Privacy policy
Effective November 11, 2026
The short version
- Your records stay on your phone. We don't receive them, and we can't see them.
- There's no account and no sign-in.
- Nothing leaves your phone unless you choose: a backup, a PDF, a spreadsheet, or, when it launches, Family Sync, which is end-to-end encrypted.
- No ads, no analytics, no tracking. We never sell or rent your data.
1. Who we are
HushKin is made by Zithron Inc., a company in Alberta, Canada ("we", "us"). This policy covers the HushKin app and this website, hushkin.app. For any privacy question, email support@hushkin.app.
2. What the app keeps, and where
Everything you put into HushKin is stored on your phone, in the app's own storage. That includes:
- your children's names, birth or due dates and profiles (such as allergies, blood type, pediatrician and emergency contacts);
- what you log: feeds, pumping, diapers, sleep, moods and notes, medication and anything else;
- your pregnancy record, visits, journal and checklist;
- moments, photos and videos (HushKin keeps its own copy, so they're safe if you delete them from your camera roll);
- check-ups, milestones you've ticked, mood check-ins, partner check-in notes, calendar events, money records and gifts;
- reminders and your settings.
There's no HushKin account and no sign-in. You can use the app without giving us your name or email.
3. What we never receive
We don't run a server that receives your records. We never receive your logs, photos, notes, your children's names or any health details.
- The app has no analytics, no crash reporting and no advertising. It doesn't use advertising IDs or track you across other apps or websites.
- We don't sell, rent or share your personal information, and we don't use it for advertising.
4. When information leaves your phone, by your choice
Information leaves your phone only when you do one of these things:
- Back up data. HushKin makes one file with your records, photos and videos and lets you save it where you choose, such as Files, iCloud Drive or Google Drive. With a password, the file is encrypted (AES-256). Without one, anyone who gets the file can read it. We never receive your backups.
- Share a PDF or CSV file. The pregnancy summary, a photobook, an Insights report or items you select go only where you send them through your phone's share sheet or printer.
- Open a link. Resources, support lines and milestone sources open official websites in your browser. Those websites see your visit as they would any other. HushKin sends nothing about you to them.
- Call a number. Tapping a phone number you saved, or a support line, opens your phone's dialler.
Reminders are scheduled on your phone. They don't go through any server of ours.
5. Family Sync (coming soon)
Family Sync isn't live yet. Today, nothing is sent anywhere, even if you try its test screen in Settings. When it launches, it will be optional and off until you turn it on, and it will work like this:
- End-to-end encrypted. Your records and photos are encrypted on your phone before they leave, and can only be unlocked on your family members' phones. The keys stay on those phones. The server, and we, can't read what you share.
- What the server can see: that a family group exists, how many phones are in it, when they sync and roughly how much data. Not names, dates, notes, medicines or photos.
- You choose who sees what. Family owners decide which children and categories each person can see, and that's enforced by encryption, not just hidden on screen. Reminders, pumping and wellbeing check-ins stay private unless you share them.
- Stored in your country: in the USA for US families, in Montreal for Canadian families and in London for UK families, with storage from our hosting providers. We'll name the exact providers and regions in this policy before Family Sync launches. Family Sync isn't offered in Nigeria yet.
- Turning it off stops sharing. You can delete your family's encrypted copy from the server, and your phone keeps everything.
Before Family Sync launches, we'll update this policy with the full details and tell you in the app.
6. Phone permissions, and why
| Permission | When HushKin asks | What it's for |
|---|---|---|
| Camera | When you take a photo or video in the app | Adding it to an entry or moment |
| Photos | When you choose photos or videos | Copying the ones you pick into HushKin |
| Notifications | When you set your first reminder | Reminders you set yourself. You can hide medicine, wellbeing and pregnancy details on the lock screen. |
| Face ID, fingerprint or passcode | Only if you turn on App lock with your phone's unlock | Unlocking HushKin. Your phone checks it; HushKin never receives your face or fingerprint. |
| Files | When you back up or restore | Saving and opening your backup file |
App lock hides HushKin's screens until it's unlocked; it doesn't encrypt your data. A HushKin PIN and its recovery code are kept only as scrambled codes (salted hashes) in your phone's secure storage, never in a backup.
7. This website and emails to us
- This website uses no cookies, no analytics and no trackers, and loads nothing from other companies. Its fonts are stored on the site itself.
- The site is hosted by Cloudflare. Like any web host, Cloudflare handles technical details such as your IP address to deliver pages and protect the site from attacks. We don't use them to identify or track you.
- If you email us, for support or to join the beta, we use your email address and what you write only to reply, to send your beta invite and to tell you about HushKin's launch. We keep it while we're helping you or while you're a beta tester, and delete it when you ask.
- Please don't send health details or photos of your children by email. We don't need them to help you.
8. Purchases (later)
HushKin doesn't sell anything yet. When Premium is offered, Apple's App Store or Google Play will handle payment. We'll receive only whether a subscription is active (through a subscription service that reports only whether a subscription is active), never your card details and never your children's information. We'll update this policy first.
9. Children's information
HushKin is for parents and carers. The app isn't directed at children, and we don't knowingly collect information from children. The information you enter about your children stays on your phone, and we don't receive it.
10. Your rights
Because your records are on your phone, you can see, change, export and delete them at any time, without asking us. For anything we do hold, such as an email you sent us, you can ask us to see it, correct it or delete it, and we'll answer within the time the law where you live requires.
- USA: state privacy laws, where they apply to us.
- Canada: the Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act and, in Quebec, Law 25.
- United Kingdom: the UK GDPR and the Data Protection Act 2018.
- Nigeria: the Nigeria Data Protection Act 2023.
If you're not happy with our answer, you can contact your local data protection regulator, such as the Office of the Privacy Commissioner of Canada, the UK Information Commissioner's Office or the Nigeria Data Protection Commission.
11. Deleting your information
- Settings, then Delete all data removes everything HushKin keeps on your phone, including its photos and videos.
- Uninstalling the app also removes it from your phone.
- Backups and files you saved or shared elsewhere are yours to delete there.
- To delete an email you sent us, write to support@hushkin.app.
12. Keeping it safe
- Your records are protected by your phone's own security, so a passcode on your phone matters.
- Backups can be encrypted with a password. Keep it somewhere safe: we can't recover it for you, because we never have it.
- App lock adds a screen lock inside HushKin. If you use a HushKin PIN, keep its recovery code safe too.
13. Changes to this policy
If we change this policy, we'll update the date at the top. For important changes, such as Family Sync launching, we'll tell you in the app before they apply.