Privacy policy
Last updated
Little Wins is built so that your plans stay yours. You can use it without an account, and then your goals and tasks never leave your phone. This policy explains what changes when you sign in, use the AI helper or contact us.
Who we are
Little Wins is made by Elliot Hodgson, an independent developer in the United Kingdom, who is the data controller for the app and this website. Contact: hello@mail.littlewinsapp.uk.
The short version
- No account needed. Without one, everything stays in the app on your phone.
- We never sell your data and never use it for advertising.
- No analytics or advertising trackers in the app or on this website.
- Your task and goal text is never written to our logs, crash reports, analytics, widgets or notifications by default.
- You can delete everything, from the app or by email.
Your goals and tasks
Goals, tasks, lists, focus sessions and achievements are stored in a database on your phone. They work offline.
If you create an account and turn on sync, a copy is stored in our cloud database so your phones can stay in step. Only you can read it: the database checks that every row belongs to the signed-in account.
Your account
If you sign in, we store:
- your email address, and your name if your sign-in provider shares it;
- how you signed in (email and password, Apple, Google or, if offered, Facebook) and the provider’s account ID;
- when the account was created and last used.
Passwords are stored by our authentication provider as salted hashes; we never see them. If you use Sign in with Apple and choose to hide your email, we only receive Apple’s relay address.
The AI helper
The AI helper is optional. When you ask it to break down a goal or task, the app sends only the text you chose to send (for example the goal’s title and any notes you include) to our server, which passes it to our AI provider, Anthropic, to generate suggestions. The app tells you this before the first use.
- Anthropic processes the request to return a result and does not use it to train its models.
- Our server logs only metadata about each request (for example its size, cost and how long it took), never the text you sent or the reply.
- To keep AI use fair and affordable, we count how many requests each account makes. If you use the helper without an account, the app creates an anonymous ID with no email for this purpose only; your tasks are not synced.
Calendar
Little Wins does not read your calendar today. If we add calendar features, they will be optional, ask for your permission first, and this policy will be updated before they launch.
Data stored on your phone
The app keeps its own database on your phone. Removing the app removes it. App lock, if you turn it on, uses your phone’s own Face ID, fingerprint or passcode; we never receive biometric data.
Who processes data for us
| Service | What it does | Where |
|---|---|---|
| Supabase | Accounts, sign-in and synced data | London, UK |
| Microsoft Azure | Runs the server for the AI helper | Europe |
| Anthropic | Generates AI helper suggestions | USA |
| Resend | Sends sign-in code emails | USA |
| Cloudflare | Hosts this website and routes email | Global network |
| Apple, Google, Facebook | Only if you choose to sign in with them | Under their own privacy policies |
Where data is transferred outside the UK, we rely on the UK International Data Transfer Addendum or the UK–US data bridge, as appropriate.
Why we can use your data
- To provide the app you asked for (contract): your account, sync and the AI helper when you use it.
- Legitimate interests: keeping the service secure, preventing abuse of the AI helper and answering support emails.
- Consent: optional features that ask first, such as notifications. You can withdraw it in the app or your phone’s settings.
How long we keep it
- Account and synced data: until you delete your account. We then delete it straight away; copies in our provider’s backups are overwritten within about 7 days.
- Anonymous AI IDs: until you ask us to delete them.
- Support emails: kept for up to 2 years so we can follow up, then deleted.
- Server logs: metadata only, kept for up to 30 days.
Deleting your data
You can delete your account in the app (Settings → Your account → Delete account) or by email. Deleting your account removes it and everything synced with it. Data on your phone stays until you remove the app.
Your rights
Under UK data protection law you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent. Email hello@mail.littlewinsapp.uk and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Children
Little Wins is for people aged 13 and over. We follow the UK Age Appropriate Design Code: private settings by default, no advertising, no public profiles and no pressure to use the app more.
This website
This website does not use cookies, analytics or third-party fonts. If you change the reading options, your choice is saved in your own browser only. Our host, Cloudflare, processes basic request data (such as IP addresses) to deliver and protect the site.
Changes to this policy
When this policy changes, we update the date at the top. For important changes, we will also let you know in the app.