Tidva Privacy Policy

The short version

• Each parent decides what to add about their family. Information you add to shared areas can be seen by the other family members allowed to see it.
• We do not sell personal data and we do not use it for advertising.
• Only approved members of your family can access your family’s information, and guardians see only what parents allow.
• You can delete your account in the app or by asking us.
• If contact with the other parent is unsafe, please read our safety guidance before adding information to a shared space.

1. Who we are

Tidva is operated by Liam Crowder, trading as Tidva (“Tidva”, “we”, “us”). We are the “controller” of the personal data described in this policy: we decide how it is stored and protected so that the app works.

Contact for anything about privacy or your data: support@tidva.com.

This policy covers the Tidva – Shared Parenting Android app, the Tidva web app for iPhone and iPad (ios.tidva.com), and this website (tidva.com). Tidva is for adults aged 18 or over. Children do not have accounts.

2. What we store

Depending on how you use the app, Tidva stores:

• Account details: your name, email address, password (stored securely, not in readable form), and your role in the family (owner, co-parent or trusted guardian).
• Family details: which family you belong to, invitation codes, and the permissions set for each member.
• Information about children: names, dates of birth, school details, routines, notes, updates, tasks and responsibilities, and medical notes you choose to enter.
• Plans and requests: calendar events, handovers, holiday requests and approvals.
• Messages: the content of messages between family members in the app.
• Money records: purchases and expenses you log, and receipt images or files you attach.
• Documents and contacts: document details or files you add, shared contacts, and wishlist items.
• Notification data: a device token so we can send you push notifications about messages and holiday requests.
• Technical data: a copy of your data kept on your own device (for faster loading and limited offline use), and standard security logs that our providers keep, such as IP address and device type.
• Support messages: anything you send us when you contact support or make a deletion or safety request.

We do not need, and you should not add, more than is necessary to organise family life. Please do not add passwords, bank details or other people’s sensitive details that are not needed.

3. Why we use your information

We only use personal data where the law lets us. In plain terms:

• To provide the app you asked for (account, family linking, sharing, syncing, notifications). The legal basis is performing our contract with you.
• To keep the service secure and to prevent misuse (account checks, handling safety reports, enforcing our Terms). The legal basis is our legitimate interests in running a safe service.
• To answer your requests (support, deletion and rights requests). The legal basis is the contract and our legal obligations.
• To meet legal obligations (for example keeping purchase records, or responding to a lawful request from the police or a court).
• Health information about a child (such as medical notes): we use this only because you choose to enter it, with your explicit consent (see section 4).
• Push notifications: you can turn these off in your device settings at any time.

We do not sell personal data, and we do not use it for advertising or to build marketing profiles. We do not make decisions about you using automated profiling.

4. Children’s information and health data

Parents and guardians can store information about their children in Tidva. This can include health-related notes, which the law treats as “special category” data and needs extra care.

• Children’s information is added by adults. We do not collect information directly from children.
• It is only available to approved members of that family, according to their role and permissions.
• Entering medical or other sensitive notes is optional. By entering them you agree that we may store them and show them to the family members you share them with. You can remove a note at any time, and you can withdraw your consent by deleting it or by contacting us.
• We do not use children’s information for advertising or share it for marketing.

Only add what you need. Where parents disagree about what should be recorded, that is a matter for the parents and, where relevant, the court or a mediator, not for Tidva.

5. Who can see your information

• Family members. The family owner and the co-parent can see and add shared records. Trusted guardians see only what the parents allow. Other members of your family can see what you add to shared areas, so think about this before adding sensitive information, particularly if you have safety concerns.
• Tidva. We do not routinely read family messages or records. We may look at limited account or family information to give you support you asked for, to investigate a safety or misuse report, to keep the service secure, or where the law requires.
• Our service providers (section 6), who only handle data for us to run the app.
• Police, courts and other authorities, but only where we are legally required to, or where we reasonably believe it is necessary to protect someone’s life or safety. We will tell you where we are allowed to.

