Privacy Policy
Last updated 31 August 2026
Who controls your data
TotTap is operated in the United Kingdom by Ross Shelford, who is the controller of the personal data described in this policy. Contact r.shelford@hotmail.co.uk with any privacy question or request.
What TotTap collects
When you sign in, TotTap stores the email address used to sign in, the carer name you provide, the baby names or labels you provide, each baby’s date of birth or expected due date, family membership, and the care activities you log. Care activities include the activity type, its time, its duration where relevant, the selected feeding choice (Formula, Breast, or an optional custom label of up to 30 characters), left or right breast when selected, and which collaborator logged it. TotTap also keeps a record of the shared-care consent you gave, including the statement version, confirmation method, and time. If you use TotTap without an account, the baby and care information remains only in protected local storage on that device and is not sent to TotTap, Supabase, or Resend. TotTap does not collect feeding amounts, advertising identifiers, precise location, contacts, photos, or free-text care notes. A custom feeding label is the only limited free-text care field.
Where the information comes from
Account and carer details come directly from the adult using TotTap. A child does not provide information to TotTap. A parent or carer supplies each child label, birth or due date, and routine care events for the shared family timeline.
Why we use it
We use this information to provide the shared baby-care timeline, synchronize it across carer devices, authenticate users, secure and support the service, prevent misuse, comply with law, record and manage shared-care consent, provide optional reminders requested on the device, and understand or fix service faults. TotTap does not sell personal data, show advertising, or use care history for profiling, medical analysis or automated decisions.
Lawful bases
We process adult account, authentication, and profile information because it is necessary to provide the service requested by the adult account holder. We rely on legitimate interests to process the minimal child label, birth or due date, and routine care timeline needed for the family coordination requested by the adult, and to keep TotTap secure and reliable, prevent misuse, and provide support. These interests are balanced against the rights and best interests of parents and children through data minimization, access limited to invited family members, no profiling or advertising, and in-app deletion controls. We process information to comply with a legal obligation where a specific law requires it. If a shared timeline contains information that reveals health, we also rely on the adult’s explicit consent as the special-category condition under Article 9(2)(a) of the UK GDPR.
Shared-care consent
Cloud sharing is optional and requires a separate affirmative consent from every adult who creates or joins a care team. The consent names Ross Shelford as controller, describes the feeding, nappy, solid-food and sleep records, limits their use to TotTap’s shared care service, and explains withdrawal. It is separate from accepting these Terms and is not needed for one-device guest use. You can withdraw at any time by deleting your account in Settings or contacting r.shelford@hotmail.co.uk. Withdrawal does not make earlier lawful processing unlawful. Your cloud access will end. Care entries already shared with other consenting carers may remain in their family timeline as described under Retention and deletion.
Information you choose to provide
There is no legal obligation to provide information to TotTap. You can use the native app on one device without an account. An email address is needed only to secure an account and share a synchronized timeline with other carers. A child label, birth or due date, and care events are needed to create the age-aware timeline. Separate explicit consent is needed only for online storage and sharing. Custom feeding labels are optional.
Storage and service providers
The primary signed-in database is hosted by Supabase in London, United Kingdom. Supabase provides database, authentication, and realtime synchronization. Resend sends TotTap transactional sign-in emails from its Ireland sending region. It processes the recipient email address, the generic sign-in message, and delivery and security metadata. Sign-in emails do not contain baby names, carer names, or care events, and email open and link tracking are disabled. Signed-in timelines keep a protected local copy on your device so taps work offline. Without an account, the native app stores the timeline only on that device and does not use Supabase or Resend. Authentication credentials are stored in the device Keychain or Keystore. Apple and Google may process app-store, device and platform information under their own terms when you download or use the app, but TotTap version 1.0 does not use Apple or Google social sign-in. If you turn on care reminders, TotTap asks your device to schedule them locally. Reminder messages use general wording and do not show a baby name, care type, or timer detail. Reminders that become due during quiet hours wait until those hours end. TotTap does not register a remote push token or send care details to a notification provider.
