Toffee privacy policy

Last updated 9 November 2026

Toffee keeps your pets, their routines, their history, their weights, their health records and what you spend on them on your iPhone or iPad. None of it is sent anywhere, unless you turn on iCloud sync — and then it goes only to your own iCloud account.

In short

No account. Toffee needs no name, email or phone number. The names and numbers you type for a sitter sheet stay on your iPhone or iPad, and leave it only on a sheet you share.
Your iPhone or iPad, and your own iCloud. Everything stays on your iPhone or iPad, and in your own iCloud if you turn on sync. The developer of Toffee cannot read it.
The app collects one thing: if you buy Toffee Plus, an anonymous record of the purchase. Nothing else is, nothing tracks you, and there are no ads.
This website counts its visits, without cookies and without knowing who you are.
A household sees what it shares. Everyone you invite can see and edit every pet.
You can delete any of it, whenever you like.

What is collected

Purchases — Purchase History. If you buy Toffee Plus, a record of that purchase is collected. It is used for App Functionality and Analytics. It is not linked to your identity, and it is not used for tracking.

This is the same statement as the app’s App Store privacy details, in the same words.

How purchases work

Payment is handled entirely by Apple; Toffee never sees your payment details. Toffee uses RevenueCat to confirm what you have bought, identified only by a random ID created on your device. Toffee has no accounts and needs no name, email or phone number, so that ID is not tied to you.

iCloud sync

iCloud sync is part of Toffee Plus, and it is off until you turn it on in Settings. When it is on, Toffee keeps a copy of your pets, their photos, their routines, their history, their weights, their health records and documents, the expenses you record and your vet’s details in the private iCloud database of your own Apple Account, so your other devices signed in to it show the same household.

The developer of Toffee cannot read it. It is stored in your iCloud account, not on any server of ours, and iCloud gives an app’s developer no access to the private data of the people who use the app.
It is encrypted. Apple encrypts everything Toffee syncs in transit and on its servers. Pet notes, microchip numbers and your vet’s name, phone number, address and notes are also encrypted on your iPhone or iPad before they are sent. With Advanced Data Protection for iCloud turned on, only your own devices hold the key to those fields and to your pets’ photos.
Expenses. The expenses you record, including their amounts and notes, are stored as encrypted fields: encrypted on your iPhone or iPad before they are sent, and with Advanced Data Protection for iCloud turned on, only your own devices hold the key.
Health records. The names you type for a vaccine, an allergy or a condition, a vaccination’s clinic, batch number and notes, what a visit was for and what the vet found, and each document’s title are encrypted on your iPhone or iPad before they are sent. Dates, which kind of vaccine, visit or document it is, whether it is an allergy or a condition, how many pages a document has, and the name of a booster reminder, which repeats the vaccine’s, are encrypted by Apple like everything else Toffee syncs. With Advanced Data Protection for iCloud turned on, only your own devices hold the key to those fields and to the documents themselves.
Pet photos. A photo you pick so Toffee can suggest a mascot is checked on your iPhone or iPad and not kept — unless you choose to use it as your pet’s picture. A photo you choose is kept on your iPhone or iPad, and in your iCloud if you use sync. Its location and camera details are removed before it is kept.
Turning sync off deletes nothing. Your data stays on your iPhone or iPad and in iCloud. You can delete Toffee’s copy in iCloud from your iCloud storage in the Settings app.

With Toffee Plus you can invite people to your household. Nothing is shared until you invite someone, and you choose who, through Apple’s own sharing sheet.

Everyone you invite can see and edit every pet, including their photos, pet notes, microchip numbers, health records and documents and your vet’s details, and every task, log, weight and expense. Only you, as the household’s owner, can delete a pet.
The household stays in your iCloud. Sharing uses Apple’s iCloud sharing: the people you invite reach your household’s copy in your private iCloud database, and it counts against your iCloud storage. The developer of Toffee still cannot read any of it.
What the household sees of you is the name you choose when you invite or join, and which logs you made. Toffee asks for no one’s email address or phone number. The only ones it keeps are those you type for a sitter sheet, which stay on your device, and any printed on a document you add to a health record. Apple’s sharing sheet handles the invitation.
End-to-end encryption needs everyone. Pet notes, microchip numbers, your pets’ photos, your expenses, your vet’s details, the encrypted fields of your pets’ health records and their documents are end-to-end encrypted only when everyone in the household has Advanced Data Protection for iCloud turned on. Otherwise Apple encrypts them, as it does everything else Toffee syncs.
Leaving, or being removed, deletes nothing. Everything already on your iPhone or iPad stays there as your own copy; it just stops syncing. When the owner stops sharing, each person keeps their copy the same way.

