Privacy Policy
Last updated: 27 September 2026
We wrote this policy ourselves, checked it line by line against what the app and our server actually do, and no lawyer outside our team has reviewed it yet.
Every Age ("the app") is operated by Rob Abramowitz. This policy explains what the app collects, why, and what you can do about it.
Who the account belongs to
The app is for parents and caregivers. We do not create accounts for children and children do not sign in. Everything in the app is entered by an adult.
What we collect
Your account identifier. When you use Sign in with Apple, Apple gives us an identifier for you. We store only a one-way hash of it, never the raw value. If you use Apple's Hide My Email, we store the private relay address Apple provides. We never receive your real email address unless you choose to share it.
Where you are, while you are looking. The Explore tab asks iOS for an approximate location so it can show places and events near you. We ask for Apple's reduced accuracy, which resolves to roughly one to three kilometres, never your exact position. The coordinate is used to run that one search and is not written to our database or kept afterwards.
Areas you bookmark, if you turn reminders on. You can ask Every Age to remind you about places on your list when you arrive near them. Doing that needs iOS's "Always" location permission, because the reminder has to be able to reach you when the app is closed, and that is the only thing it is used for. Your phone watches the areas you saved and tells the app when you cross into one; the reminder is then written by your own device. We are never told where you are, we never receive a location history, and nothing about your movement leaves your phone. The switch is off until you turn it on, it lives in Trips and your list, and turning it off stops the watching immediately.
Places, events, and trips you save. If you save a place, an event, a trip, or a named search filter, we store it on our server so it is there when you open the app again. If you set household Explore preferences, such as categories to skip, we store those too.
A calendar address for events you save. If you save an event, we create a secret calendar address on our server so those events can be fetched without signing in. Anyone who has the address can read the saved events. Deleting your account revokes the address.
Hours and amenities you report. If you write when a place is open or what it has, we store those words and show them to other parents using the app, exactly as you wrote them. We do not attach your name.
Your child's nickname, if you give one. A nickname is optional. When you provide one it is encrypted with AES-GCM before it is written to our database. We never ask for your child's full name or exact date of birth. If you add a birthday, the month and year are stored encrypted so we can show the right age as they grow. The day stays on your phone and is only used to remind you about the birthday interview. When you do not add a birthday, we store the age band you chose (a whole number of years from 0 to 18) instead.
What you record at check-in. The ratings you enter for how much you stepped in, how many reminders it took, and how much conflict there was, the practice steps you accept, and your check-in answers.
When you skip a practice window. The reason you pick on the Nothing is lost screen, stored so we can swap to an easier step.
Looking ahead snapshots. If you use Looking ahead, we store the numbers you enter for this week (activity count, hours, longest activity), which tracks you selected, and when you last saved, so the screen can show the same picture next time.
Steps you write yourself. If you add your own step, the words you type are stored. They are encrypted at rest with AES-GCM, exactly like a nickname, and for the same reason: a step you write may name your child. We do not read them to build content, we do not share them with other users, and there is no way for anyone else using the app to see them.
Whether your morning has a drop-off. For a four or five year old we ask whether there is a school or daycare drop-off. We store yes or no. It decides whether steps that only exist because of a deadline, such as packing a bag, are offered at all.
Which screens you reach. We record a short, fixed list of named steps along the way. The examples include that the app was opened, that you signed in, that you added a child, that you started a plan, that you saved a check-in, and that you saw the subscription screen. The same list also names guest setup, quizzes, memories, and a few other screens. The server refuses anything not on the list, so it cannot grow into a free-form record of what your family does in the app. It carries no device identifier, it is recorded by our own server with no third-party analytics company involved, and it is never used to track you anywhere else. Settings has a switch that turns it off. We use it for one thing: seeing where the app loses people, so we can fix that part.
Your settings. Your time zone, the routine you chose to focus on, and your consent decisions with the policy version and timestamp.
Subscription status. Whether your subscription is active. Purchases are handled by Apple, and what Apple tells our server about a purchase is a transaction identifier and a product and status, never a card number or billing address. We store that transaction identifier so a later renewal or refund notification from Apple can find the right account, alongside which product you bought and when our record of it was last confirmed. We never see your payment details.
