Privacy Policy

Who we are

Little Things is operated by JOINT VENTURE COLLECTIVE LLC. You can reach us at hello@ohmylittlethings.com about anything on this page, including a request to see or delete your data.

What we store

• Your account: email address, a display name, an optional emoji, your pronouns if you set them, and your date of birth, which we ask for when you sign up (see Adults only below). Your date of birth is also the birthday on your profile. Your partner sees the month and day, never the year. If you signed up through a friend's referral link, we also keep the code from that link. Your password is stored only as a bcrypt hash — we cannot read it, and neither can anyone who obtains the database.
• Your couple: your anniversary if either of you adds it, and how you describe your relationship if you choose one, such as dating or married.
• What you write: the facts, notes, answers, wishlist items, gift plans, to-dos, calendar dates and plans, trips, people and their dates, notes on places, the places you mark as somewhere you'd go back to, and the movies and shows on your watch list that you enter, along with who added each one and when. Attribution is a feature of the product — a fact shows whether you noticed it or your partner told you.
• Quiz and mood answers: your quiz guesses, and your answers to in-the-moment questions like "Night in or night out tonight?". A mood answer never becomes a fact about you. The answers are kept as a history so the app can show a pattern, such as "weekends: usually a night in".
• What you upload: photos and voice notes, stored on our server and counted against your plan's storage. When you add a JPEG, PNG or WebP photo to the gallery, the details your camera saved inside the file, such as when and where it was taken and which phone took it, are removed before it is stored. A photo in another format, such as HEIC (which many iPhones use), and an animated image are stored as your phone sends them, so those details stay in them.
• What you send each other: your chat messages, with the reactions and replies on them, and whether each message has been read and each voice note played. If you edit one, the earlier version is kept as well, so an edit is visible as an edit rather than silently replacing what was said. If you unsend one, its text is erased and both of you see that a message was unsent. A GIF is stored only as GIPHY's ID for it.
• Health notes: allergies, medications and anything else you record on the health screen, stored like any other fact about a person.
• Our day: your routines and one-off items, when you checked each one off, and any status you set, such as "At work until 3 PM". More below.
• How hungry you are: one number (1 to 10) and the time you set it, per person, replaced each time you set it. It expires after 3 hours, is deleted with your account, and is never shown outside your pair. When you have both set one, a suggested dinner plan for tonight is added to your shared plans, where it is kept like any other plan.
• Your settings: your notification choices, quiet hours and away dates; your phone's time zone, so that quiet hours and "today" match your clock; and short-lived answers such as how much time or energy you have tonight, which lapse after the day they are for.
• Online status: the last time Little Things was open on your screen. More under You two below.
• Delivery plumbing: a push notification token per device, and a record of each notification we sent or held back, so the app can keep to its limits.
• Plan: the record that your couple has full access. Nothing is for sale, so there is no card, no payment and no transaction to store.
• Security records: the internet address a password-reset or sign-in-code request came from, kept so that an unexpected one is visible to you on the sign-in activity screen.
• Emails you send us: if you write to us, we keep your email and our reply for as long as we need them to help you. The Report a problem button in Help adds your app version, phone model, phone system version, account email and the time to the email, where you can read them before you send it.

Location

Little Things uses your location only in these places, and only while the app is open on your screen:

• Find a place and What's on ask for it when you open them, and Help me plan asks when you tap Find a place there.
• Home (the Plan a date map, and How hungry are you?, which uses it to pick a place for tonight's dinner suggestion), the Dates tab (the Tonight card, and the weather on your plans) and Our day (reminders like "Umbrella?") use it only if you have already allowed it. They never ask.

