AnyoneTo Babysit

Privacy notice

Version 1 · Last updated 29 September 2026 · Applies from the day the app is first released

1. Who we are

AnyoneTo Babysit (the "app") is run by AnyoneTo. We are the controller of the personal data described here. You can reach us at [email protected] or [email protected].

This notice is for two kinds of people: parents who use the app, and sitters who never use it but whose name and phone number a parent saved. Section 2 has a part for each.

2. What we collect and why

If you are a parent using the app

Your phone number. Your account is your verified mobile number; there is no email or password. We use it to sign you in and to know which data is yours. Sign-in is provided by Google's Firebase Authentication, which sends the verification code.
Your first name. You type it once before your first text to a sitter, and can change it in Account. It signs the texts you send and names you on the pages a sitter opens from a text. No surname.
The sitters you save. For each sitter: their name, one phone number, how you know them, and, if you add them, a private note and the rate you last agreed. You pick the name and number from your phone's contact picker or type them in. The app never reads or uploads your address book. The private note and last rate are stored by AnyoneTo with that sitter's record, but they are for you alone: they are never included in any message to a sitter and never shown on a sitter page.
Your requests. The date and hours you need, the order you want your sitters asked in, how long to wait for each reply, and an optional note. The note is sent to the sitters we ask, with the times. We also keep each sitter's reply and the arrangement you record.
Purchases. Each paid request is bought through Apple's App Store or Google Play. They confirm the purchase to us and we keep the transaction reference and what was bought. Your card details never reach us.
Notifications. When you allow notifications, we keep the push token your phone gives us and your time zone, so we can tell you when a sitter replies and show times in your local time.
Install attribution. On first open the app records which campaign link (if any) led to the install, the platform, the app build, and the timestamps. On iOS this uses Apple's own attribution token. There is no advertising identifier and no tracking across other apps or websites.
Crash and performance reports. If the app crashes, a report goes to Google's Firebase Crashlytics so we can fix it. Crash reports are not linked to your account.

A copy of your list and your requests is kept on your phone so the app works offline. That copy is encrypted by the app with a key that never leaves your phone and is not included in phone backups.

Our lawful basis for all of this is the contract you enter when you use the app, and, for purchase records, our legal obligations around payments.

If you are a sitter

A parent saved you on their list because they already have your number. That is why you may hear from us without ever having used AnyoneTo.

What a parent saved about you. Your name, your phone number, how they know you, and, if they added them, a private note and the rate you last agreed, which only they can see. Our basis for holding it is the parent's legitimate interest in organising their own childcare, and you can object at any time (section 8).
When AnyoneTo texts you. AnyoneTo sends you texts itself only after you have tapped "Yes" on your own permission page. Before that, a parent who says you have already agreed with them texts you from their own phone; that is the parent's message, not ours, and it carries a link to the page where you can say yes or no to hearing from AnyoneTo. The one exception: if the parent's device cannot send texts, AnyoneTo sends that parent's ask to you on their behalf, before you have said yes yourself, with the same links. Every text from AnyoneTo carries a link to stop. In the United Kingdom the texts come from the sender name "AnyoneTo", delivered by Twilio.
What a sitter page shows. Only the parent's first name, the sitting's date, hours and time zone, the parent's note if there is one, and your own answer and status. Never a phone number, another sitter, or another family. Each link is private to you and expires.
What a sitter page stores. Your availability answers, your confirmation of an arrangement, your "Yes" or "Stop requests from [name]", and any report you make, with its reason and the time. A stop is kept so that the same family cannot ask you again unless you say yes again through your own link. A report is final for that family.
You can stop at any time. Use the link in any text, or "Stop requests from [name]" or "Report unwanted messages" on the page the link opens. To have us remove you from a parent's list entirely, email [email protected] with the number the texts were sent to.

3. How we use it

To sign you in and keep your list, requests and history yours.
To text the sitters you chose, in your order, with the times and your note, and to show you their replies.
To send you notifications about your requests.
To take one payment per request and match it with Apple or Google.
To honour a sitter's stop or report for as long as it stands.
To count which campaign links lead to installs, in aggregate.
To find and fix crashes.
To answer you when you write to support.

We do not profile you, do not show you advertising, and do not use your data for anything not on this list.

4. Artificial intelligence

None. The app and the service use no AI or machine-learning models, and no part of your data is sent to an AI provider.

We sell nothing and share nothing for advertising, and the app runs no advertising or analytics SDK. The only companies that handle your data do so on our instructions, to run the service:

Google — Firebase Authentication (sign-in by phone), Cloud Run and Firestore (our servers and database), and Firebase Crashlytics (crash reports). Data is stored in the United States.
Apple and Google Play — take your payment for a request and confirm it to us.
Twilio — delivers the texts AnyoneTo sends to sitters.
Cloudflare — hosts this website.

A sitter you ask sees your first name, the times and your note; you see the sitter's answers. We would disclose data if the law required it.

6. How long we keep it

While your account exists, everything stays: every paid request is kept in your history, and there is no per-request delete. Sitter links expire on their own, and a stopped sitter stays stopped.

When you delete your account, your personal data — your sitter list, requests, replies, arrangements, notes, link tokens and activity records — is deleted. The purchase and audit records that the stores and support need, and our backups, are kept for 365 days after deletion and then purged.

7. Deleting your account and data

In the app: Account → Delete my account, then confirm.

Deletion stops any request that is still sending, cancels every sitter link, disables sign-in, and deletes your data as described above. The copy on your phone is removed with it.

By email: write to [email protected] and give us the phone number on your account; we'll confirm it's you first.

If you are a sitter and want a parent's record of you removed, see the sitter part of section 2 or the support page.

8. Your choices and rights

Under UK data protection law you can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to our using it. Email [email protected]. You can also complain to the UK's supervisory authority, the Information Commissioner's Office (ICO).

9. Security

Everything between the app, this site and our servers travels over encrypted connections.
Data on our servers is encrypted at rest.
The copy on your phone is encrypted by the app with a key that never leaves the device, and is not included in phone backups.
Sitter links are long random codes that expire and can be cancelled.
Message texts, notes and phone numbers are never written to our logs or analytics.

10. Children

The app is for adults arranging their own childcare. We do not knowingly collect data from children, and we ask for none: there is no child profile and no field for a child's name or age. The optional request note is free text that goes to the sitters you ask, so please do not put a child's name or other details about them in it.

11. International transfers

Our servers are run by Google in the United States, so your data leaves the United Kingdom. Where a provider is certified under the UK–US data bridge we rely on that; otherwise we rely on the UK's international data transfer agreement or addendum with that provider.

12. Changes to this notice

If we change what we collect or why, we will update this page and the version and date at the top.

13. Contact

Privacy questions and requests: [email protected]. Everything else: [email protected].