Tinydo
Tinydo Privacy Policy
Tinydo has no accounts, no ads and no tracking. Your tasks, routines, goals, wins and streak live on your device and, if iCloud sync is on, in your own private iCloud database, which only you can access; we cannot read it. We built the app so that we can run it without knowing who you are.
What leaves your device
Nothing goes to the AI without your permission. The first time Tiny would think with AI, the app explains what is sent and to whom, and asks. If you say no, Tiny uses built-in steps and nothing below marked "AI" is sent. You can change this anytime in Settings → Privacy → "Tiny thinks with AI".
| Data | When | Why | Kept |
|---|---|---|---|
| What you write or say in "Tell Tiny" and the earlier messages of the same chat (so Tiny can follow the conversation), plus the titles, one-line summaries and progress (for example "4/8") of things you told Tiny before, the struggles and the hardest time of day you picked when you started, today's date, and your language | When you send a message in "Tell Tiny" with an internet connection | Sent to our server, which asks an AI model (Anthropic Claude) to reflect it back, suggest steps or a plan, and notice when it continues something you started earlier. Not linked to you. Words from earlier, separate chats are never sent again; only the short summaries are. | Not stored by us and not cached. Anthropic processes it under its commercial terms and does not train on it. |
| A goal title, the number of sessions, and a short description of your situation | When you ask Tiny to plan sessions for a goal | To write the sessions of your plan. | Not stored by us. |
| The task text you ask to break down into steps | When steps are generated outside "Tell Tiny" | To turn it into steps. | Not stored by us. Identical task texts are cached for 7 days without any device information. |
| Your text and Tiny's answer | Only if you tap "Report a problem with this answer" | So we can review AI answers that were wrong or inappropriate. | Up to 90 days, with only a short fragment of the random install identifier |
| A random install identifier | With every request to our server | Daily request limits to prevent abuse. It is generated by the app, is not your device ID, and resets if you delete your data in Settings. | 36 hours |
| Your subscription's App Store transaction record, as Apple signed it (plan, dates, transaction number; no payment details, no Apple ID) | With every message to Tiny and every plan or steps request | So only subscribers use the AI, and the daily limit counts per subscription. Our server checks Apple's signature and the expiry date. The record itself is not stored; only a one-way hash of the transaction number, made with a secret key, is kept for the daily count. | 36 hours |
| Your IP address, as a one-way hash | With every request to our server | Daily limits per network, so nobody can run up costs by faking install identifiers. The address is hashed together with a secret key and the date, so the code changes every day, and the address itself is never stored. | 36 hours |
| Anonymous usage events (e.g. "paywall shown", "step completed", app version, language) | If "Share anonymous usage and crash data" is on in Settings (off unless you turn it on) | To see which screens work and which don't. No task text, no names, no precise location. | 90 days, aggregated; linked only to a code that changes every day, not to the install identifier |
| A heartbeat while a focus timer runs | If "Show how many people are focusing" is on (default on) | To show an anonymous count of people focusing right now. Only a truncated install identifier is held in memory for 90 seconds. | Never stored |
| Crash reports (Apple MetricKit diagnostics) | After a crash, if "Share anonymous usage and crash data" is on (off unless you turn it on) | To fix bugs. | 30 days |
On-device only
Calendar events (if you turn on "Show my calendar") are read on your device to draw your day; they are never sent anywhere. Voice input is converted to text on your device where supported and is not stored.
Tiny's memory (what you told Tiny, in your own words, and how your plans went) stays on your device and, if iCloud sync is on, in your private iCloud database. Tiny's notes and reminders are scheduled on your device; when and how often you open the app is used only on your device to time them and to send fewer when you don't need them. "Delete all my data" erases all of it.
What Tiny learns about your days. To suggest better times and better help, Tinydo keeps a private log on your device of what happened to the things you planned: done, moved to another day, stopped, or missed; what kind of thing it was (for example study or exercise); the part of the day; the kind of help you chose (for example "just two minutes"); and your answer to "How's your brain today?". The patterns are worked out on your device and shown to you in "What Tiny knows about you", where you can also erase them. This log is never sent to us or to the AI, it is not used for ads, and entries older than 180 days are deleted automatically. It describes your days, not you: Tinydo does not profile your personality or health.
If you write something that suggests you are in crisis, Tinydo shows ways to reach people who can help. It does not contact anyone on your behalf and does not store or report that you did this.
What we never collect
Name, email, phone number, contacts, location, photos, health data, advertising identifiers, or anything from other apps. We do not sell or share data with data brokers or advertisers, and we do not use third-party analytics or advertising SDKs.
Payments
Subscriptions are processed by Apple. We never see your payment details. To check that a request comes from a subscriber, the app sends our server the transaction record Apple signed for your subscription (see the table above). Apple's handling of your data is described in Apple's privacy policy. Manage or cancel in Settings → Apple ID → Subscriptions.
Your rights
Because the data we hold cannot be linked to you, we cannot look up or export "your" data. You can turn off usage sharing in Settings at any time, and "Delete all my data" in Settings removes everything on the device including the install identifier. If you are in the EU/EEA, UK, Turkey (KVKK) or California, you have rights of access, deletion and objection; write to us and we will help within 30 days.
Children
Tinydo is not directed at children under 13 (or the age of digital consent in your country) and we do not knowingly collect data from them.
Service providers
- Cloudflare (server hosting, United States/EU edge locations)
- Anthropic (AI model that writes Tiny's answers, steps and plans, United States)
- Apple (App Store, payments, crash diagnostics delivery)
Not medical advice
Tinydo is a productivity companion. It does not diagnose, treat or cure any condition, it is not a crisis service, and it is not a substitute for professional care.
Changes
If this policy changes materially we will show a notice in the app before the change takes effect. Previous versions are available on request.