The app never reads your location in the background or while it is closed. For Home, Find a place, What's on, Help me plan, the Dates tab and Our day, your position is deliberately rounded to about 110 meters (about 360 feet) before it leaves your phone, so what reaches us is roughly a city block rather than an exact address. We use it to answer the lookup you asked for and then discard it: it is not saved to your account, and no history of where you have been is built. (Places you choose to save, note, plan or mark are kept like anything else you write.) For weather and events, our server rounds it again, to about 1.1 kilometers (about two-thirds of a mile), before anything leaves. Which outside services receive it is listed under Outside services below. If you never open those screens, the app never asks.

Lookups that carry your position are left out of our server's request logs.

What the app asks your phone for

Each permission is asked for when you first use the feature that needs it, not before.

• Camera: only to scan a sign-in QR code shown on another screen. The picture is read on your phone and is not saved or sent anywhere; only the sign-in code and email address inside the QR code are used, to sign you in. On Android the code is read by a Google component that sends Google its own usage and performance reports, never the picture (see Outside services).
• Photos: only the photos you pick to add.
• Microphone: only while you record a voice note.
• Contacts: only when you import a birthday. Your phone asks you to allow contacts access, but the app reads only the one person you pick in your phone's own contact picker, and when you tap Save, only their name, their birthday and any other dates saved on them, such as an anniversary, are sent to us. Phone numbers and email addresses are never read.
• Calendar: only if you turn on Phone calendar (see below).
• Location: see above.
• Notifications: only when you choose to turn them on.
• Face ID or fingerprint: only if you turn on App lock (see On your phone below).

Something you share into Little Things from another app, such as a link or a picture, is not saved until you choose where it goes. Beyond that there is no ad identifier, no device fingerprinting, and no behavioral analytics SDK.

You two

• Online status. While Little Things is open on your screen, your phone checks in with our server about every 45 seconds, and says so when you leave. We keep only the time of the latest check-in, so your partner can see that you are here now, or roughly how long ago you were. When you are both here at once, a line saying so appears in your chat, at most once every three hours. This is on until you turn off Show when I'm here, and it works both ways: if either of you turns it off, neither of you sees the other's status.
• Photos. Your own photo, which your partner sees; a photo you choose of your partner, which only you see; and a banner for the two of you, which either of you can change. The photo of your partner and the banner are deleted if you unpair. These photos are resized, and the details a camera saves inside a photo, including any location, are removed before they are stored.

Our day

Our day is a daily checklist. Your own routines are yours; shared routines belong to both of you, like the to-do list.

• Sharing your day is off until you turn it on, and it works both ways. "Times and done only" shows your times, what is done, and your status, such as "At work until 3 PM". "Everything" adds titles and places. Each of you sees the other at the lower of the two choices. Sharing shows today only: there is no history and no streak for your partner to look back on.
• Hidden items stay hidden. Anything you hide is never shown or counted for your partner, and items that read as health-related, such as "take meds", start out hidden.
• Noticing. Our day can notice something you do often and offer to make it a routine. It uses fixed rules on your own entries, never a model, and nothing is saved unless you tap Keep.
• 180 days. Check-offs, and one-off items, are deleted automatically once they are more than 180 days old. Routines stay until you delete them.
• Counts, never contents. To improve those rules we sometimes count, across all accounts at once, things like how many routines there are and how often a suggestion is kept. The counts contain no titles, places, names or anything about a single couple, and any number under five is shown only as "fewer than 5".

Phone calendar

Both parts are off until you turn them on in Settings.

• Adding your plans to your phone. The app makes a calendar on your phone called Little Things and puts your plans, yearly memories, birthdays and your anniversary in it, with their titles and dates. It only ever writes to that one calendar, and turning this off deletes it. On iPhone the calendar is made in your default calendar account, usually iCloud, so it syncs wherever your other calendars do. On Android it stays on the phone. Nothing extra is sent to us.
• Showing your partner when you are busy. The app reads the next 30 days of your phone's other calendars and sends us only the start and end of each busy stretch, labeled "Busy". It does not read or send titles, places, people or notes, and events marked free or canceled are skipped. Your partner sees "Busy" and nothing more. Turning this off removes those busy times from our server.

