Tended Systems · Poppet for iPhone

Privacy policy

Your family’s records belong to your family. Poppet stores them on your device and, when you turn on family sync, in your own Google Drive.

Last updated: October 29, 2026.

Who provides Poppet

Poppet is provided by Tended Systems LLC. For privacy questions or requests, contact eugene@tendedsystems.com. This policy covers the Poppet iPhone app and this website.

Records you enter

Poppet stores the profiles, activity records, measurements, notes, and other information you enter or import. These may include sensitive information about children and caregivers. Records are stored in the app’s files on your device. Poppet does not operate a server that receives your family log.

Google sign-in and Drive access

Google sign-in is optional and enables family sync. Poppet receives your Google account email address to show which account is connected. It also receives access and refresh tokens so it can make requests to Google on your behalf. Tokens are kept in the device’s keychain.

Poppet requests the limited Google Drive drive.file permission, together with openid and email for sign-in. This permits access to files created by Poppet or explicitly authorized for Poppet; it does not grant general access to every file in your Drive.

Poppet uses that access to create or connect to a family folder, list and read family log files, upload this device’s shared records, and invite people you choose by granting access to the folder. Poppet sends these requests directly from your device to Google. Google processes account and Drive data under its own privacy policy.

Sharing with your family

People with access to the family folder can read its shared records. An invitation gives the recipient permission to write to the folder too. Each connected device downloads local copies of shared records. Records designated private to a caregiver are stored separately on that device and excluded from Drive sync.

Removing someone’s folder access stops future authorized Drive access, but cannot erase copies they already downloaded. Signing out or stopping sync does not delete local records or the Drive folder. Use one family per device: connecting an existing installation to another folder can carry its existing shared records into that folder.

How we use and disclose data

Google account and Drive data are used only to provide the sign-in and family-sync features described here. We do not sell that data, use it for advertising, or use it to train AI models. Poppet does not include advertising or analytics SDKs in the app. We do not receive your family log through normal app operation.

Poppet’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Retention, deletion, and revoking access

Your records remain on your devices and in Drive until you remove them. Editing or deleting an entry in Poppet writes a new change to an append-only log; earlier versions may remain in the underlying files. An in-app deletion is not secure erasure of those files.

To stop future sync, sign out or choose “Stop syncing on this phone” in Poppet. To revoke Google authorization, remove Poppet under your Google Account’s third-party connections. To remove cloud copies, delete the Poppet folder in Google Drive and empty Drive’s trash. To remove local copies, delete the app and its data from each device and remove any exported files or backups you control. Other family members must remove their own copies. Google and device-backup providers may retain data according to their policies.

Website and support

This website is hosted by Vercel. Visiting it sends ordinary request information, such as your IP address, browser information, and requested pages, to the hosting provider for delivery and operation. The site does not ask for access to your family log. If you email support, we receive the message and any information you choose to include; avoid sending sensitive family records. We use support correspondence to respond to your request and retain it as needed to provide support.

Children and security

Poppet is intended for adults recording information for their families, rather than for children to create accounts. Adults choose what to record and whom to invite. Google requests use HTTPS and authentication tokens are kept in the keychain. Local records are not separately encrypted by Poppet; protect your devices, Google account, folder permissions, and backups.

Changes and contact

We will update this page when our practices change and revise the date above. Questions about access, correction, or deletion can be sent to eugene@tendedsystems.com. Because we do not host the family log, we cannot retrieve or erase the copies held in your Drive or on your devices for you.