SmartHarmony AI › LittleRhythm › Privacy

LittleRhythm — Privacy Policy

Effective date: 23 July 2026 · Provider: SmartHarmony AI LLC ("we", "us") · Contact: support@smartharmonyai.com

The short version

LittleRhythm is private by default. Everything you log about your child — sleep, feeding, diapers, pumping, growth, health notes, medications, milestones, and activities — is stored on your own device(s), in an encrypted database. We do not run an account system, we do not collect your logs on a server of ours, and we never sell your data or use advertising or cross-app tracking SDKs.

A few optional features can send limited information off the device — AI insights, voice logging, caregiver sync, crash reporting, and subscriptions. They are off by default (except the store's own purchase processing) and you control them. Where data leaves the device it is minimized, pseudonymized, and/or end-to-end encrypted, as described below.

Who we are

LittleRhythm is developed and operated by SmartHarmony AI LLC. For any privacy question or request, contact support@smartharmonyai.com.

What we store, and where

• On your device. Your care logs live in an encrypted SQLite database (SQLCipher) on your phone. The database key is generated on-device and held in the platform secure enclave (iOS Keychain / Android Keystore), accessible only when your device is unlocked. We do not receive or store your logs on a server of ours.
• No LittleRhythm account. You don't create an account or give us your name or email to use the app. The only time we ever receive an email address is if you type one into Report a problem so we can reply — optional even then. We never ask for your name at all.
• Backups and exports are yours. You can create a device backup or an encrypted export file that you own and control. We do not hold your backups.
• Caregiver sync (if you enable it) stores encrypted copies of your care data in a cloud folder you choose (see the dedicated section below). We never hold or can read them.

Optional features that transmit data (all opt-in, off by default)

1. AI insights

If you turn this on (part of LittleRhythm Pro), the app sends a limited, pseudonymized summary of your numbers — ages in weeks, counts, and intervals — to phrase your insights in plain language. The request does not include names, photos, email addresses, free-text health notes, medication names, exact birth dates, or unique device/subscription identifiers. Every insight is computed on your device first; the AI only rephrases it and never makes a medical decision.

The request is sent over TLS to our LLM broker (operated by SmartHarmony AI and delivered through Cloudflare), which authenticates your subscription with a short-lived token and forwards the request to our AI provider, Anthropic (Claude models). The broker holds the provider key; the app never does. The request is configured for zero data retention and is not used to train models. You can turn AI insights off at any time.

2. Voice logging

If you choose voice logging, LittleRhythm requests temporary access to your device's microphone to recognize the command you speak. It is activated only when you initiate it (tap the voice button); a transcription is shown on screen and the app then acts on it.

• Speech-to-text is performed by your device's operating-system speech recognizer (Apple on iOS, Google on Android). Depending on your device and OS settings, this may be processed on-device or by that operating-system provider, under Apple's or Google's own privacy terms. LittleRhythm does not intentionally retain audio recordings after the recognition request completes.
• Turning the transcript into a log entry happens on your device — first with offline rules, then, where available, with an on-device language model (Apple Foundation Models on iOS, Gemini Nano on Android); nothing leaves the device in this step.
• Optional cloud assist. For phrases the on-device path can't handle, and only if you are a subscriber and have consented, the transcript text (no audio, no identifiers) may be sent to our AI broker and Anthropic under the same zero-retention terms as AI insights. This is never the default.

3. Caregiver sync (LittleRhythm Pro)

Caregiver sync lets the adults in one household (for example two co-parents, or a parent and a nanny) keep the same care log across their phones — including across iPhone and Android. It is optional and off until you set it up, and it is built so that we never operate a sync server and never hold or can read your data.

• What leaves the phone. Only end-to-end encrypted blobs (AES-256-GCM, a fresh key stream per file). Each blob is an encrypted copy of your care-log records. File names are opaque; no baby names, dates, notes, or other readable metadata are exposed.
• Where they are stored. In a folder you choose using your phone's own file picker (Android Storage Access Framework; iOS document picker / Files). That folder is backed by your own storage provider — e.g. iCloud Drive, Google Drive, Dropbox, OneDrive, Nextcloud, or local storage. The account is yours, not ours, and we ship no storage-provider SDKs. Your chosen provider stores only ciphertext and can see file names, sizes, and timestamps — never the contents.
• Whether it is stored temporarily or permanently. The encrypted blobs persist in your chosen folder until they are deleted or compacted. The app periodically writes a fresh encrypted snapshot and deletes older incremental files to keep the folder small.
• Which server or cloud handles it. No SmartHarmony AI server is involved in sync. The only party that stores anything is the cloud provider you selected, under your account and their privacy policy.
• What identifiers are created. A random household ID, a per-device random ID, and a small key-verification value. These are random and pseudonymous — they contain no name, email, or contact detail, and they are not sent to us.
• The encryption key. A random 256-bit household key is generated on one device and shared to the other device by scanning a QR code screen-to-camera (or, for remote setup, a one-time spoken passphrase). The key never travels over any network or through any cloud, and we never receive it. It is stored in the device secure enclave alongside the database key.
• What metadata is visible to SmartHarmony AI. None. Because sync flows through your own storage provider and everything is encrypted with a key only your household holds, we cannot see your data, file names, sizes, or that a sync even occurred.
• How a caregiver disconnects and deletes synced data. To remove a caregiver, rotate the household key in the app — the app writes a fresh snapshot under the new key and deletes the old blobs, so previously shared files become unreadable to the removed device. Any participant can also disable sync, and can delete the shared folder from their own storage provider. "Delete all my data" (below) removes the local database and keys on that phone.
• Is this an account? There is no LittleRhythm account — no email, password, or profile on our servers. A "household" is only a shared key held on your devices, not an identity we hold.

