Privacy Policy

• Tiny Us is an app for two. What you write, share and save is shown to the person you link with. That’s the point of the app.
• We use your information to run Tiny Us, keep it working and improve it. We don’t sell it.
• Free Tiny Us shows ads. Ads and ad measurement use your device’s advertising ID only if you allow it.
• You can delete your account and your data from inside the app at any time.

Things you give us:

• Account details: when you sign in with Apple or Google, we get a user ID and, depending on what you allow, your name and email address. Apple may give us a private relay email instead of your real one.
• Profile details: the name you go by, your person’s name, your pet, your start date and, if you add it, a birthday.
• What you create in the app: answers to daily questions, replies and reactions, diary and journal entries, notes, lists, moods and status lines, gifts, places and stamps, and how you decorate your home.
• Photos: only the photos you pick from your library or take with the camera to add to Tiny Us.
• Places: when you save a place, we store the place you chose (its name and location on the map). If you allow location access, the app uses your location to suggest nearby places while you’re saving one.
• Messages you send us, for example a support email.

Confirm with devConfirm: email/password sign-in exists or not; which profile fields exist; whether location is ever read in the background (we assume never); what exactly is stored for a place.

Things collected automatically:

• App activity: which screens and features are used, events like “answered today’s question”, and purchases made (not your card details), via Google Firebase Analytics.
• Device details: device model, operating system, app version, language, time zone and a rough region based on your IP address.
• A push token, so we can send notifications you’ve allowed (for example when your person answers).
• Advertising data: your device’s advertising identifier (IDFA on iPhone, only if you allow tracking; the Google advertising ID on Android) and how you interact with ads.

• To run Tiny Us: create your account, link you with your person, show each of you the other’s answers once you’ve both answered, grow your home, keep your diary and sync it across your devices.
• To send notifications you’ve allowed.
• To handle purchases and share Plus with your linked person.
• To show ads in the free version and reward you for optional video ads.
• To understand what works, fix bugs and improve the app.
• To keep Tiny Us safe, prevent abuse and follow the law.
• To answer you when you contact us.

Lawyer reviewFor users in the EEA/UK, map each use to a legal basis (contract, legitimate interests, consent for ads/tracking).

Your person. Once you link, the person you link with can see what you share in Tiny Us: answers (after you’ve both answered), diary entries, notes, photos, moods and status, places and your home. Please only share what you’re comfortable with them seeing.

The companies that help us run Tiny Us, under contracts that limit what they can do with your data:

• Google Firebase (Authentication, Firestore and Realtime Database, Cloud Storage for photos, Cloud Functions, Cloud Messaging for push, Analytics): hosting, sign-in, sync, notifications and app analytics.
• Google AdMob: showing ads and rewarded video ads, and measuring them.
• Apple and Google: sign-in, and payments through the App Store and Google Play.
• RevenueCat: managing subscriptions and purchases. (Planned)
• Meta (Facebook SDK): measuring which of our ads lead to installs and purchases. (Planned)

Confirm with devConfirm the final SDK list before launch: RevenueCat and the Meta SDK are planned but not in the code yet. Sentry and Crashlytics are not used; add them here if that changes.

We may also share information if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of the business (we’ll tell you first if this policy would change).

We don’t sell your personal information for money.

Lawyer reviewUnder California law (CCPA/CPRA), using an advertising ID for ad measurement/targeting can count as “sharing”. Decide whether to add a “Do not sell or share my personal information” notice and how users opt out.

On iPhone, we ask permission before using your advertising identifier to track you across other companies’ apps and websites (App Tracking Transparency). If you say no, ads are still shown, but they aren’t personalized based on that tracking. You can change this anytime in Settings → Privacy & Security → Tracking.

On Android, you can reset or delete your advertising ID in your device settings (Settings → Privacy → Ads, or Google → Ads).

Confirm with devConfirm whether the app shows Google’s consent form (UMP) to users in the EEA/UK, and whether ads are non-personalized without consent.

We keep your information while your account is active. If you delete your account, you have 7 days to change your mind (just sign back in). After that we delete your personal information, and copies in backups are gone within 30 days of your request. We keep only what the law requires (for example, tax records for purchases).

Confirm with devConfirm the build matches research/unlink-and-delete.md §7: 7-day cancel window, purge on day 7, backups gone by day 30.

Unlinking deletes nothing. For 30 days you can re-link and everything comes back just as it was. After that, you can both still read what you made together, as a read-only archive. Your words leave your person’s archive only if you delete your account.

You can delete your account in the app: Settings → Account → Delete account. This deletes your account and everything you created. Your person keeps their own answers, photos and places; where your answers were, they’ll see “Not available”. Deleting doesn’t cancel a subscription; cancel that in your App Store or Google Play settings.

No app? Email tinyus@miuustudio.com from your account’s email address with the subject “Delete my Tiny Us account”. Step by step: miuustudio.com/tinyus/delete-account.

Confirm with devConfirm the in-app delete path (Apple requires one) and the archive behaviour match research/unlink-and-delete.md §3 and §7.

Depending on where you live, you may have the right to access, correct, download or delete your personal information, to object to or limit some uses, and to withdraw consent. Email tinyus@miuustudio.com and we’ll help, usually within 30 days. We may need to confirm it’s you first. We won’t treat you differently for using these rights.

Canada. We handle personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). You can ask to see the personal information we hold about you and ask us to correct it. If you’re not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

United States. If you live in California or another US state with a privacy law, you can ask what personal information we collect and why, ask us to delete or correct it, and opt out of the “sale” or “sharing” of personal information for targeted ads (for ads in Tiny Us, also turn off tracking as described in “Ads and tracking”). You can use an authorized agent.

EEA, UK and Switzerland. We rely on these legal bases: to provide the service you asked for (contract); to keep Tiny Us working, safe and improving (legitimate interests); and your consent for personalized ads and tracking, which you can withdraw anytime. You can also complain to your local data protection authority.

Lawyer reviewReview the PIPEDA, CCPA/CPRA (including whether a “Do not sell or share” link is needed) and GDPR wording, and whether an EU/UK representative is required. Add Korea (PIPA) if Tiny Us launches there.

Tiny Us is not for children. It isn’t directed at children under 13 (under 16 in the EEA/UK), and we don’t knowingly collect their information. If you think a child has given us information, email us and we’ll delete it.

Lawyer reviewConfirm the minimum age and the store age rating.

We use the security measures built into our providers (encryption in transit, access controls) to protect your information. No system is perfectly secure, so please keep your sign-in account safe.

We’re based in Canada, and your information is stored on Google Cloud servers, which may be in the United States or other countries. It may be accessed there by courts, law enforcement and national security authorities under those countries’ laws. Where the law requires, we use safeguards such as standard contractual clauses for transfers.

Confirm with devConfirm the Firebase project region(s).

If we change this policy, we’ll update the date at the top. If the change is significant, we’ll also tell you in the app.

Miuu Studio, 2112-7165 Yonge St, Markham, ON L3T 0C9, Canada. Email tinyus@miuustudio.com. We’re happy to help.