Privacy Policy
Tiny Advocate is a calm organizer for parents working through IEPs and 504 plans. You are trusting us with some of your family's most personal papers, and we take that seriously. This policy explains, in plain words, what we collect, why, and the choices you have.
Tiny Advocate is operated by Laura Endicott, doing business as Tiny Advocate, a sole proprietor based in Chesapeake, Virginia, USA ("we," "us"). Questions? Email help@tinyadvocate.com.
The short version
- We never sell your data, and we don't use it for advertising.
- Your child's records are yours. You can download or delete them, and you can ask us to delete your whole account at any time.
- Tiny Advocate is for adults 18 and older. Information about children is entered by their parent or guardian.
What we collect
- Account information: your name, email address, and password (stored in protected, hashed form).
- What you add: documents and notes you upload, such as IEPs, 504 plans, evaluations, progress reports, school emails, meeting notes, dates, and meeting recordings. These can include sensitive details about your child, like health, disability, and school information.
- Payment information: subscriptions are billed through Stripe. Stripe handles your card details; we never see or store your full card number. We receive limited details like your billing name, the last four digits of your card, and your subscription status.
- Basic technical information: things like browser type, device type, and logs needed to keep the service working and secure.
Meeting recordings and transcription
When you add a meeting recording, it is transcribed locally, which means the audio is turned into text without being sent to an outside transcription company. Please follow your state's recording laws and your school's policies, and let others in the meeting know when you are recording.
How we use your information
- To run Tiny Advocate: storing, organizing, and showing your documents, dates, and notes back to you.
- To manage your account and subscription and send you important service messages (like billing receipts or security notices).
- To answer you when you contact us for help.
- To keep the service safe, fix problems, and prevent misuse.
We do not look at the contents of your documents except when you ask us to help with a specific problem, or when we are legally required to.
What we never do
- We do not sell, rent, or trade your personal information or your child's information.
- We do not use your documents for advertising or to build marketing profiles.
- We do not share your documents with your child's school or anyone else unless you choose to.
Who we share with
We use a small number of trusted service providers to run Tiny Advocate, such as our payment processor (Stripe), and providers for web hosting, data storage, and email. They may only use your information to provide services to us. We may also share information if the law requires it, to protect someone's safety, or if Tiny Advocate is ever transferred to a new owner (and if that happens, we will tell you first and this policy will continue to protect your information).
Children's privacy (COPPA)
Tiny Advocate is made for parents and guardians and is only for adults 18 and older. It is not directed to children, and children should not create accounts or use the service. Information about a child is added by their parent or guardian, who controls it and can delete it at any time. If we learn that a child under 13 has given us personal information directly, we will delete it. If you think this has happened, email help@tinyadvocate.com.
About HIPAA and FERPA
Tiny Advocate is a private tool for parents. We are not a healthcare provider or a school, and we do not claim to be compliant with HIPAA or FERPA. Those laws generally apply to healthcare providers and schools, not to apps parents choose to use. Once you upload a document to Tiny Advocate, it is protected by this policy and our security practices.
How we protect your information
We use reasonable safeguards like encrypted connections (HTTPS), access controls, and limiting who can reach stored data. No online service can promise perfect security, so please use a strong, unique password. If we ever learn of a breach affecting your information, we will tell you as the law requires.
Keeping and deleting your data
We keep your information while your account is open. You can delete individual documents in the app at any time. To delete your whole account and everything in it, email help@tinyadvocate.com from your account email address. We will delete your data within 30 days, except for limited records we must keep by law (like billing records), and any backup copies will be removed as they cycle out.
Your choices and rights
You can ask to see, correct, download, or delete your personal information. Depending on where you live, including under Virginia's Consumer Data Protection Act, you may have additional rights. Just email help@tinyadvocate.com and we'll help. We will never treat you differently for asking.
Cookies
We use only the cookies needed to keep you signed in and keep the service working. We don't use advertising or tracking cookies.
Changes to this policy
If we make meaningful changes, we'll update the date at the top and let you know by email or in the app before the changes take effect.
Contact
Laura Endicott, doing business as Tiny Advocate
Chesapeake, Virginia, USA
help@tinyadvocate.com