On your phone

• Widgets. If you add the Little Things widget to your home screen, the app saves a small summary on your phone for it: your next few plans, the next birthdays and anniversary with names, and counts of your to-dos and of what is done in Our day. The widget never contacts our server. Anyone who can see your home screen can see it, so it never shows facts, notes, messages, photos or the text of a to-do, and a plan that looks health-related shows only as "Plans together". Signing out clears it.
• App lock. If you turn on App lock, the app asks for your phone's own unlock, Face ID or fingerprint, or a passcode you choose, before it opens. Face and fingerprint checks are done by your phone; we never receive them. A passcode is kept on your phone only as a scrambled hash. Nothing about the lock is sent to us, and your partner cannot see whether you use it.
• What else stays on the phone. Your sign-in, your Spotify connection if you made one, and your Phone calendar settings, all removed when you sign out. The email address you last signed in with stays, so code sign-in only asks for the code. Like other app data, some of this can be included in your phone's own backup to your Apple or Google account.

Who can see it

• Your partner sees what the product says they see: the facts and answers you share with them, your chat, your shared plans, to-dos and watch list, your birthday (the month and day only, never the year), the artists from Spotify if you connect it, and a few recent mood answers with the pattern in them. They also see your online status unless you turn it off, and, if you choose, your day in Our day and when you are busy.
• What your partner writes about you waits for you. It goes to a confirmation queue only you see, and you can correct it or delete it.
• Your partner does not see your private notes, your gift planning, or the photo you chose of them, from their own account. Health notes are readable but they cannot edit them. These are enforced on the server, not just hidden in the app.
• One exception, and it is a real one. The app can give your partner a sign-in code so you can get back in if you are locked out. That code is a full sign-in to your account: anyone holding it can open your account, read everything in it including your private notes, and set a new password. The code can also be shown as a QR code, which carries your email address along with the code. We cannot prevent this — no system can tell a code you read out from one that was taken off your screen — so instead we make it impossible to do quietly. Every use is recorded, and both of you can see it on the sign-in activity screen in Settings. Only hand a code to someone at the moment you need it.
• Nobody else. We do not sell or rent your data, and we do not share it with advertisers or data brokers. The outside services below get only what is listed for each. Our admin tools show account-level facts — your email, your display name, when you signed up, whether you are paired and which plan you are on — and deliberately cannot show the contents of your account. We would hand over information only if the law required it, and then only what it required.

Outside services, and exactly what each one gets

These services answer a lookup or deliver something for the app. Each gets only what is listed here. Where our server makes the request, the service sees our server, not your phone or your internet address. Where your phone makes it, the service also sees your phone's internet address, as any website you visit would.

