Built like it's guarding something precious.

Logi Tot holds some of the most personal information a family has — the daily rhythms of a child. We treat that as an engineering responsibility, not a marketing line. This page explains, in plain language, how the protection works.

Encryption

• On-device encryption — sensitive fields of your child's records are encrypted on your device (AES-256-GCM) before upload.
• TLS 1.2 or higher for everything in transit and encryption at rest on our servers.
• AI features run through our own secure proxy — API keys never live on your phone, and our AI provider (OpenAI) never receives advertising identifiers or trains on your data.

Access control

• Family Circle roles: you decide exactly who sees what — owner, admin, caregiver, or view-only. Invites are code-based and revocable.
• Biometric app lock (Face ID / fingerprint) on supported devices.
• Row-level security in our database: your family's data is technically isolated from everyone else's.

What we don't do

• No advertising SDKs. No trackers. No selling data — ever.
• No use of your child's data to train third-party AI models.
• No dark patterns around deletion: removing your data is as easy as adding it.

Your controls

Export your data as a PDF report or CSV any time. Delete a single record, a child profile, or your entire account — in the app or via logitot.com/delete-account. Details of what we store and why live in the Privacy Policy.

Found a vulnerability?

We welcome responsible disclosure: hello@logitot.com. We aim to acknowledge within 2 business days and keep you posted through the fix.