Privacy Policy

Last updated: February 27, 2026

ToddlerCall ("the app") is designed to help young children make emergency video calls to trusted family members. This policy explains what data we collect, why, and how it is used.

1. Data We Collect

Account Identity

Parent devices sign in with Apple. We receive only the Apple-assigned user ID and, if provided, a name. Apple's "Hide My Email" option is fully supported.
Child devices and receiver-only devices use anonymous Firebase authentication. No name, email, or personal identifier is collected for these roles.

Household & Contact Information

Household name and a randomly generated join code are stored in our database.
Contact names, phone numbers, and optional photos are stored to populate the emergency call screen. Photos are stored as encoded image data and are visible to all devices in the same household. This information is entered by the parent or guardian and synced across household devices.
Phone numbers are used solely to send a one-time SMS invitation to contacts and to link a contact's device to their slot in the household. They are not used for marketing or shared with third parties.

Device Tokens

VoIP push tokens and FCM notification tokens are stored per device to deliver incoming call notifications and parent approval alerts. Tokens are updated automatically when they change and are deleted when a device is unregistered.

Call Data

During a video call, connection metadata (WebRTC offer/answer and ICE candidates) is temporarily stored to establish the peer-to-peer connection. This data is deleted immediately when the call ends and is never used for any other purpose.
Video and audio content is transmitted directly between devices (peer-to-peer). It is never routed through, recorded, or stored on our servers.

App Settings

Settings such as device role, child device name, night mode preferences, and notification preferences are stored locally on the device using iOS standard storage. They are not transmitted to our servers.

2. Data We Do Not Collect

We do not collect location data.
We do not use advertising identifiers or tracking.
We do not use third-party analytics or advertising SDKs.
We do not sell, rent, or share personal data with third parties for marketing purposes.

3. Children's Privacy

ToddlerCall is designed to be used by young children on a device configured by a parent or guardian. The child does not create an account and does not provide any personal information to the app. All account setup, contact management, and configuration is performed by the parent or guardian.

We do not knowingly collect personal information directly from children under 13.

4. Third-Party Services

ToddlerCall uses the following third-party services, each with their own privacy policies:

Google Firebase (Firestore, Authentication, Cloud Messaging) — database, authentication, and push notifications. Firebase Privacy Policy
Twilio — provides TURN server credentials to assist in establishing video call connections. Twilio does not receive or store call content. Twilio Privacy Policy
Apple Push Notification Service (APNs) — delivers VoIP call notifications to devices.

5. Data Retention

Call connection data is deleted immediately when a call ends or is missed.
Contact and household data is retained until deleted by the parent or guardian through the app or by contacting us.
Device tokens are retained until the device is unregistered or the app is uninstalled.

6. Your Rights

Parents and guardians may at any time:

Edit or delete contacts through the app (Settings → Manage Emergency Contacts)
Delete their household and all associated data by contacting us
Request deletion of all data associated with their account by contacting us

7. Contact

If you have questions about this privacy policy or wish to request data deletion, contact us at:

support@toddlercall.com

8. Changes to This Policy

We may update this policy as the app evolves. The "last updated" date at the top of this document will reflect any changes. Continued use of the app after changes constitutes acceptance of the updated policy.