• Google (Google Maps Platform). Finds places for Find a place, Help me plan and the Plan a date card. From our server it receives your position rounded to about 110 meters and how far to look; the words you type into a place search; the ID of a place whose page you open or that you saved; and, for Meet in the middle, your rounded position and the other spot (a point you picked on the map, or words you typed, such as a neighborhood) so it can find places between you and work out drive times. Neither point in Meet in the middle is stored. From your phone: the photos on a place's page load straight from Google, and on Android the Find a place map is Google Maps, which loads the area on screen. On Android, three Google components built into the app also report to Google on their own: the Google Maps map and the code scanner used for sign-in QR codes send crash reports, performance and usage data, your phone's model and system version, your internet address and an ID for this installation, and Google's Firebase messaging registers the phone for notifications with an ID for this installation. None of them receives your name, your email address or anything you write. Google's use of this information is covered by Google's Privacy Policy.
• Apple Maps. On iPhone, the Find a place map and the map on Home are Apple Maps, which loads the area on screen straight to your phone. Your own dot on either map is drawn by your phone and is not sent to us.
• OpenStreetMap and unpkg. The small maps on Home (on Android) and on Places you've noted load their map pictures from OpenStreetMap's servers and their map code from unpkg.com, straight to your phone. The area shown is around the places you noted, or, if you have allowed location, around your rounded position; with neither, it is the general area of your phone's time zone.
• National Weather Service. The weather on the Dates tab and in Our day, in the US only. From our server it receives only a position rounded to about 1.1 kilometers.
• Ticketmaster. The concerts, games and shows in What's on. From our server it receives only a position rounded to about 1.1 kilometers, how far to look and which dates. Matching events to the artists you two like happens on our server; Ticketmaster never sees who you like.
• TMDB (The Movie Database). Search and "where to watch" in Watch together. From our server it receives the words you type into the search, and the ID of a title when we look up where it streams. Posters load straight from TMDB to your phone.
• Nager.Date. The list of US public holidays. It receives only the year.
• GIPHY. GIF search in chat. GIPHY requires the requests to come from your phone, so it receives the words you type into the GIF search and the GIFs you view. It never gets your name, your email address or your messages. When you send a GIF we store only GIPHY's ID for it, and each phone loads the GIF from GIPHY when it is shown.
• Spotify, only if you connect it. You sign in on Spotify's own page, and Little Things asks only for permission to read your top artists. It cannot see your playlists, your library, what you are playing or your Spotify email address. The sign-in and the reading happen on your phone, and the key Spotify gives the app stays in your phone's secure storage; it never reaches our server. Up to five of your top artists' names are saved as one ordinary fact about you, which your partner can see and you can edit or delete, and What's on uses them to put those artists' shows first. Disconnecting forgets Spotify on your phone and keeps the fact. To remove Little Things from your Spotify account as well, go to spotify.com/account/apps. Spotify connection is offered on Android only, and Spotify lets it work only for accounts we have registered with them. If you ask to be registered, we keep the email address you enter and when you agreed, and we add that address to Little Things' list in Spotify's developer dashboard; we use it for nothing else. Withdrawing the request in the app deletes it from our server; write to us to be taken off Spotify's list as well.
• Expo, Apple and Google, for notifications. Our notifications go through Expo's push service, which receives your device's push token, a random ID for this installation of the app, and the fixed notification text. Expo passes them to Apple's push service on iPhone, or to Google's Firebase Cloud Messaging on Android, which deliver them.
• Resend, for email. Sends our password-reset email. It receives your email address and the message, which holds a reset link and a 6-digit code.
• Hostinger, our hosting company. Our servers are run by Hostinger International Limited in Boston, Massachusetts, United States. Your account and everything in it is stored on a server we rent from them. Hostinger provides the machine and its network connection. Backup copies are kept on that server and on one computer we control, and are deleted after 14 days.

When you tap Directions, a web search or a Ticketmaster link, you leave Little Things for Apple Maps, Google Maps, Google Search or Ticketmaster, and that service's own privacy policy applies.

Notifications

Notification text is generic on purpose: "Little Things — You have something new." What you wrote never appears on a lock screen, because a lock screen is visible to whoever is holding the phone. Reminders your phone sets for itself, such as a birthday reminder or the Our day morning reminder ("Your day is ready."), follow the same rule.

Nudges are limited to one a day. Chat messages and birthday reminders are not rationed. Everything except account notices (billing, security, your partner joining or leaving, and data export or deletion) respects your quiet hours and can be turned off in Settings.

AI

No part of what you write is sent to any third-party AI service. Nothing in the app is generated by a model. Suggestions come from fixed rules that people wrote, applied to what the two of you entered, and the app tells you what a suggestion is based on. Listings such as places, weather, events and movies come from the services named above, not from a model.

Payments

Little Things is free and sells nothing, so we collect no payment details of any kind. Every couple has full access, recorded on the couple's plan, with no end date.

