Privacy Policy

Last updated: 22 September 2026

Little Villi helps you write down what someone needs to know to look after your child, and share it — briefly, and only in part — with a caregiver.

This policy explains what we collect, where it goes, and what we do not do with it. It is written to be read, not to be survived.

Who we are

Little Villi is operated from the United States and is available to users in the United States only.

Questions about anything here: privacy@littlevilli.com

What we collect

Your account. Your email address and a securely hashed password. We never store your password itself.

Your child's Care File. Whatever you choose to put in it — name, date of birth, allergies, routines, medical notes, emergency contacts, photos. You decide what goes in; none of it is required to use the app.

Your conversations with Villi. The messages you send and Villi's replies.

Technical records. When a caregiver opens a link you shared, we record that it happened and when. We keep an internal log of actions taken in the app — what happened and when, never the contents of your messages.

We do not use analytics or advertising trackers, and we do not sell anything to anyone.

Where your data goes

Anthropic

Villi is powered by AI. To answer you and build your Care File, Anthropic — the company behind Claude — processes:

• what you type in your conversations with Villi
• photos you attach
• your child's Care File details, including their name, age, allergies and routines

Anthropic processes this to generate Villi's replies. Under their commercial API terms, they do not use it to train their models.

This also applies when you share a Care File. When a caregiver opens a Loop you have shared, Villi answers their questions too — using the sections you chose to share, and nothing else.

You choose whether this happens. Before Villi sends anything, we ask you explicitly. You can withdraw that permission at any time in Settings. If you do, Villi's chat stops working everywhere — including any Loop a caregiver is currently using — and your Care File stays exactly as it is.

Withdrawing stops future processing. It cannot recall what was already sent.

Our service providers

We use these companies to run the service. They hold data on our behalf and are not permitted to use it for their own purposes.

Nobody else

We do not sell your data. We do not share it with advertisers. We do not give it to anyone else except where the law requires it.

How your data is protected

In transit. Everything between the app and our servers is encrypted with TLS 1.3.

At rest. The whole database is encrypted. On top of that, the most sensitive fields are individually encrypted with a key unique to your household — door and alarm codes, wifi passwords, insurance identifiers, medical notes, your conversations with Villi, and your photos. These stay encrypted in the database and are readable only by the parts of the app that need them. Someone with direct access to the database could not read them.

Separation between families. The database enforces, at its own level, that one household's data cannot be read from another's. This is not left to the app's code to get right.

Your account. Passwords are hashed with bcrypt. Two-factor authentication is supported.

Sharing a Care File: Loops

A Loop is a time-limited, permission-controlled way to share part of a Care File with a caregiver.

• You choose which sections are shared. Anything you do not choose is not merely hidden — it is never sent to the caregiver's device.
• Caregivers do not have accounts. They open a link. Anyone holding that link can open it, so treat it like a key: send it to the person you mean, and end the Loop when you are done.
• Loops expire, and you can end one at any time.
• Some things are never shared, whatever you choose: door codes, alarm codes, wifi passwords and similar are stripped before a caregiver sees anything. Your private label for a Loop — the name you gave it — is never shown to the caregiver.
• We record that a caregiver opened a Loop, and when.

How long we keep things

Your Care File stays until you delete it or close your account. It is your record; we do not expire it for you.

Your conversations with Villi are kept so the app can show you your history and so Villi can follow a conversation.

A caregiver's chat within a Loop is kept for the life of that Loop and is not readable once the Loop ends.

Internal logs of actions — what happened and when, never message contents — are kept for operational and security purposes.

If you close your account, we delete your data. Encrypted backups may retain copies for a short period before they age out.

Your choices

• See and change everything. The Care File is fully editable in the app.
• Turn AI off. Settings, at any time. The app keeps working; Villi's chat does not.
• End a Loop at any time.
• Delete your account, which deletes your data.
• Ask us anything at privacy@littlevilli.com.

If you are a California resident, you have rights under the CCPA to know what we hold, to request deletion, and not to be discriminated against for asking. We do not sell personal information. Contact us and we will help.

Children

Little Villi is a tool for parents and caregivers, and the account holder must be 18 or over. Children do not use the app and we do not knowingly collect anything directly from a child.

The app does contain detailed information about a child, written by their parent. We treat it accordingly — that is what most of this policy is about.

Changes

If we change how your data is handled — particularly if we ever send it somewhere new — we will update this policy and ask for your permission again inside the app before anything changes. We will not quietly widen what we send.