6. Service providers and transfers abroad

We use these providers to run Tidva. They act on our instructions:

• Supabase: database, sign-in and file storage for the app.
• Google (Firebase Cloud Messaging): sends push notifications.
• Google Play: handles Android app downloads and Android Family Setup Unlock payments. We do not see your payment card details.
• Stripe: handles iPhone and iPad web-app Family Setup Unlock payments. We do not see your payment card details.
• IONOS: hosts this website.
• FormSubmit: delivers messages sent through forms on this website (such as deletion requests) to our support inbox.
• Google Fonts: supplies fonts used on this website.

Some providers, including Google, may process data outside the UK. Where personal data leaves the UK, we rely on safeguards the UK recognises, such as an adequacy decision or the UK International Data Transfer Agreement/Addendum, so that your data stays protected.

7. How long we keep information

• While your family account is active: we keep family information so the app works for you.
• After you delete your account: we delete your account details and profile from our live systems within 30 days. Copies in provider backups are overwritten within a further 35 days.
• If the family owner deletes the family, or every member has deleted their account: the family’s shared records are deleted on the same timetable.
• Support emails and requests (including deletion and rights requests): up to 12 months after the matter is closed.
• Purchase records: Google holds payment details. We keep a record that a family has unlocked invites for as long as the account exists, and any accounting records for up to 6 years where the law requires.
• Safety reports: kept for as long as needed to deal with the report and any resulting action, then deleted.
• Local copy on your device: remains until you sign out, clear the app’s data or uninstall it. Deleting your account in the app removes it.

We may keep information for longer if the law requires it, or if we need it to deal with a legal claim or serious safety concern.

8. Deleting your account and shared records

You can delete your account inside the app, or ask us on the delete account request page. We aim to complete requests within 30 days.

Family information belongs to more than one person. If you delete your account, we delete your personal account details and profile. Records you added to the shared family space (such as calendar entries, messages, expenses or documents) may stay visible to the remaining family members until the family itself is deleted, unless you ask us to remove them. Tell us in your request if you want specific records removed. If you may need copies of messages or records, for example for a solicitor, keep copies before you delete.

9. Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct information that is wrong or incomplete;
• delete your personal data;
• restrict how we use it while a concern is looked at;
• give you your data in a portable format, where this applies;
• stop using it where we rely on legitimate interests, and withdraw consent you have given.

To use any of these rights, email support@tidva.com. We will reply within one month. We may ask you to confirm who you are before we share or change anything, because we must not give one person access to another person’s information.

Family records involve several people. Where giving you information would reveal another person’s private details, or could put someone at risk, we may need to limit or withhold some of it, and we will explain why where we can.

If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

10. Security and account recovery

How we protect your data

• Each person has their own account and role. Access is limited to approved family members.
• Family membership checks, role-based permissions and row-level security in our database help stop one family seeing another family’s data.
• Data is encrypted while it travels between the app and our servers, and our database provider encrypts stored data.
• We limit who at Tidva can access production data, and we use only the providers listed above.
• If a data breach is likely to put people at risk, we will tell the ICO within 72 hours where the law requires, and we will tell affected people without undue delay.

No system is completely secure. Please help by using a strong, unique password, a screen lock on your device, and keeping your email account secure.

Account recovery

• Forgotten password: use the “forgot password” option on the sign-in screen. We send a reset link to the email address on the account.
• No access to that email: contact support@tidva.com. We may ask questions to check it is really you.
• Someone else may have your account: change your password and email us straight away. If it is safe to do so, also sign out on shared devices.
• We will not hand over access to your account, or reveal who is in your family, to anyone who cannot show they are the account holder, including a co-parent.

11. This website

This website does not use cookies for advertising or analytics. Our hosting provider keeps basic server logs (such as IP address and pages requested) for security. Fonts load from Google Fonts, which means your browser contacts Google. If you send us a message through a form on this site, the details you enter (for example your name and email address) are delivered to our support inbox through FormSubmit.

12. Changes to this policy

If we change this policy in a way that matters to you, for example by using your data for a new purpose, we will update the date at the top and tell you in the app or on this website before the change takes effect where we can.

13. Contact us

Questions, requests or concerns about privacy: support@tidva.com. Safety concerns: see our safety guidance. In an emergency call 999.