Trust and privacy
We preserve their voice. We do not analyze it.
Tiny Treasures keeps your family's voices for your child. This page is the whole answer to whether you can trust us with them, including the parts that are limits rather than features. It is written for the parent who is suspicious of apps like this one. That instinct is right, and this page is our answer to it.
Three kinds of statement appear below, and each block is labeled. Enforced in code means the app and our servers are built so the thing cannot happen through anything we ship. Our promise means we could technically do otherwise and commit in writing not to. Outside our walls means it depends on a company we rely on, like Apple or our phone carrier. A privacy page that skips this distinction is asking you to trust the page.
The limits, first
Most privacy pages open with reassurance. Here is the other part, the part that usually goes unsaid.
Tiny Treasures is not end-to-end encrypted. Your recordings are encrypted on the way to our servers and fetched back through short-lived signed links, but our systems hold the keys, so our storage can read what it stores. Some apps in your life are zero-knowledge. This one is not, and we will not use those words. If you ever see them applied to Tiny Treasures, someone else wrote it and it is wrong.
What stops us from listening, analyzing, or selling is not mathematics. It is the code we ship, which contains no transcription, no analysis, and no advertising, and a promise made in writing here and in our privacy policy. We think a promise you can check beats a claim that sounds stronger than it is.
Two more limits, so you have all of them in one place. Our iPhone app contains no analytics or advertising SDK, but this website uses Google Analytics and Microsoft Clarity to understand visits and how public pages are used. If you run a content blocker, you may see those requests on this very page. And when family uses the phone line, the call passes through our phone carrier the way every phone call does, and the carrier keeps its own copy of a voicemail under its own terms.
If those limits are acceptable to you, everything below is what you get in return.
Does Tiny Treasures transcribe or listen to recordings?
Enforced in codeNo. Tiny Treasures never transcribes a recording, never runs speech to text, and never creates a voiceprint or analyzes anyone's voice. There is no speech recognition code in the app and no transcription service on our servers. When a family member's message is shared, the only thing that happens to the audio is that it plays.
Our servers store your recordings and give them back. They never decode, inspect, or analyze the audio. The only thing the server ever reads about a recording is its size.
When a grandparent calls the family line, we ask our phone provider for the raw recording and store it. We do not ask for a transcript, and we never receive one.
If you record through Siri or CarPlay, Apple handles your spoken request the way Siri always does, under Apple's privacy policy. Outside our walls What reaches Tiny Treasures is your actual recording and nothing else, and the app is built so it has nowhere to put a transcript even if one were offered.
We say never rather than cannot, on purpose. Nothing but the code we ship and this promise prevents some future version from adding analysis. That is exactly why this page is public and dated, where you can hold us to it.
Does Tiny Treasures show ads or sell family data?
Our promiseNo ads, and no. We show no advertising, run no advertising SDK, and we do not sell family data or use it for advertising. The same promise is in our privacy policy, in writing.
The iPhone app contains exactly two third-party components: RevenueCat, which validates purchases, and Google Sign-In. No ad SDK, no analytics SDK, no advertising identifier, and no tracking permission prompt, because there is nothing to ask permission for. Enforced in code
The app sends us a small set of anonymous usage events, like a message was sealed, keyed to a random install ID rather than to you. No names, no recordings, no message words. You can turn it off in Settings.
Your family's content goes only to the services that store and deliver it for you: hosting, our database, media storage, the phone line carrier, and email delivery. It is encrypted on the way and fetched through short-lived signed links, and it never goes to any advertising or analytics company.
Purchases are processed by Apple or Google and validated through RevenueCat, which receives your account ID and, where your sign-in provider shares them, your email and name. Never your child's name, and never anything inside your capsule.
One honest asterisk, the same one from the top of this page: this website, not the app, uses Google Analytics to count visits and Microsoft Clarity for heatmaps and session replays on public pages. Clarity never loads on sign-in, invitation, gift-code, claim, purchase thank-you, or contributor pages. Neither service receives anything from inside a family capsule.
Who can hear each kind of memory
Enforced in codeThe rules below are enforced on our servers, not just in the app, and our tests prove the refusals, not only the permissions. In the table, Everything means a person can play and read the memory. Only that it exists means they can see that a message was left, by whom and on what day and how long it is, but can never read or hear it. Nothing means they cannot see it at all.
| The memory | The author | The parents | Invited family | Your child, after opening | Tiny Treasures (technically) |
|---|---|---|---|---|---|
| A message shared with the family | Everything | Everything | Everything | Everything | Everything |
| A message kept private | Everything | Only that it exists | Only that it exists | Everything | Everything |
| Your child's own voice (treasures) | Everything | Everything | Everything | Everything | Everything |
| A phone-line voicemail, before a parent shares it | The caller has no account and no access | Everything | Nothing | Everything | Everything |
A message shared with the family
When an author chooses to share a message, everyone in the capsule can hear it: the parents, invited family, and your child both before and after opening. Sharing means playback of the recording, nothing more. It is never transcribed and never analyzed.
A message you keep private
A message you keep private can be played by exactly two people: you, and your child after they open their capsule. Everyone else in the family, the other parent included, sees only that you left a message that day, how long it is, and whether it has a photo. If anyone else asks our servers for the recording itself, the server answers as if it did not exist.
Your child's own voice
Treasures, the recordings of your child's own words and sounds, are shared with the whole family by design. Every member can hear all of them. That is what they are for.
A voicemail left on the family phone line
A caller who dials the family line never chose a privacy setting, so those messages arrive private and the parents look after them. A parent can listen, share one with the family, or delete one. Until a parent shares it, other family members do not see that it exists, and after sharing, ordinary members hear the message without the caller's name attached.