International processing
Although the primary database is in London and Resend dispatches TotTap email from Ireland, Supabase, Resend, their subprocessors, and platform providers may process limited account, email-delivery, service, security, or support data in other countries, including the United States. Where required, that processing is covered by contractual or other lawful transfer safeguards maintained by the relevant provider.
Sharing
Information created without an account is not shared by TotTap. Every authenticated member of the same family can see every baby label, birth or due date, and the associated care history. There are no separate permissions for individual babies. The adult who creates the family is its organiser and controls baby details, invitations, and carer access. An invite link is valid for seven days and can be used once. Anyone who receives an unused invite link may join that family, so share it only with an intended, trusted carer. Removing a carer also invalidates the family’s unused invite links. We disclose data to service providers only where needed to operate TotTap, or where disclosure is required by law. We do not sell personal data.
Security
TotTap uses access controls, family-scoped database rules, encrypted native storage, protected device credential storage, transport encryption, expiring one-use invitations, and restricted service credentials. No service can guarantee absolute security. If a personal-data breach is likely to create a risk to people, we will notify the ICO and any affected people where and when the law requires.
Retention and deletion
On-device-only information remains until you delete it in Settings or remove the app. TotTap cannot retrieve or delete that information remotely because it never receives it. Signed-in data is retained while the family account is active. You can delete your account in Settings. Shared care history remains for other connected carers. When the final carer deletes their account, the remaining family data is deleted. If another carer remains, your user identifier and display name are removed from existing events and replaced with “Former parent”. Your individual consent receipt is deleted when your family membership is removed or your account is deleted. A family organiser can remove a carer’s access without deleting that carer’s TotTap account. Their cloud access ends immediately, existing care entries remain, and TotTap clears that family’s local app data when the removed carer’s app next connects. Local app data is also removed when you sign out or delete the account. Service providers may keep short-lived operational logs or residual copies for their published retention periods before permanent deletion.
If TotTap changes owner or closes
If TotTap or substantially all of its service assets are sold, reorganised or transferred, relevant personal data may pass to the successor operator for the purposes described in this policy, subject to applicable law and appropriate confidentiality and security. We will provide notice where required. If the service closes without a successor, we will give reasonable notice where practicable and delete or anonymise personal data when it is no longer required, subject to legal duties and short-lived provider backups.
Your data rights
You can correct your name, edit activity times, remove activities, delete on-device data, sign out, and delete your account in the app. The family organiser can also correct baby names and remove carer access, and change future feeding choices. Removing or renaming a custom feeding label does not rewrite earlier timeline entries. Depending on the law that applies, you may request access, correction, erasure, restriction, portability, or object to processing. Email r.shelford@hotmail.co.uk to exercise a right. We may need to verify that the request relates to your account and will respond within the period required by law. You may also withdraw shared-care consent as explained above.
Children’s privacy
TotTap is an adult-directed tool for parents and carers. Children do not create accounts or use the service directly. Users must be at least 18 years old and have authority to provide the child information they enter. Use a first name, nickname, or other minimal label, and do not put diagnoses, clinical measurements, emergency information, or other medical details in a baby name or custom feeding label.
Automated decisions
TotTap does not use personal data for automated decision-making, advertising, or profiling.
Questions and complaints
Send a privacy question or complaint to r.shelford@hotmail.co.uk. We will acknowledge a data-protection complaint within 30 days, make appropriate enquiries, provide progress updates where needed, and respond with the outcome without undue delay. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.
Changes to this policy
We may update this policy as TotTap, its providers or the law changes. The current version and effective date will remain available in the app. We will provide notice where a change materially affects how personal data is used. A new purpose that is incompatible with the purposes above will require a fresh lawful-basis assessment and any notice or consent the law requires before that use begins.