Privacy Policy
Last updated: October 9, 2026
Tuptu ("the app", "we") is a mobile app that helps parents plan developmental activities for their children. This document explains what data we process and why.
The data controller is the individual behind the Tuptu project, contact: contact@tuptu.app.
1. What data we collect
1.1 Data stored only locally on your device
Your child's profile (name, date of birth), activity completion history, parent notes, and app settings are stored locally in a database on your phone (SQLite). We do not send this data to our servers and we have no access to it. If you uninstall the app or delete a child profile, this data is gone. We don't keep a copy.
1.2 Data sent to our server-side function and to the AI model (weekly plan generation)
To generate an activity plan, the app automatically sends to our server-side function (Supabase Edge Function): the child's age in months, the selected weekly focus belonging to a development area, the plan's week number, and a pseudonymous install identifier (see below). The server-side function passes on to our language model provider (Anthropic) the child's age in months, the selected weekly focus, and the week number. The app does not automatically send to the AI model:
- the child's first or last name,
- exact date of birth,
- any other data that could identify the child or parent.
The only exception to the third point of this list: if you add your own optional guidelines for the plan (e.g. your child's interests), that text is sent unchanged to the AI model together with the other plan parameters. Please do not enter your child's name, surname, or other identifying information there. This field is free text, and we do not filter it for that.
The model's response is validated server-side and client-side before it reaches the screen. We never display unverified content.
Every time a plan is generated, the app also sends our server a random install identifier created on your phone. We record it together with the date of the successful generation, to enforce the monthly plan limit and protect the service from abuse. The identifier contains no data about you or your child, but it is pseudonymous data: it lets us recognize the same app installation. It is independent from the telemetry toggle described in section 1.4. We do not pass it on to the AI model provider. We keep it for a maximum of 12 months.
1.3 Technical data
The app may locally store connectivity status (offline/online) needed for local sync to work correctly.
When the app connects to our server (plan generation, content reports, telemetry), the Supabase infrastructure automatically records the IP address and the approximate location it implies in technical logs. We currently have access to these logs for 1 day, and we do not link them to data from the app.
1.4 Telemetry (optional, off by default)
The app has an optional telemetry toggle (Settings → Privacy), off by default. If you turn it on, we send to our database:
- a pseudonymous install identifier: a random string tied to your device, not linked to any account, name, or email address (different from the identifier described in section 1.2),
- the type of event: e.g. a plan was generated, a week was closed, unsafe content was detected and blocked,
- the child's age bracket (e.g. "12-18 months"), never an exact age or date of birth,
- the share of activities completed that week, and whether the plan was fully completed, where applicable.
We do not send the child's name, date of birth, or any text you type into the app. This data is used only by us, to understand how the app is used, and is never shared with third parties or used for advertising. We keep it for a maximum of 12 months from the date of the event.
We do not use any other third-party analytics or behavioral tracking tools beyond the in-house telemetry described above. If this changes, this policy will be updated in advance.
1.5 Email address (waitlist / contact)
If you join the waitlist at tuptu.app or contact us, we process your email address solely to send you information about the app and to respond to your message. We do not share it with third parties for marketing purposes.
1.6 Content reports
Every activity in a plan has a "Report this activity" button. If you use it, the app sends the content of that single activity to our server (Supabase): its title, description, day of the week, development area and duration, plus the plan's theme and week number and the plan's local number from your phone. A report does not include your child's name or date of birth, their age as a separate data point, your notes, or the install identifier. We do not link a report to any other data from the app.
We read reports to catch inappropriate or unsafe content and to improve how the app builds plans. Nothing is sent unless you tap the button yourself. We keep reports for up to 12 months from submission.
2. Legal basis and purpose of processing
We process data based on:
- necessity for providing the service (GDPR Art. 6(1)(b)): data sent to the AI model to generate a plan,
- legitimate interest (GDPR Art. 6(1)(f)): the install identifier, i.e. enforcing the plan limit and protecting the service from abuse (section 1.2), content reports, i.e. content safety (section 1.6), technical logs (section 1.3),
- consent (GDPR Art. 6(1)(a)): waitlist / newsletter sign-up, telemetry (section 1.4).
3. Children's data
Tuptu is an app for parents and caregivers, not for children. A child profile is created and managed exclusively by the parent/caregiver. We do not target the app directly at children and do not collect data directly from children. Data about a child (age in months, without name or date of birth) is processed only to the extent necessary to generate personalized developmental content, based on the parent's explicit action. Together with this information about the child, our server also receives the pseudonymous install identifier described in section 1.2. The identifier contains no data about the child.
4. Data processors
- Supabase: server-side function infrastructure mediating calls to the AI model, and the database where we store the install identifier recorded at plan generation (section 1.2), content reports (section 1.6), and telemetry data (section 1.4), as well as technical call logs (section 1.3).
- Anthropic: language model provider generating plan content (receives data described in section 1.2).
- Cloudflare: hosting for tuptu.app and email routing.
We do not sell or share personal data for advertising purposes.
5. Your rights
Under GDPR you have the right to: access your data, rectify it, erase it, restrict processing, data portability, and object to processing.
You can delete the data on your phone (child profile, history, notes) yourself: in the app settings by deleting the child profile, or by uninstalling the app.
We will delete your waitlist email address upon request sent to contact@tuptu.app.
We record telemetry data (section 1.4), the install identifier (section 1.2), and content reports (section 1.6) without your name, email address, or other data that could identify you, and the app currently does not display these identifiers. Because of this, we cannot today determine which entries come from your phone, and we cannot delete them on an individual request. We keep them for a maximum of 12 months (section 7). You can stop sending telemetry at any time with the toggle in settings. Direct questions about this to contact@tuptu.app.
You also have the right to lodge a complaint with your national data protection authority (in Poland: UODO).
6. Content safety
All AI-generated content for a child is automatically checked for safety and age-appropriateness before it is shown. App content does not replace medical or educational professional advice. Where content touches on health topics, we display an appropriate disclaimer.
7. Data retention
We keep local data for as long as you use the app, until you manually delete it or uninstall the app. Waitlist email addresses are kept until you unsubscribe or until launch, whichever comes first. Telemetry data (section 1.4) is kept for a maximum of 12 months from the date of the event. Content reports (section 1.6) and the install identifier recorded at plan generation (section 1.2) are also kept for a maximum of 12 months from when they are recorded.
8. Changes to this policy
If we change how we process data (e.g. add analytics), we will update this document and notify you of material changes in the app or on the website.
9. Contact
Privacy questions: contact@tuptu.app