Privacy Policy
Last updated: September 2, 2026
It Takes A Village (“ITAV,” “we,” “us”) is operated by Mom Coded LLC. This policy explains what information the ITAV iOS and Android apps and this website collect, how we use it, and your choices. By creating an account or using ITAV, you agree to this policy and our Terms of Use.
This is an adult app
ITAV is a childcare coordination tool for parents, family, and caregivers. It is not a children’s app, is not directed at children under 13, and is not intended for anyone under 18 to create an account or use as a user. Children do not sign in. Adults may record limited information about children in their care so the village can plan coverage. See Children’s information.
Information we collect
We collect information you provide and information needed to run the service:
- Account. Email address, password (stored hashed by our auth provider), first and last name, and optional profile fields such as an avatar URL if one is set.
- Village and calendar content. Villages you create or join, member roles and tags, groups, invite links, events (including recurrence and coverage responses), comments, templates, and in-app notifications and preferences.
- Children’s records entered by adults. Name, date of birth, and optional notes, associated with a village so events can name who needs coverage. See below.
- Device and notifications. Push notification tokens (APNs on iOS, FCM on Android), notification permission state, and badge counts so we can deliver alerts you enable.
- Support. Messages you send through the in-app contact form or this website’s feedback form, including the email you provide.
- Technical logs. Limited server and auth logs (for example timestamps, error diagnostics) needed to operate, secure, and debug the service. We do not use third-party advertising or analytics SDKs in the app.
If you use “add to calendar” on a device, event details are written to that device’s calendar app at your request. We do not read your full device calendar.
Children’s information
We do not knowingly collect personal information directly from children. Accounts are for adults. When you add a child to a village, you are asking us to store information you enter (typically a name, birthday, and notes) so other authorized village members can coordinate care.
- Only enter information you are authorized to share with that village.
- Village members who can see events or the village directory may see those child records, according to village roles and privacy settings you control in the app.
- If you believe we have information about a child that should not be stored, delete the child record in the app or request deletion of the related account.
- If we learn that someone under 18 has created an account, we will close that account and delete associated data as described in this policy.
How we use information
- Provide ITAV: accounts, villages, calendar, invites, coverage responses, and settings.
- Send transactional email (for example account verification, password reset, notification emails you enable) and push notifications you enable.
- Respond to support and deletion requests.
- Secure the service (abuse prevention, debugging, and enforcing our Terms).
We do not sell your personal information. We do not use your village or children’s data for advertising.
Processors and sharing
We share information only with service providers that process it on our instructions to run ITAV, or when required by law:
- Supabase. Database, authentication, realtime updates, and edge functions that send email and push.
- Resend. Transactional email delivery.
- Apple Push Notification service and Google Firebase Cloud Messaging. Delivery of push notifications on iOS and Android.
- Netlify. Hosting for this marketing and legal website (not the in-app calendar data).
Village content is visible to other members of that village according to roles and privacy settings. Invite links let people request to join; leaders confirm or reject requests.
Retention
We keep account and village data until you delete your account or we close the account. After deletion, we remove associated personal data from the live service, except limited records we may retain for a short period in backups or logs, or where we must keep something to comply with law, resolve disputes, or prevent abuse. Push tokens are removed when you sign out, disable notifications, or the token is replaced.
Security
We use industry-standard practices including encrypted transport (HTTPS), hashed passwords via our auth provider, and row-level access controls in the database so users only see villages they belong to. No method of transmission or storage is 100% secure.
Your rights and choices
- Update your name and notification preferences in Settings.
- Delete child records, events, or leave a village from the corresponding screens when you have permission.
- Delete your account from Settings, or follow account and data deletion.
- Depending on where you live (including the EEA, UK, and some U.S. states), you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Contact us using the options below and we will respond as required by applicable law.
International processing
We and our processors may process information in the United States and other countries. If you use ITAV from another country, you understand that information may be transferred to and stored where our providers operate.
Do Not Track and tracking
The app does not use third-party advertising trackers and does not use data for tracking across other companies’ apps and websites as Apple and Google define that term. This website may use only what the host needs to serve pages and (if you submit it) the contact form.
Changes
We may update this policy. The “Last updated” date will change. Continued use after an update means you accept the revised policy. Material changes may also be noted in the app or by email.
Contact
Privacy questions: use the in-app Contact form, our support page, or the feedback form on the homepage. Account deletion instructions: request-account-deletion.