer need the log. 5. Third-Party Services - Apple CloudKit — stores session details and care log entries so the parent and sitter see the same live log. Apple's privacy policy applies: apple.com/privacy - Apple StoreKit 2 — purchase and subscription processing. Apple handles all payment data. We receive only anonymized transaction receipts. - Apple UserNotifications — local notifications scheduled on your device. Notification content is generated on-device and no data leaves your device. We do not integrate any third-party analytics, advertising, or tracking libraries. 6. Children's Data SitterSync is operated by adults: a parent or guardian creates the session and a sitter joins it. Children do not use the app and we collect nothing from a child directly. Information about a child is entered by the parent, who decides what to include and who receives the session code. The app deliberately holds only a first name or nickname and short care log entries. If you believe information about your child is in the app and should be removed, delete the session in the app or contact maxthemoltbot@gmail.com. 7. Data Retention and Deletion - CloudKit session and log records: persist until the parent deletes the session, subject to Apple's CloudKit retention - Local preferences: removed when you uninstall - Subscription records: managed by Apple End and delete a session once you no longer need the log. Uninstalling alone does not delete CloudKit records. 8. Security Local data is protected by iOS application sandboxing. CloudKit data is protected in transit and at rest by Apple's infrastructure. Access to a session is controlled by the session code, not by per-record encryption, so keeping the code private and ending sessions promptly is the main protection. We hold no user database. 9. Changes to This Policy Material changes will be communicated via in-app notice. Continued use constitutes acceptance. 10. Contact Loud Unicorn LLC maxthemoltbot@gmail.com Arizona, USA ──────────────────────────────────────── GDPR — Your Rights (EU/EEA Users) Last updated: July 30, 2026 1. Data Controller Loud Unicorn LLC is the data controller for personal data processed through SitterSync. Contact: maxthemoltbot@gmail.com 2. Legal Basis for Processing - Contractual necessity (Art. 6(1)(b)): Storing session and log data in CloudKit is required for the parent and sitter to see the same live log. - Consent (Art. 6(1)(a)): Notification permission is requested explicitly and can be revoked in iOS Settings. 3. Your Rights Under GDPR Right of Access (Art. 15): The full session log is visible in the app. We hold no separate server-side copy. Right to Rectification (Art. 16): Edit or correct your data directly in the app. Right to Erasure (Art. 17): Delete the session in the app to remove its records, then uninstall to remove local data. Right to Restriction (Art. 18): Disable optional permissions and notifications in app settings or iOS Settings. Right to Data Portability (Art. 20): Use the in-app export where available, or contact maxthemoltbot@gmail.com for assistance. Right to Object (Art. 21): Stop processing by uninstalling the app. 4. How to Exercise Your Rights Email: maxthemoltbot@gmail.com — we respond within 30 days. 5. Supervisory Authority You may lodge a complaint with your local EU/EEA data protection authority. 6. International Data Transfers Session data is stored in Apple CloudKit under Apple's GDPR commitments and Standard Contractual Clauses. No data is transferred to our own servers. 7. Contact maxthemoltbot@gmail.com | Loud Unicorn LLC | Arizona, USA ──────────────────────────────────────── CCPA/CPRA — Your Rights (California Residents) Last updated: July 30, 2026 1. Categories of Personal Information We Collect - A child's first name or nickname, entered by the parent — stored in Apple CloudKit - Care log entries with timestamps — stored in Apple CloudKit - App preferences — stored locally - Device identifiers used by Apple for StoreKit transaction verification We do NOT collect: email address, phone number, financial account data, biometric data, precise advertising identifiers, or the categories of sensitive personal information defined by CPRA beyond what is described above (short care log entries about a child, entered by their parent). 2. Do We Sell or Share Personal Information? No. We do not sell or share personal information with third parties for advertising or cross-context behavioral advertising. 3. Your CCPA/CPRA Rights Right to Know: The full session log is visible in the app. We hold no separate server-side copy. Right to Delete: Delete the session in the app to remove its records, then uninstall to remove local data. Right to Correct: Edit your data directly in the app. Right to Opt-Out of Sale/Sharing: We do not sell or share — no action required. Right to Non-Discrimination: We will not discriminate against you for exercising CCPA/CPRA rights. 4. Contact maxthemoltbot@gmail.com | Loud Unicorn LLC | Arizona, USA