1. Introduction
TinyAct ("we," "our," or "the app") is a micro-commitment tracking application designed to help you build consistent daily habits through accountability and community. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.
By using TinyAct, you agree to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Authentication data: Information provided through Apple Sign-In or Google Sign-In, which may include your name and email address.
- Username: A unique username you choose during account setup.
- Profile details: First name, last name, and optional profile photo.
2.2 Commitment and Activity Data
As you use the app, we store:
- Commitments: The daily habits you create, including title, description, emoji, schedule, and duration.
- Check-ins: Records of your daily completions, including timestamps and proof type (honor-based or photo).
- Streaks: Your current and longest streak counts, including partnership streaks with accountability partners.
- Achievements: Awards and experience points earned through app usage.
2.3 Photos
You may optionally provide photos in the following contexts:
- Proof photos: Images taken via camera or selected from your photo library to verify a check-in. These are uploaded to secure cloud storage.
- Profile avatar: An optional profile picture uploaded from your photo library.
Camera and photo library access is only used when you explicitly choose to capture or select an image. We do not access your camera or photo library in the background.
2.4 Social and Group Data
- Groups: Group memberships, group names, and member lists.
- Accountability partnerships: Records of paired partnerships within groups.
- Reactions: Emoji reactions you give to or receive from other users on check-ins.
- Invitations: Group and partnership invitations sent or received.
2.5 Device Information
- Push notification token: A Firebase Cloud Messaging (FCM) token used to deliver push notifications to your device. This token does not identify you personally and is only stored if you enable notifications.
- Timezone: Your device timezone, used to accurately track daily check-ins.
3. How We Use Your Information
We use the information we collect to:
- Provide and operate the core app features (commitments, check-ins, streaks, groups).
- Enable social features such as accountability partnerships, group commitments, and reactions.
- Calculate and display streak counts, achievements, and progress statistics.
- Send push notifications for reminders, partnership updates, and group activity.
- Display your profile and activity to other group members and accountability partners.
- Share commitment progress data with the TinyAct home screen widget (stored locally on your device via App Groups).
4. Data Storage and Security
Your data is stored using Google Firebase services, which are hosted on Google Cloud Platform infrastructure. Specifically:
- Cloud Firestore: Stores user profiles, commitments, completions, groups, streaks, invitations, and reactions.
- Firebase Realtime Database: Powers the real-time activity feed.
- Firebase Storage: Stores uploaded proof photos and profile avatars.
- Firebase Authentication: Manages secure sign-in via Apple and Google.
All data is transmitted over encrypted HTTPS connections. Firebase services employ industry-standard security measures including encryption at rest and in transit. Access to your data in the database is restricted through security rules that ensure users can only access their own data and data from groups they belong to.
5. Third-Party Services
TinyAct uses the following third-party services:
- Firebase by Google: Authentication, database, file storage, and push notifications. See Firebase Privacy Policy.
- Apple Sign-In: Used for authentication. See Apple Privacy Policy.
- Google Sign-In: Used for authentication. See Google Privacy Policy.
We do not use any analytics, advertising, or tracking SDKs. Firebase Analytics and Ads are explicitly disabled in the app.
6. Data Sharing
We do not sell, rent, or trade your personal information to third parties.
Your data is shared in the following limited contexts:
- Within the app: Your username, profile photo, check-in activity, and reactions are visible to members of groups you belong to and your accountability partners.
- Service providers: Data is stored on Firebase (Google Cloud) infrastructure as described above. Google processes this data solely to provide the Firebase services.
- Legal requirements: We may disclose information if required by law or to protect our rights, safety, or property.
7. Data Retention and Deletion
We retain your data for as long as your account is active. You can delete your account at any time from the app's Profile settings. Account deletion permanently removes:
- Your user profile and all personal information
- All commitments you created
- All check-in records and proof photos
- All streak records
- All invitations (sent and received)
- Your profile avatar from storage
- Groups you created (along with associated data)
- Your membership from groups created by others
- Your Firebase Authentication account
Once deleted, your data cannot be recovered.
8. Children's Privacy
TinyAct is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can take appropriate action.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct inaccurate information via your profile settings.
- Deletion: Delete your account and all associated data from within the app.
- Withdraw consent: Disable push notifications or revoke camera/photo library permissions through your device settings at any time.
To exercise any of these rights, you can use the in-app settings or contact us at the email address below.
10. Widget Data
TinyAct includes an optional home screen widget. Widget data (commitment names, streak counts, and check-in status) is stored locally on your device using iOS App Groups and is never transmitted to external servers beyond what is already stored in your account.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by updating the "Effective Date" at the top of this page. Continued use of TinyAct after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:
Email: hello@tinyact.app