Family & sharing
Poppy Days lets a child and a trusted grown-up link their phones, so asking for help is one tap away. The child stays in charge of what is shared, and the grown-up never sees the whole log.
Linking two phones
- On the grown-up's phone, open Family and choose to link a child. A code and a QR code appear.
- On the child's phone, open Circle and scan the QR code or type the code. Do this together, in person.
- Both phones show the same check number. Confirm it matches on both, and the link is made.
What a grown-up can see
| Information | Shared? |
|---|---|
| Support requests the child sends, such as "Please bring supplies", "Can you pick me up?" or "Can we talk later?" | Yes, when the child sends one |
| Upcoming likely days | Only if the child switches it on |
| Period start and end dates | Only if the child switches it on |
| Which days had symptoms | Only if the child switches it on |
| Private notes, moods and flow | Never |
The child can preview exactly what the grown-up sees, pause sharing, or end the link at any time. Nothing on the grown-up's phone can widen what is shared.
If you're under 13
Poppy Days is made to be used together with a parent or guardian when you're under 13. Learning, tidbits and games work straight away. Tracking switches on once a parent or guardian links their phone and gives their OK. They can take that OK back later, or ask for the tracking information on your phone to be deleted.
When you turn 13 you're in charge: the app asks you to look over what you share, and a linked grown-up no longer has consent or deletion controls.
Two ways to sync
The grown-up chooses how linked phones keep each other up to date.
📶 Nearby only
Phones talk directly to each other over your home Wi-Fi with an encrypted connection. Nothing goes through the internet or our server.
The catch: both phones need Poppy Days open, on the same Wi-Fi network, at the same time. If one phone is closed or away from home, updates wait until you're together again, and support requests can't send a notification.
🔐 Encrypted sync
Updates travel through the Poppy Days server, so they arrive even when the other phone is closed or somewhere else. A support request can send a notification to the grown-up's phone.
Locked with your family's key: the first phone in your family makes a secret key. The other phone receives it in person through the QR code. Everything is scrambled with that key before it leaves the phone, and the key never reaches us. Our server stores data it cannot open, and we cannot recover it for you.
What our server can and can't see with encrypted sync
| The server stores | The server never has |
|---|---|
| Random ID numbers for your family and each phone When each phone last checked in Encrypted data and its size An Apple notification token, if notifications are on | Your name, email, birth date or age Any period dates, symptoms, notes or moods in readable form Your family's key Your location or contacts |
Leaving a family deletes that phone's data from the server straight away. A family that nobody opens for 12 months is deleted automatically. Notifications always use neutral wording, such as "Someone in your circle sent you a note."
What we can't take back
Ending a link stops future sharing. Things a grown-up has already seen, screenshots, and files or messages sent outside the app can't be recalled.