Privacy Policy

Who we are

Tutola family is provided by Kinetech Lab Ltd, a company registered in England and Wales under company number 10736904. We are the data controller for the personal data described in this policy.

For anything about privacy or your data, contact hello@tutolafamily.com.

What this policy covers

It covers the Tutola family mobile app and this website. It explains what we collect, why, how long we keep it, who else processes it, and the rights you have over it.

Information we collect

Account information. Your name, email address, password (stored only as a cryptographic hash), and your profile settings.

Family information. The family you create or join, co-parent links and invitations, and the roles and permissions attached to each member.

Children's information. Profiles that you, as a parent, create about your children: name, date of birth, school and medical notes you choose to add, and the essentials you record. Children do not hold accounts and cannot sign in. See "Children's data" below.

Family activity. Events and schedules, custody arrangements, homework, routines, reading logs, expenses, care exchanges, handoff notes, incident journal entries, documents, and photos you upload.

Messages. Co-parent messages, including read receipts and the integrity metadata that makes message records tamper evident.

Subscription information. Your plan, its status and renewal dates. Card details are never sent to us and are never stored by us: payments are handled entirely by the app store or payment provider you buy through.

Technical information. Device and session details, IP address, approximate sign-in location, and error diagnostics. We use these for security, including new-device alerts and account protection.

Why we use it, and our legal basis

To provide the service (performance of a contract). Running your family workspace, syncing between co-parents, delivering notifications, and producing exports.

To keep accounts secure (legitimate interests, and legal obligation where applicable). Authentication, two-factor verification, session management, new-device alerts, abuse prevention, and fraud protection.

To take payment (performance of a contract). Managing subscriptions, trials, renewals, and refunds through the app store or payment provider you bought through.

To support you (legitimate interests). Responding to your messages and investigating faults.

To improve reliability (legitimate interests). Aggregate, non-identifying diagnostics about crashes and performance.

Optional features you switch on (consent). Marketing email, the AI tone assistant, and calendar feed sharing. You can withdraw consent at any time in the app.

Where the information concerns health or similar sensitive details you choose to record about a child, we process it only because you have provided it to us for the purpose of coordinating that child's care, and we do not use it for anything else.

Children's data

Tutola family is a service for adults. You must be 18 or over to hold an account. Children do not have logins and cannot access the app.

Information about a child exists only because a parent or guardian entered it, and it is visible only to the adults in that family and to anyone the parent has explicitly granted access. We do not profile children, do not serve advertising, and do not sell or share children's information. A parent can correct or delete a child's profile at any time, which removes the associated records.

Sharing

We do not sell personal data and we do not share it for advertising. We use a small number of service providers to run the service, covering hosting and storage, payment processing, email delivery, push notifications, error monitoring, and the optional AI tone assistant. They process data only on our instructions and under contract. Where a provider operates outside the UK or EEA, the transfer is covered by appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

We may also disclose information where we are legally required to, for example in response to a valid court order, or where it is necessary to protect someone's safety.

The AI tone assistant

Soften is an optional, AI powered feature. When you ask it to rewrite a message, that message text is sent to a third party AI provider to generate a calmer version, and the result is returned to you. It is not used to train AI models. If you never use the feature, none of your message text is sent to an AI provider.

Professional access

You can grant a professional, such as a solicitor, mediator, or therapist, read-only access to selected records. You choose which record types they see and for how long. Every grant is time limited, every access is logged for you to review, and you can revoke it at any time. Professionals cannot request access themselves.

How long we keep it

Your family records are kept for as long as your account is open, within the history limit of your plan: 365 days of history on Essential, and unlimited history on Complete.

When you delete your account, access ends immediately and remaining personal data is purged after 30 days. That short window exists so that an accidental or disputed deletion can be recovered. Some records are kept longer where the law requires it, such as transaction records needed for tax and accounting, and backups age out on their own cycle.

How we protect it

Each family's data is isolated at the database level, so one family's records cannot be read from another account. Data is encrypted in transit, and passwords are hashed and never stored in a readable form.

You can turn on two-factor authentication, biometric or idle app lock, and you will receive an alert when a new device signs in. Sensitive screens block screen capture where the device supports it, and push notification previews are redacted so private content does not appear on a lock screen. Error reports are scrubbed of personal data before they leave the app.

Your rights

Under UK data protection law you have the right to:

• access a copy of the personal data we hold about you
• have inaccurate data corrected
• have your data erased
• restrict or object to how we process it
• receive your data in a portable format
• withdraw consent for anything you opted into

You can exercise most of these in the app: your profile is editable, you can export your records, and you can delete your account from settings. For anything else, contact hello@tutolafamily.com and we will respond within one month.

A note specific to co-parenting: records that involve both parents, such as messages and shared children's records, carry the other parent's interests too. Where one parent asks for erasure, we may need to retain material that documents the other parent's involvement, and we will explain what we have kept and why.

If something does not look right, please tell us first at hello@tutolafamily.com and we will do our best to put it right. You also have the right to raise a concern with the Information Commissioner's Office, the UK's data protection regulator, although we would always rather hear from you first so we can resolve it directly.

Changes to this policy

If we make a material change we will update the date at the top of this page and notify you in the app or by email before it takes effect.

Contact

Kinetech Lab Ltd (company number 10736904). hello@tutolafamily.com.