A private household record, with boundaries stated plainly.

Information the app handles

The working model can contain care-arrangement and member identifiers, names and contact details, pay settings, planned and actual shifts, breaks, kilometres, timesheets, approvals, issued records, adjustments and payment confirmations.

Where it is stored

The app keeps a protected local copy on iPhone. Its sharing design uses Apple CloudKit and the signed-in person’s private iCloud account. Nanny Invoice does not use a self-hosted application backend.

Who it is shared with

An arrangement owner will be able to invite selected parent collaborators and caregivers through private iCloud sharing. The owner controls membership. This invitation and shared-database journey is still being completed and tested across two real iCloud accounts.

What the current app does not do

• No advertising or third-party analytics.
• No sale of household information.
• No bank transfers or payment-card handling.
• No payroll withholding, employer contributions, tax filing or legal compliance service.
• No automated email workflow.

Control and deletion

Removing the app removes its local installation data. Shared iCloud data can remain associated with an arrangement and its participants. The release build will include and document the correct in-app removal and arrangement-deletion paths before this notice makes stronger deletion promises.

Questions and changes

A public support contact and dated change history will be added before external testing. Until then, this site is a transparent development record, not an invitation to submit personal information.