How long we keep things

• What you enter stays until you delete it or delete your account. Mood answers, and our record of the notifications we sent you, cannot yet be deleted one by one; they stay until you delete your account, or until you ask us to remove them.
• Disappearing messages are hidden from both of you when their timer ends, and erased from our server within a day after that, and from our backups within 14 days.
• Backups of everything we store are deleted automatically after 14 days.
• An unsent message's text is erased at once. The note that a message was unsent is removed after 30 days.
• Our day check-offs and one-off items: 180 days, removed by a weekly clean-up, so an item can last up to a week longer.
• Online status keeps only the latest check-in, replaced each time.
• An export file you ask for can be downloaded for 25 days, and is then deleted.
• Routine server logs, which record internet addresses, times, which part of the service was used and, for a search, the words searched for, are deleted within 15 days.
• Security records are kept as long as your account exists, so the sign-in activity screen can show them.

Getting your data back, or removing it

• Export. Settings has an export that gives you a machine-readable file of your account: your profile, the facts about you, your answers, wishlist, gift plans, the messages you sent, calendar plans, people and their dates, quiz guesses, trips, Our day and your settings, with your photos and voice notes in a zip file if you ask for them. Some things are not in the file yet: your to-dos, watch list, place notes and "we'd go back" marks, mood answers, message reactions and earlier versions of edited messages, the photos of you two, your Spotify tester request and your security records. Until they are, write to us and we will send them to you.
• Delete. Settings also deletes your account, and you can do the same from the web at ohmylittlethings.com/delete-account without installing anything. It happens straight away, there is no grace period, and we cannot undo it afterwards. We also keep backup copies of Little Things so we can recover from a server failure or a mistake: one on our server and one on a computer we control. Each copy is deleted automatically after 14 days, so anything you delete is gone from our backups within 14 days. We use backups only to restore the service, and if we ever restore one, we delete again any account that was deleted after that backup was made. It does not erase everything indiscriminately: your photos, voice notes, messages, private notes and the facts about you are deleted, along with your Our day routines, your busy times, the photos of you two that you added, and the to-dos, watch-list picks and place notes you added, while things that belong to the pair — shared trips, calendar plans, shared routines, and the facts you wrote about your partner — stay with them, with your name taken off. The deletion page lists what goes and what stays. Deleting your account does not cancel a subscription bought through Apple or Google; cancel that in the store.
• Unpairing ends the shared relationship. Each person keeps the media they uploaded; nothing is duplicated into the other's account. The photo you chose of your partner and your shared banner are deleted, and neither of you sees the other's day or online status any more.

Security

All traffic is over HTTPS. Passwords are bcrypt hashed. Uploaded media is served through signed, expiring URLs rather than guessable public paths. No system is perfect, and we will tell you promptly if we ever learn that yours was affected by a breach.

Our website

ohmylittlethings.com sets no cookies and runs no analytics. Its pages load their typeface from Google Fonts, so Google sees your browser's internet address when you open one. If you leave your email address for the waitlist, we use it only to send one email when Little Things opens to everyone, and we will remove it whenever you ask. The delete-account page keeps your sign-in only while the page is open.

Adults only

Little Things is for adults 18 and older. When you create an account we ask for your date of birth, and we do not open an account for anyone under 18. We keep your date of birth with your account as the birthday on your profile. Your partner sees the month and day, so the app can remind them of your birthday, but never the year. Only you see the year, and we use it only to confirm that you are 18 or older and to make sure the app never suggests alcohol, such as a bar or a happy hour, to anyone under 21 (for gift ideas, your partner's age is the one that counts). You can remove the year later, but not change it to one under 18. If we do not know someone's age, including when the year has been removed, we treat them as under 21. We do not knowingly collect anything from anyone under 18. If you believe someone under 18 has an account, write to us and we will delete it.

Changes to this policy

If we change it in a way that matters, we will change the date at the top and tell you in the app before it takes effect. We will not quietly widen what we collect.