Who can see your family's log

Inside your family: everyone sees everything

Cami keeps one log per family. Everything this family tracks is shared with everyone in it.

• Every member sees every child and every entry, with its notes and times.
• Each entry shows who logged it under Logged by.
• Roles are labels. Nursing parent, Supporting parent and Caregiver say who someone is. They do not change what that person can see or log. A nanny or a grandparent sees the same log as a parent.
• Running timers are shared. When a timer runs, it can show as a Live Activity on the Lock Screen of each family phone.
• The owner holds the keys to the door. The owner is the one member who can remove people, hand the family to someone else, or delete it. The owner can also make a new invite link or turn invites off.

If you want someone to stop seeing the log, the owner removes them in More, Members. They lose access to the family’s children and history at once. See Members, roles and the owner.

Your invite link is a key

Anyone with this invite joins your family and can log with you. Share the link or QR code only with the people you mean to invite. If it went to the wrong person, the owner can make a new link, and the old link and code stop working immediately. See Invite your partner, a grandparent or a nanny.

Outside your family

• Other Cami users cannot see your family, its children or its log.
• Cami stores your family’s log on its service so that every phone shows the same timeline. It is not read for any purpose beyond running the service, answering you, and fixing a fault you report.
• Service providers handle parts of the service for Cami: Cloudflare hosts it, and Apple delivers Live Activity updates. A Live Activity update carries what the card shows: the child’s name, what is running, its timer and, for nursing, the side.
• Feedback leaves your phone only when you send it, and you choose whether to include diagnostic logs.

The privacy policy names every provider and what each one handles.

No ads, no tracking, no selling

• No ads, and nothing is profiled to target you.
• No analytics, crash-reporting, advertising or tracking software in the app.
• Cami does not read your advertising identifier.
• Your family’s data is never sold or rented.

How your data is protected

• In transit: traffic between your phone and the service is encrypted.
• On your phone: a copy of your family’s log stays on each signed-in phone, so Cami works without a connection. Sign-in tokens are kept in the iOS keychain.
• Photos are stored at web addresses that cannot be guessed, and only your family’s phones get them.

End-to-end encryption, where even Cami’s service could not read your entries, is not available yet.

To take your data with you or remove it, see Export your child’s log as a CSV file and Delete your account, a child or all entries.