Mom tracks it, Dad sees it. And Grandma, if you like.
A group is your family in the app: up to ten devices, no account, and each one sees exactly what you share. The key stays on your phones.
Who sees what: you decide.
When you invite someone, you tick what they may see: the diary, the moments with their pictures, the health area with weight, temperature, medication and vaccinations. Every area has its own key, so nobody can read more than they were given.
Read only is for Grandma and the daycare: they follow along but enter nothing. Areas can be added later without a new invitation, and rights can be taken back.
Inviting: a code, not an account.
If the person is next to you, your phone shows a QR code that is valid for ten minutes. If they live elsewhere, you send a link that is valid for 24 hours. Both carry the key, and the key never goes to a server, not even ours.
The device list shows who is in, who only reads, and when they last synced. Open invitations appear there too and can be withdrawn. Whoever founded the group names the devices; each one may rename itself later.
- Encrypted
- On the phone, before anything leaves it (AES-256-GCM). The service sees only ciphertext: no names, no times, no pictures.
- By itself
- When opening, when closing, 20 seconds after the last entry and every 15 minutes in the background. Pull down to fetch right away.
- Notice
- If someone over there logs something, a quiet notification says so, with their name. No constant buzzing.
- At the same time
- If you both start a timer, the app asks instead of stopping a clock. If a timer from the other phone is running, its name is on it.
- Pictures
- Travel encrypted and expire at the service once everyone has fetched them, after 30 days at the latest. “Pass on photos” can be switched off.
- Space
- Every device has one package, the app shows how full it is in percent. Usually it is the pictures.
- Leaving
- Remove a device, leave the group, dissolve the group: your entries stay on your phone.
And the server? Understands nothing.
It carries packages it cannot open, under identifiers that are random. It does not know who you are and cannot derive it from the data. Even the names of your devices travel encrypted.
What that means in detail is in the privacy policy, section 3. In short: we could not read your entries even if someone forced us to.