What Tiny Treasures itself can see
Technically, everything. Our database and storage hold your family's messages in a form we can read, because Tiny Treasures is not zero-knowledge. What stands between your family and us: there is no listening, transcription, or analysis code anywhere in the system, and not looking is a written commitment of this page and our privacy policy. Technically yes, in practice no, and we would rather write that sentence than pretend otherwise.
If you remove someone
Removing a family member deletes their messages, including ones nobody ever read. There is no review step. Two honest notes belong here. Nothing we do can remove copies already saved on that person's own phone. And when you remove a phone-line caller, we delete their name, their number, and everything they sent from Tiny Treasures; our phone carrier keeps its own copy of call recordings under its own terms, the same limit named at the top of this page. Outside our walls
What happens when your child opens their capsule
Enforced in codeYour child's capsule opens when your child opens it, not on a date. There are no unlock dates anywhere in Tiny Treasures, nothing counts down, and nothing opens on a schedule. When the moment comes and your child opens their capsule, everything opens at once: the messages the family shared along the way and the ones each author kept private. Until that moment, a private message stays exactly as private as the day it was sealed.
How do I get our recordings out?
Enforced in codeExport builds one chronological audio file on your phone: your own recorded messages, in order, woven together with your child's treasures that are on your device. It runs entirely on your phone, is free, needs no account, and never touches the network, so it cannot fail because a server is down.
Two things do not come out in that file, and we would rather tell you here than have you find out later. Photos are not in it, and written notes are not in it. It is an audio file, so it carries voices; a written note that has a voice memo attached contributes its recording. And it carries your own messages plus your child's treasures, not other family members' messages, so each person's export is their own voice and the child's.
If a shared treasure has not finished arriving on your phone, export skips it rather than reaching out to fetch it, and tells you so.
What happens if Tiny Treasures ever shuts down?
Here is the honest version, which is weaker than we would like, and true.
Export does not depend on us. It runs on your phone, offline, free, with no account, so the recordings and treasures already on your device are yours whatever happens to the company. You can make a copy outside the app today and any day, and we suggest you do. A file in your own storage beats a promise from any company, ours included.
What we cannot honestly promise is a guaranteed notice period or a guaranteed migration path, because a promise like that binds a future we do not control, and this page does not print promises we cannot keep. What we can say is that keeping things is the entire reason this product exists, and that export was built to need nothing from us on purpose.
Photos and written notes are not in the export file, so if those matter to you, keep your own copies of them as well.
How to hold us to this
This page is dated, and when a fact on it changes, the date changes with it. The legal version of these promises lives in our privacy policy, which is the document that binds us. If you find a sentence on this page that the product does not live up to, tell us, and we will fix the product or the sentence, in that order of preference.
Questions parents ask us
Is Tiny Treasures end-to-end encrypted?
No, and we will not describe it that way. Recordings are encrypted on the way to our servers and fetched back through short-lived signed links, but our systems hold the keys. What protects your family from analysis or advertising is the code we ship and a written promise, not zero-knowledge encryption, and we would rather say that plainly than use a phrase that sounds stronger than the truth.
Does Tiny Treasures transcribe or analyze recordings?
Never. There is no speech to text, no voice analysis, and no voice biometrics anywhere in Tiny Treasures. A shared message plays back the voice that recorded it, and that is all that ever happens to the audio.
Can Tiny Treasures staff listen to my family's messages?
Technically yes, in practice no. Our storage can read what it holds, because Tiny Treasures is not zero-knowledge. What stands in the way is that there is no listening, transcription, or analysis code anywhere in the system, and that not looking is a written commitment of this page and our privacy policy. We put that in writing rather than pretend otherwise.
Who can hear a message I keep private?
Exactly two people: you, and your child after they open their capsule. Everyone else in the family, the other parent included, sees only that you left a message that day, how long it is, and whether it has a photo. If anyone else asks our servers for the recording itself, the server answers as if it did not exist.
Does Tiny Treasures show ads or sell family data?
No ads, and no. Tiny Treasures shows no advertising, contains no advertising SDK, and does not sell family data or use it for advertising. The iPhone app contains no analytics or advertising SDK at all. This website, separately, uses Google Analytics to count visits and Microsoft Clarity on public pages to understand how those pages are used.
What is actually in the export file?
One chronological audio file, built on your phone: your own recorded messages, in order, together with your child's treasures that are on your device. Photos and written notes are not in it, and other family members' messages are not in it, so each person's export is their own voice and the child's. It is free, needs no account, and never touches the network.
What happens to our recordings if Tiny Treasures shuts down?
Export does not depend on us. It runs on your phone, offline, free, with no account, so the recordings and treasures already on your device are yours whatever happens to the company. We cannot honestly promise a guaranteed notice period or migration path, because that would bind a future we do not control. Make a copy outside the app today; a file in your own storage beats a promise from any company, ours included.
Is a voicemail left on the family phone line transcribed?
No. We ask our phone provider for the raw recording and store it, and we never ask for or receive a transcript. One honest limit: the call passes through our phone carrier the way every phone call does, and the carrier keeps its own copy under its own terms.
What happens when someone is removed from the family?
Removing a family member deletes their messages, including ones nobody ever read, with no review step. Two honest notes: nothing we do can remove copies already saved on that person's own phone, and when you remove a phone-line caller we delete their name, number and everything they sent from Tiny Treasures, while our phone carrier keeps its own copy of call recordings under its own terms.