Privacy Policy

Last updated: March 2026

What we collect

Tribu collects only what is needed to provide the service:

  • Account information — your email address and a hashed password. We never store your password in plain text.
  • Calendar data — events, people, custody patterns, shopping lists, and other content you create within the app.
  • Session tokens — a secure cookie to keep you logged in. These expire after 30 days of inactivity.

What we don't collect

  • No analytics or tracking scripts
  • No advertising identifiers
  • No location data
  • No contacts or phone data
  • No third-party cookies

How we store your data

Your data is stored in an SQLite database on our server. It is not shared with any third party. We do not use cloud database services — your data stays on infrastructure we control.

How we protect your data

  • All connections use HTTPS with TLS 1.2+
  • Passwords are hashed with bcrypt (12 rounds)
  • Session tokens use cryptographically secure random generation
  • HTTP security headers (HSTS, X-Frame-Options, CSP) are enforced
  • The database is backed up regularly

Sharing between households

Tribu lets you control event visibility between linked households. By default, kids' events are visible to all linked households. Parent events are private by default. You can change visibility on any event at any time.

Data deletion

You can delete your account and all associated data at any time by contacting us at hello@redd.ink. We will remove your account, events, and household data within 7 days of your request.

Changes to this policy

If we make material changes to this policy, we will notify you via email or an in-app notice. Continued use of Tribu after changes constitutes acceptance.

Contact

Questions about your data? Email us at hello@redd.ink.