All Yays! — Privacy Policy
Effective date: 2026-04-27 Operator: Cradlewise Inc. ("we", "us", "our") Address: 40087 Mission Blvd, #391 Fremont, CA 94539, USA Contact: support@cradlewise.com
This Privacy Policy describes how Cradlewise Inc. collects, uses, and shares information when you use the All Yays! mobile application ("the App").
By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.
1. Who this policy applies to
The App is designed for families. Accounts are created and controlled by a parent or legal guardian (the "Parent"). Children (the "Kid users") use the App under supervision of, and with profiles configured by, the Parent. This Policy applies to both Parent and Kid users.
The App is not marketed as a Children's Category app under Apple's guidelines. Parents are responsible for managing Kid users' data and consenting to its collection on their behalf.
2. Information we collect
2.1 Information you provide
About the Parent (account holder): - Full name, date of birth, sex - Email address - Authentication identifiers (e.g. password hash, OAuth identifiers) - Optional: address, city, zipcode, country - Optional partner's email address (used to invite the partner to the family)
About each Kid user (entered by the Parent): - Name and nickname(s) - Date of birth and sex - Hobbies and interests - Personality information (e.g. Myers-Briggs style responses) - Special conditions disclosed by the Parent (e.g. ADHD), used to adjust the App's reminders
Family configuration: - School name and selected calendars (used to import school holidays/events) - Tasks, expectations, and karma point values agreed during the weekly Bonfire setup
2.2 Information generated by use of the App
- Activity logs: completion or non-completion of daily and weekly tasks (mandatory tasks, bonus acts, missions, quests, behavioral observations)
- Karma points and rewards: earned, locked, banked, and redeemed
- Voice recordings: when a Kid marks a task as "not done", the App can record a short (~30 second) voice explanation. These recordings are stored so a Parent can review them.
- Calendar integration data: events imported from Google Calendar or school calendars you opt into
- Device data: push notification tokens, device model, OS version, and time zone
- Diagnostic data: crash reports, error logs
2.3 Information from third parties
- Apple Sign In / Google Sign In (if used): basic profile information (name, email) needed to create your account
- Apple Push Notification Service: delivery status of notifications
3. How we use information
We use the information to:
- Operate the core features of the App (track tasks, award karma, generate reports, deliver reminders)
- Send push notifications to Parents and Kid users about tasks, deadlines, and Bonfire times
- Suggest age-appropriate defaults and adjust nudges based on Kid profile
- Generate weekly, monthly, and quarterly digests for Parents
- Diagnose and fix bugs, monitor service health
- Communicate important service updates
- Comply with legal obligations
We do not use Kid data for behavioral advertising, profiling for marketing, or sale to third parties.
4. Voice recordings — special handling
Voice recordings made by Kid users when explaining a missed task are treated with extra care:
- Recordings are stored encrypted at rest in our cloud storage
- Only the Parent of the same family and the Kid who recorded them can play them back
- The Parent may delete any recording at any time
- Recordings are automatically deleted after 90 days unless the Parent saves them
- Recordings are not used to train any speech-recognition or AI models without explicit Parent consent (and we do not currently do this)
5. How we share information
We share information only as described below:
| Recipient | Purpose | Data |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, database, storage, push delivery infrastructure | All categories above, encrypted in transit and at rest |
| Apple Inc. | Push notification delivery | Push notification tokens |
| Auth provider (Apple / Google, if used) | Sign-in only | Basic profile per their terms |
We do not: - Sell personal information - Share personal information with advertisers or data brokers - Use third-party tracking SDKs that share data with advertisers - Share Kid-user data outside the Parent's family
We may disclose information if required by law, court order, or to protect rights and safety.
6. Data retention
- Account data: retained while your account is active
- Activity logs and karma history: retained while your account is active and for up to 12 months after deletion for backup and recovery purposes
- Voice recordings: 90 days unless saved by the Parent
- Diagnostic / crash data: up to 12 months
- Backups: rolling backups are retained for up to 30 days after deletion
You may request deletion at any time (see Section 8).
7. Security
We use industry-standard measures to protect your information, including:
- Encryption in transit (TLS) and at rest (AWS-managed encryption)
- Access controls limiting which personnel can access production data
- Regular security review of dependencies
- Authentication via short-lived tokens (JWTs)
No system is perfectly secure. If we discover a breach affecting your information we will notify you in accordance with applicable law.
8. Your rights and choices
Depending on your jurisdiction (CA/CCPA, EU/UK GDPR, and others), you may have the right to:
- Access the personal information we hold about you and your family
- Correct inaccurate information
- Delete your account and associated data
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent at any time
To exercise these rights, email support@cradlewise.com from the email address associated with your account. We respond within 30 days.
Parents may exercise these rights on behalf of their Kid users.
9. Children's data — additional notes
Although the App is positioned as a family app rather than a Children's Category app:
- Parents create and control Kid profiles. Kids do not create their own accounts.
- We do not knowingly collect information directly from a Kid user without the Parent setting up the profile first.
- We do not show third-party advertising in the App.
- Parents may delete any Kid profile at any time, which removes all associated data subject to the retention windows in Section 6.
If you believe a child has provided personal information to us without parental consent, contact us at support@cradlewise.com and we will delete it promptly.
10. International users
The App is operated from the United States. If you use the App from outside the United States, your information will be transferred to and processed in the United States. By using the App you consent to this transfer.
11. Beta and TestFlight notice
While the App is distributed via Apple TestFlight, you are using a pre-release version. Features may change, data may occasionally be reset between major beta builds (we will give notice when possible), and bugs are expected. Beta participation is voluntary.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via the App and/or email. The "Effective date" at the top will reflect the latest version.
13. Contact
Questions, requests, or concerns about this Privacy Policy:
Cradlewise Inc. 40087 Mission Blvd, #391 Fremont, CA 94539, USA Email: support@cradlewise.com