Sitter sheets

With Toffee Plus you can make a sitter sheet: a PDF of your pets’ routines, notes, allergies, photos and microchip numbers, their vet and the contacts you add, made on your iPhone or iPad from what Toffee already holds. The names and phone numbers you type for it — yours, a second contact’s and an after-hours clinic’s — and the amount the sitter may spend are kept on that iPhone or iPad for next time. They are never synced, not even with iCloud sync on, and never shared with your household. The sheet leaves your device only when you share or print it, and goes only where you send it.

Health records

With Toffee Plus you can keep a health record for each pet: vaccinations, allergies and conditions, vet visits and documents. It stays on your iPhone or iPad, and in your iCloud if you turn on sync, like everything else in Toffee.

Documents are your pet’s papers, kept as PDFs: scanned with the camera, picked from your photos, or added from Files. The camera is used only to scan papers, and the scan is made on your iPhone or iPad. A photo’s location and camera details are removed before it is kept; a PDF from Files is kept as it is.
Papers can name people. Certificates and invoices often carry names and addresses, yours and your vet’s. Toffee keeps them as they are, and shows them to no one but you and the people you share your household with.
A visit’s cost is kept as an expense, like any other.
Sharing it is up to you. Apart from iCloud sync and your household, a record leaves your device only when you share it: a PDF of your pet’s record, with the certificates attached if you choose, or a single document. It goes only where you send it.

What is not collected

Nothing else, in the app. Pet names, photos, tasks, logs, weights, health records, documents, expenses, vet details and settings stay on your device, in your own iCloud account if you turn on iCloud sync, and with the people you share your household with if you invite anyone. Toffee does not use advertising, and does not track you across apps or websites.

The free tools on this website

The pet sitter instructions and the pet chore chart keep what you type in your browser on the device you are using, including children’s names and any photos you add. Nothing is sent to us or to anyone else: printing, saving a PDF and sharing all happen on your device, and Clear everything on each page removes it.

Visits to this website

This website counts its visits with Vercel Web Analytics, so we can see how many people come and where they come from. For each page you open, it records the page, the site that linked you here, your approximate location (country, region and city, worked out from your connection), and your browser, operating system and type of device.

No cookies. Nothing is stored in your browser to recognise you.
You are not identified. Visits are told apart only by a code made from your connection, which resets every day, so nobody can follow the same person from one day to the next, or from this website to another.
What you type in the free tools is never part of it. Those pages keep it in your browser, as described above.
The app is separate. Visiting this website tells the app nothing, and the app sends nothing to Vercel.

Exporting and deleting your data

There is no full backup file yet. Your expenses can be exported as a spreadsheet (CSV) at any time. With Toffee Plus, a pet’s vet report is a PDF of their care over a period, a health record is a PDF of their vaccinations, allergies and conditions, medicines and recent visits, with their certificates if you choose, a spending report is a PDF of your expenses, and a sitter sheet is a PDF of your pets’ routines and contacts for whoever looks after them, which you can save or share. Each document can also be shared as it is, with or without Toffee Plus.
To delete a pet, open it from the Pets tab, choose Archive, then Delete permanently. Its tasks, logs, weights, health records and documents, and the expenses that were only for it, go with it; an expense shared with other pets stays, counted for the household. With iCloud sync on, they are removed from iCloud and your other devices too. In a shared household only the owner can delete a pet.
To delete everything on your iPhone or iPad, delete the app from it.
To delete Toffee’s copy in iCloud, open the Settings app, tap your name, then iCloud, and choose Toffee in your iCloud storage. If you own a shared household, that ends it: everyone keeps what is already on their own devices.

Contact

Questions about this policy: support@toffe.app