Sync runs strictly after your entry is saved locally and never blocks logging; if the folder is unreachable, entries stay "pending" and sync later. Delivery is near-real-time (seconds to minutes, depending on your storage provider).

4. Subscriptions

Purchases are processed by Apple and Google. We use RevenueCat to confirm your subscription status; it receives a randomly-generated pseudonymous identifier and your purchase details — not your care logs.

5. Crash reporting

If you opt in, the app may send diagnostic crash reports, with personal information scrubbed out, to help us fix bugs. Off by default. These go to our own self-hosted GlitchTip instance — not to a third-party crash-reporting service. Every event is rebuilt from an allow-list before it leaves the device, so it carries a message, a file basename, the app and OS version, and nothing about you or your child.

6. Contacting support (Report a problem)

Nothing is sent unless you fill in the form and tap send. When you do, we receive:

• Your description — the words you type.
• An optional reply email — only if you supply one. It is never pre-filled and never read from your device's accounts. Without it we simply cannot reply.
• Optional screenshots — off by default, never captured automatically. You attach them yourself, preview them, and can remove any before sending. Maximum five.
• Your device model, OS version and app version, so we can reproduce the problem.

We do not ask for your name. The form has no name field: a support reply needs a reply channel, not a legal name — and on a child-care product the name a parent types is as often the child's as their own. Your care logs are never attached.

A screenshot of the app may show your baby's name, dates or health notes. That is why they are optional, off by default, and previewed before sending — please check each one first.

7. Update / feature manifest

The app fetches a small, read-only, signed configuration file over HTTPS (via Cloudflare) to enable or disable features and deliver content updates. It contains no personal data and sends none about you.

Notifications

Reminders and nudges are scheduled locally on your device. LittleRhythm does not use remote push notifications and does not create a push token or send your device an identifier for messaging.

Who processes data for us

We share personal data only with the providers below, only for the purpose shown, and only when the related feature is used. Each handles data under its own privacy policy and only on our instructions.

What we do NOT do

• We do not use advertising SDKs or SDKs for cross-app behavioural tracking. We use a small set of service providers for subscriptions, optional AI, optional crash reporting, and the features above — as listed.
• No precise location collection.
• No selling or renting of personal information.
• No collection of your care logs on our servers.

Children's information

LittleRhythm is intended for parents and caregivers (adults) to record information about the children in their care. Any information about a child is entered by you and stored on your device (and, if you enable caregiver sync, in your own encrypted cloud folder). The app is not directed to children and does not knowingly collect personal information directly from children. You control that information and can delete it at any time.

Your choices and controls

• Opt-in toggles for AI insights, voice logging, crash reporting, caregiver sync, and app-lock, in More → Privacy & data → Privacy.
• Export your data to an encrypted file you own.
• Delete all my data — wipes the on-device database, timers, and profile, and purges the encryption keys, which also renders any residual encrypted copies (including platform backups and sync blobs written with the old key) permanently unreadable.
• Disconnect / rotate sync — remove a caregiver by rotating the household key, disable sync, and delete the shared folder from your storage provider.
• Biometric app lock (Face ID / Touch ID / passcode) is available.

Data retention

Security

• Encryption at rest on the device: the care-log database is encrypted with SQLCipher, keyed from a secret held in the device secure enclave (Keychain / Keystore) and available only when the device is unlocked.
• Encryption in transit (HTTPS/TLS) for the optional network features.
• End-to-end encryption for caregiver sync (AES-256-GCM), with a key that never leaves your household.
• Optional biometric / passcode app lock.

No method of storage or transmission is completely secure, but we design LittleRhythm to keep your data on your devices and to minimize and protect anything that leaves them.

International users

Because your data stays on your devices (and, for sync, in the storage account you choose), it resides wherever those are. The optional AI feature processes pseudonymized requests through our broker and Anthropic's infrastructure; subscription processing is handled by Apple, Google, and RevenueCat in their respective regions.

Changes to this policy

If we change how the app handles data, we'll update this page and its effective date. Material changes will be surfaced in the app.

Contact

Questions or requests (including data-deletion help): support@smartharmonyai.com.