Scope and contact
This notice describes the current prerelease Retoño Pro app and this website, provided under the public business name SitewireAi. For privacy questions, contact support@sitewireai.tech. The app is for organizing family care and general parenting guidance, not diagnosis or emergency services.
Information stored by the app
The app uses local Core Data storage and can synchronize family information through your iCloud account using private and shared CloudKit stores. Stored information can include:
- Child profiles, care logs, feeding and sleep timers, growth measurements, milestones, and activity information.
- Health facts, records, proposed changes, and record history.
- Document originals, identifying metadata, notes, extracted text (OCR), and vault access/audit logs.
- Companion messages, replies, and journal entries.
- Appointments, places, preparation notes, reminders, and other agenda details.
The app has no developer-operated backend and no third-party advertising or analytics SDK. This does not mean no information leaves your device: Apple services, invited family participants, support email, and website hosting have separate data flows described below.
iCloud and invited family members
Optional synchronization and family sharing use Apple’s iCloud and CloudKit. Sharing is invitation-only; public access is disabled. People you invite can receive private read/write access to shared family information, including sensitive information stored there.
Do not assume participants are read-only or that document deletion is restricted by an app-level parent role. This policy does not claim field-level or end-to-end encryption for the app’s CloudKit fields, or that Apple cannot access those fields.
Documents and device permissions
You can scan with the camera or import documents through system Photos and Files pickers. Camera access is requested for document scanning; system pickers let you select files without broad photo-library access. Imported files are hashed, and Apple Vision performs OCR locally. Stored originals and extracted text can be part of iCloud synchronization and AI context.
AI processing and saved conversations
AI features use Apple Foundation Models. Processing prefers the on-device system model and may use Apple’s Private Cloud Compute depending on availability. Context can include family profiles, recent conversations, care logs, growth, health information, document OCR text, records, and journal entries.
Processing is separate from storage: your messages are saved before model availability or success is known, and successful replies are saved. “New conversation” clears the visible conversation, not saved chat or journal records. AI-proposed record changes and their versions are saved; the confirmed health value stays unchanged until approval.
We do not describe prompts as ephemeral or promise that every response is generated only on your device. Apple’s services are subject to Apple’s applicable policies.
Widgets, Live Activities, and reminders
An App Group snapshot for widgets can include the child’s name and recent feed, diaper, sleep, and timer state. Live Activities can show child name, timer type or feeding side, and start time. Live Activity updates are local and do not request push updates.
Notification permission is requested after a user action, and reminders are scheduled locally. Notifications may show child name, appointment title/place, or vaccine names. Consider who can see your device and lock screen, and review your iOS notification and widget settings.
Apple services and purchases
The app uses Apple services including CloudKit/iCloud, StoreKit/App Store, Foundation Models/Private Cloud Compute, and Siri/App Intents. User-selected external links may open other services. Apple processes purchases; the app reads verified StoreKit transactions to determine trial or lifetime entitlements and uses App Store synchronization for restore.
No third-party crash-reporting SDK was found in the audited app. Local diagnostics include persistent-store failure messages and console output for sharing errors.
Deletion, recovery, and export limits
- No whole-family erasure control: the current build does not provide complete family or child deletion. Health facts may be archived rather than erased. There is no verified user-facing control for erasing all saved chat/journal information.
- Document recovery: documents can be moved to a 30-day recovery bin, restored, or permanently purged. That recovery window is not a retention schedule for all app data.
- Purge is not total erasure: permanent document purge writes an audit record containing identifying document metadata before deleting the document. Related metadata remains.
- Export is partial: the vault archive includes document originals/metadata, vault access logs, and health records, including trashed documents. It omits child profiles, care logs, growth, milestones, activities, agenda, chat/journal, document OCR, and document notes. Export is disabled when there are no documents, even if health records exist.
- iCloud and shared copies: deleting the app is not a verified complete-erasure procedure. End-to-end deletion, iCloud copies, and shared-family ownership behavior remain unverified.
Contact support for questions about these limits without sending sensitive records. We cannot promise complete erasure through a control the app does not provide. No general retention period for all family information is stated here.
Support email and this website
If you email SitewireAi, the support email service handles your email address, message contents, and any attachments so we can address your request. This is separate from the app’s family data storage. Do not send sensitive medical records, scans, or child/family details.
This static website contains no analytics or advertising scripts, external font requests, or tracking cookies. Its hosting infrastructure may nevertheless process ordinary request/access logs, such as IP address, requested URL, request time, browser information, and referrer. These website logs are separate from in-app data.
Support-email and website-log/backup retention and deletion periods have not been established in this notice; no fixed period or automatic deletion is promised. This website is hosted on SitewireAi’s server at Hetzner. External links and email services follow their own policies.
Questions and updates
For questions about privacy or information you have sent to support, email support@sitewireai.tech. This notice describes the prerelease implementation reviewed on the date above and may be updated as the app or website changes.