Privacy Policy

Who we are

Little Things is operated by JOINT VENTURE COLLECTIVE LLC. You can reach us at hello@ohmylittlethings.com about anything on this page, including a request to see or delete your data.

What we store

• Your account: email address, a display name, an optional emoji, and your pronouns if you set them. Your password is stored only as a bcrypt hash — we cannot read it, and neither can anyone who obtains the database.
• What you write: the facts, notes, answers, wishlist items, gift plans, calendar dates and trips you enter, along with who added each one and when. Attribution is a feature of the product — a fact shows whether you noticed it or your partner told you.
• What you upload: photos and voice notes, stored on our server and counted against your plan's storage.
• What you send each other: your chat messages. If you edit one, the earlier version is kept as well, so an edit is visible as an edit rather than silently replacing what was said.
• Health notes: allergies, medications and anything else you record on the health screen, stored like any other fact about a person.
• Delivery plumbing: a push notification token per device, and a record of which notifications were sent, so the app can hold itself to one per day.
• Billing: if you subscribe, the transaction identifier from Apple or Google, so we can check whether the subscription is still current. We never see your card.
• Security records: the internet address a password-reset or sign-in-code request came from, kept so that an unexpected one is visible to you on the sign-in activity screen.

Location. Two screens look up places near you: Nearby, and the suggestion that helps you find somewhere to eat. They ask for your position only when you tap them. Before it leaves your phone it is deliberately rounded to about 110 metres, so what reaches us is a neighbourhood rather than an address. We use it to look up venues and then discard it: no record of where you have been is kept, and no history is built. It is passed to the map and venue services that answer the lookup. If you never open those screens, the app never asks.

Beyond that list there is no contact upload unless you explicitly choose to import a birthday, no ad identifier, no device fingerprinting, and no behavioural analytics SDK.

Who can see it

• Your partner sees what the product says they see — the facts and answers you share with them.
• Your partner does not see your private notes, or your gift planning, from their own account. Health notes are readable but they cannot edit them. These are enforced on the server, not just hidden in the app.
• One exception, and it is a real one. The app can give your partner a sign-in code so you can get back in if you are locked out. That code is a full sign-in to your account: anyone holding it can open your account, read everything in it including your private notes, and set a new password. We cannot prevent this — no system can tell a code you read out from one that was taken off your screen — so instead we make it impossible to do quietly. Every use is recorded, and both of you can see it on the sign-in activity screen in Settings. Only hand a code to someone at the moment you need it.
• Nobody else. We do not sell or rent your data, and we do not share it with advertisers or data brokers. Our administrators can see account-level facts — your email, when you signed up, which plan you are on — and deliberately cannot read the contents of your account.

Notifications

Notification text is generic on purpose: "Little Things — You have something new." What you wrote never appears on a lock screen, because a lock screen is visible to whoever is holding the phone.

AI

No part of what you write is sent to any third-party AI service. Nothing in the app is generated by a model. Everything the app tells you is derived from a fact one of you entered, and it says which one.

Payments

Subscriptions are handled by Apple's App Store or Google Play. We never see your card. We receive only the fact that a subscription is valid and when it expires.

Getting your data back, or removing it

• Export. Settings has an export that returns everything associated with your account in a machine-readable file.
• Delete. Settings also deletes your account, and you can do the same from the web at ohmylittlethings.com/delete-account without installing anything. It happens straight away, there is no grace period, and we cannot undo it afterwards. It does not erase everything indiscriminately: your photos, voice notes, messages, private notes and the facts about you are deleted, while things that belong to the pair — shared trips, calendar plans, and the facts you wrote about your partner — stay with them, with your name taken off. The deletion page lists exactly what goes and what stays. Deleting your account does not cancel a subscription bought through Apple or Google; cancel that in the store.
• Unpairing ends the shared relationship. Each person keeps the media they uploaded; nothing is duplicated into the other's account.

Security

All traffic is over HTTPS. Passwords are bcrypt hashed. Uploaded media is served through signed, expiring URLs rather than guessable public paths. No system is perfect, and we will tell you promptly if we ever learn that yours was affected by a breach.

Children

Little Things is not intended for anyone under 13, and we do not knowingly collect anything from a child. If you believe a child has created an account, write to us and we will remove it.

Changes to this policy

If we change it in a way that matters, we will change the date at the top and tell you in the app before it takes effect. We will not quietly widen what we collect.