A request identifier and technical record of the request. Every call your device makes to our server is logged with a request id, the endpoint and method, the response status, how long it took, and your account id if you were signed in. Log lines never carry anything you typed: not a nickname, not a step you wrote, not a request body. These logs have no fixed deletion schedule yet. We will set one before the app is released widely, and this policy will say what it is.
Your IP address, briefly, to enforce a rate limit. An unauthenticated request, such as signing in, is throttled by IP address so one source cannot hammer the endpoint. That address is held only in the server's memory, never written to the database or to a log line, and never persisted to disk. It does not survive a server restart, and the in-memory record is capped and cleared automatically once enough distinct addresses have been seen, so it cannot grow without bound.
What we do not do
- We do not track you across other companies' apps or websites.
- We do not sell or rent your data.
- We do not show third-party advertising.
- We do not use your data to train machine learning models.
- We do not store your location, build a location history, or send your position to anyone. Arrival reminders are matched on your own device against areas you saved yourself.
- We do not ask for precise location. Every request is for Apple's reduced accuracy, whether or not you have turned reminders on.
- We do not use any third-party analytics company, advertising SDK, or tracking library. The only measurement is the fixed list of screens above, recorded by our own server, and you can switch it off.
Why we collect it
Only to make the app work: to sign you in, to recommend a step suited to your child's age and routine, to track whether a practice is helping, and to manage your subscription. The one exception is the screen list above, which we use to find the places the app is failing people. We do not use any of it for any other purpose.
Who else sees it
- Apple, for Sign in with Apple and for subscription billing.
- Our hosting provider, which stores the database that runs the service.
We share data with no advertisers, data brokers, or analytics vendors. Hours and amenity notes you choose to write are shown to other parents using the app, without your name.
How long we keep it
We keep your data while your account is open. When you delete your account, or delete a single child, we remove that profile and erase the nickname and the text of any steps you wrote. Deletion removes the words themselves, not just a marker saying they are deleted.
Your subscription transaction record is the one exception. We keep the transaction identifier, the product you bought, and its status after account deletion, the same way any purchase leaves a billing record. It carries no words you typed and no card details, only what Apple already knows about the purchase. Server request logs and the brief in-memory rate-limit record above are not tied to your deleted account either way.
Your choices
Export your data. Settings has "Export my data". It returns every practice log you recorded, the plans you ran, the steps you wrote in your own words, your settings, your consent history, the places, events, trips, filters, and Explore preferences you saved, any Looking ahead snapshots you saved, and the reasons you pick when you skip a practice window. The file also includes quiz memories, moments you saved, and your weekly Looking ahead reminder preference stored on this device.
Turn measurement off. Settings has a switch for the screen list above. It stops at our server as well as on your device, and anything still waiting to be sent is dropped.
Delete your account. Settings has "Delete my account and all data". This removes your account, your child profiles, every practice log you recorded, the plans you ran, the text of every step you wrote, the places, events, trips, filters, and Explore preferences you saved, any Looking ahead snapshots you saved, and the reasons you pick when you skip a practice window. It cannot be undone. You do not need to contact us to do it.
Withdraw consent. Sign out at any time, or delete your account.
Depending on where you live you may also have rights to access, correct, or restrict processing of your data, and to complain to a data protection authority.
Security
Session tokens are stored in the iOS Keychain on your device. Child nicknames and any step you write are encrypted at rest with AES-GCM. Traffic between the app and our API uses HTTPS.
We periodically rotate the encryption key those values are stored under. When we do, the affected rows are re-encrypted under the new key. Rotation changes which key protects your data, not what we store or what it says.
No system is perfectly secure, and we do not claim otherwise.
Children
This app is a tool for adults. It is not directed to children and children should not use it. We do not knowingly collect personal information directly from a child. If you believe a child has provided us information, delete your account or contact us and we will remove it.
This is not medical advice
The app offers everyday parenting practice suggestions. It is not medical, psychological, or therapeutic advice, it does not assess or identify any condition, and it is not a substitute for a qualified professional.
A step you write yourself is yours. We did not write it, review it, or check it against anything, and the app says so on the screen where it appears. What the app does with it is measure it the same way it measures our own steps.
Changes
If we change this policy we will update the date above. The current version is always on this page and in Settings.
Contact
Questions or requests: [email protected]