Privacy

Who is responsible for it

Kiran Smith decides what Tiny Jaunt stores and why, and is the data controller for everything on this page. Tiny Jaunt is not a company: it is one person in the United Kingdom, reachable at kiran@tinyjaunt.co.uk. Ask on that address for a postal address and you will be given one.

What is stored

• Your account. Your email address, which is how you sign in: we email you a code and you type it back. And when you said OK to Claude reading what you share (below), so you are only asked once.
• Where you found us. If the link you first arrived by carried a short code saying where it was posted (a noticeboard card, a local group), that code is kept with your account when you sign up, once, so Kiran Smith can tell which of those places brought people in. It names the place, not you, and nothing is stored on your device to carry it.
• A link pasted before you sign up. The front page can read a link for someone with no account. It keeps the link and what was read from it for a day, so the same page isn’t read twice, with a one-way code made from your IP address so one address can’t have hundreds read. That code can’t be turned back into the address. All of it is deleted within two days. If you keep the link, it becomes an idea in your list like any other.
• Your sign-ins. Each time you sign in, the session is stored with the IP address and browser you signed in from, so a session that is not yours can be told apart from one that is.
• Your ideas. The places, classes and events you save or type in: a name, a venue, an address, a link, when it runs, and whatever the page you shared said about it. Any note your household keeps on an idea, one from the shared library included, with who last wrote it: only your household sees it.
• Your plan. Which idea you put on which day, any note you write on a day, and whether you later marked it as not gone to.
• What you ask it to look for. A link to a round-up you want read, or the words of an ask such as “new toddler theatre near us”, who in the household asked, and what was found. Kiran checks what is found before it goes into the shared library. Stop one and it is no longer looked for.
• Your household. Who you have invited and who accepted. An invite can carry a label you choose — “Nana” — so a name you type about somebody else is stored until the invite is used or revoked.
• Saving from a phone. A token the iPhone app, your Shortcut or your browser extension carries, stored encrypted.
• Ages. If you add them, each child’s month and year of birth. See Children, below.
• Where you are, for “Go now”. Only when you tap it, and only if your phone allows it: your location is sent once, used to find what is near you for that answer, and not kept. It isn’t stored, logged or sent on; the weather forecast for it is asked for the postcode area you’re in, not where you’re standing, and Directions opens your maps app without it.
• A connected assistant. If you connect one, which assistant, what you allowed it and for which household, and a note of each thing it asked for: the name of the request, when, and whether it worked. Never the words of what it asked.
• Places for the shared library. Kiran Smith may copy the public details of a place you saved (its name, venue, address, link, times and price) into the library every household sees. Never your notes, your plan or who saved it. Email and any of yours stays out.
• An outing you share. If you send a friend a link to an outing, a copy of what the link shows: the outing’s name, venue, link and, if you chose to include it, the day you’re going. Never your notes, your plan or your household. Anyone with the link can open it.
• A free ticket. If you take one, the name on it (your first name and the first letter of your surname, which you can change before you confirm), how many children and adults are coming, which session, and whether you were marked present at the door. Your email is used only to tell you if that session is cancelled.

Who else sees it

• Cloudflare hosts the app and the database, on a network that spans several countries. It also counts page views with Web Analytics, which sets no cookie and keeps nothing that identifies you: which pages were visited, from which country and which site linked here.
• Anthropic, whose Claude reads what you share so it can fill in the idea, in the United States. What is sent is the text of the page whose link you share, a photo or screenshot you add, the words you ask the Add page to look up, or the words you type about what you did this week; nothing else about you or your child is. Tiny Jaunt asks first, once, before the first of these leaves: “Links and photos you share, and what you type to search or about your week, are read by AI (Anthropic’s Claude or Typesafe’s Jev)”, with OK and Not now. That one OK also covers Typesafe, below. Not now sends nothing and saves nothing. On the front page, the same line sits over the Read it button, and pressing it is the OK. Sharing from the Chrome extension or the Shortcut waits until you have said OK in the app or in Settings. Anthropic handles it under its commercial terms, which don’t let it train its models on what Tiny Jaunt sends. Tiny Jaunt doesn’t keep the photo: it is read once and dropped, so leave faces out of it. To take the OK back, open Settings, then Save from your phone, and tap Withdraw beside “You said OK to that”. Nothing more is sent to Anthropic or Typesafe for you from then on, search reads your words on Tiny Jaunt’s own server again, and the next link or photo you share asks again. Ideas already filled in stay as they are, and you can still type ideas in yourself.
• Typesafe, whose Jev model reads short pieces of text into choices, in the United States. After the same OK, it is sent: the words you type into the search box, so “rainy day for a toddler” can become indoor and toddler; a line you tell the week, such as “Saturday we’re in Poole”, with the names and venues of the ideas it might mean; and, overnight, to suggest what to put on your free days, those lines together with the names, venues and times of ideas in your list and the dates of your recent outings. Never your email, your postcode, your location or anything about your child. Until someone has said OK, search reads your words on Tiny Jaunt’s own server and sends nothing, the week isn’t told anything, and the overnight suggestions come from Tiny Jaunt’s own rules alone. In a household of more than one, one person’s OK lets the overnight suggestions use Jev for the household’s shared list.
• Anthropic is also sent what your household asks Tiny Jaunt to look for, in the United States: the words of an ask, which its web search uses to find events, and the link and text of a round-up you want read. Nothing about you or your child is sent with them, so leave your child’s name out of an ask.
• Firecrawl fetches a public page for Tiny Jaunt when the site turns away our own reader, in the United States. Only the page’s address is sent; nothing about you or your child is.
• Your browser’s push service (Apple, Google, Mozilla or Microsoft, depending on the browser) carries notifications if you turn them on. What a notification says is encrypted so that the push service can’t read it; it sees only that one was sent.
• Resend sends the sign-in code email, and stores it in the United States.
• Google works out how long each place takes to reach by public transport, on foot and by car. It is sent the first half of your postcode and the place’s location, and nothing else about you. A map is only shown if you tap “Show Google map”, and that is when Google sets its cookies; say no and you get a link to open the place in a maps app instead. Google is in the United States.
• Open-Meteo, a weather service in Switzerland, is sent the middle of your postcode area (the first half of your postcode, never your street) so the week can show rain. Nothing else about you is sent.
• postcodes.io, an open postcode service, is sent a venue’s postcode so it can be placed on a map. Nothing about you is sent.
• An assistant you connect, such as Claude or ChatGPT, is sent the answers to what it asks: classes and places, and whether you belong to a household. It is never sent your routine, your notes, or your child’s name or age. Where it runs and what it keeps is set by the company that makes it, and it is your choice to connect one.
• The organiser of a free ticket sees the name on your ticket and how many of you are coming, so they can check you in at the door. Never your email, your household or your child’s age. If the organiser hasn’t joined Tiny Jaunt yet, they see it once they do, and every ticket says so before you take it.
• A class or venue you share sees how many people opened the link, went on to their site or saved it to their own Tiny Jaunt. They see how many, never who. To count one person once a day, the app makes a one-way code from your IP address and browser that changes every day and can’t be turned back into either.

So some of this leaves the United Kingdom. Each of those has a standard data protection agreement covering the transfer; we have not negotiated our own and we make no claim that your data stays in the UK.

Nothing is sold, shared with advertisers, or used to train a model.

If you run classes or events

When you claim a listing, Tiny Jaunt stores your name and email, the business details you give (its name, contact email and phone, website, Instagram, logo and description) and the evidence you sent that you run it. That evidence and who approved the claim are kept, so the decision can be checked later. What you publish about a class is shown to families; your sign-in email isn’t, unless you give it as the contact address. The same rights below apply to you. The provider terms say what you agree to.

If you bring your own customer list into Tiny Jaunt, you decide what is in it and what it is for, and Tiny Jaunt only holds it for you. This page doesn’t cover it; the data-processing agreement does. Accepting it stores who accepted, their email, the version and when. If you are one of a class’s customers, ask them first about your details.

Children

If you choose to, the app stores each child’s month and year of birth, and nothing else about them: no name, no photo, no school. It is used on the server to show only what fits a child’s age, and it is never sent to an assistant you connect, never written into the record of what an assistant asked, and never shown to anyone outside your household. It is optional; without it everything still works, unfiltered by age. We keep it because it is needed for the feature you asked for, and you can remove it in Settings at any time or ask us to delete it.

How long it is kept

A sign-in session and a sign-in code both expire on their own and are removed when they do. Everything else — your account, your ideas, your plan, your household — is kept until you delete your account or ask us to. There is no clock on it and nothing is thrown away to save room.

The note of what a connected assistant asked for is deleted after 90 days. Disconnecting an assistant in Settings ends its access at once.

A shared outing’s link works until your household is deleted. A free ticket is kept with the rest of your plan, so a session you went to still shows as one you went to. The daily counts a provider sees hold nothing that points back to you, so they are kept.

Your rights

You can ask for a copy of everything stored about you, or for it to be deleted, and you can object to any of it. Email kiran@tinyjaunt.co.uk and it is done within one month.

To delete your account yourself, go to Settings › Delete my account and type DELETE. It says first exactly what goes. You are signed out everywhere at once, and the iPhone app, the share buttons, notifications and any connected assistant stop straight away. You then have 7 days to change your mind: sign in before the end of the seventh day and tap Cancel deletion. We email you the date. After that the account is deleted for good, overnight.

If you are the only person in your household, the household goes too, with everything in it: the ideas, notes, plans and regulars. If others share it, only you leave: they keep its ideas, notes and plans, without your name on them. An entry the shared library took from one of your saves stays in the library, which everyone uses, but no longer points back to you. Copies in the database’s backups age out within 30 days of the deletion.

A copy of your data is still asked for by email and done by hand. A household’s ideas and plans belong to everyone in it, so a copy sent to you covers what is yours and not what somebody else wrote.

If you are unhappy with how a request was handled, say so on the same address — see how to complain. You can also complain to the Information Commissioner’s Office at ico.org.uk at any point, without asking us first.

Cookies

One cookie, to keep you signed in. Nothing tracks you across sites.