Privacy Policy

Last updated 19 September 2026 · Applies to TinySteps version 2.0.0

Who we are

TinySteps is a planner and habit tracker built for ADHD and other neurodivergent brains. It is published by DigiPlugLabs LLC, Winter Garden, Florida, USA. Questions about this policy go to support@digipluglabs.com.

The short version.

 

Everything you put into TinySteps stays on your phone. There is no TinySteps account, no server and no sync in this version, so your tasks, habits, journal entries, medications and wellness logs are never sent to us. We cannot read them, because we never receive them. We do not sell your data and we do not use it to train AI models. The free version shows one banner advert, which is served by Google and cannot see anything you have entered — see Advertising below.

Information you enter, which stays on your device

You may enter any of the following. All of it is written to your device's local app storage and stays there:

  • Profile: a display name, and optionally a photo or an emoji avatar

  • Tasks: names, notes, due dates, categories, time estimates and effort levels

  • Habits and streaks: habit names and your completion history

  • Journal entries: free-form text and the mood you attach to them

  • Medications: names, dose, timing and notes, plus an allergy list if you add one

  • Wellness logs: hydration, sleep, activity, a self-rated stress level and exercise entries

  • Preferences: theme, notification settings and your PIN, if you set one

Health-related information

Medication and wellness entries are personal health information and we treat them as such. They are stored only on your device, are never transmitted to us, and are never shared with third parties, insurers, employers or advertisers. TinySteps does not assess this information, does not tell you whether any value is normal or healthy, and is not a medical device.

About photos specifically

You can attach a photo to a task or use one as your profile picture. TinySteps opens your camera or photo library only at the moment you tap to add a photo. The image is resized on your device and stored there with the rest of your data. Photos are never uploaded, never analysed, and nothing in TinySteps looks at their contents.

Information we do not collect

  • No analytics, no crash reporting and no usage tracking by TinySteps — there is no such SDK in the app

  • No precise location

  • No access to your contacts or calendar

  • No account, so no email address and no password

  • No payment card details — Apple and Google handle payment and we never see card numbers

How your data is kept on the device

  • Your entries live in the app's own storage, which the operating system keeps separate from other apps.

  • You can set a PIN lock in Profile so TinySteps asks for a code before it opens. You choose the PIN and it is stored on the device; we cannot reset or recover it.

  • Because nothing is transmitted, there is no server of ours holding your information and nothing of yours to breach on our side.

The limited cases where anything leaves your device

Three are initiated by you, and one — the advert on the free tier — happens automatically until you subscribe:

  1. If you buy a TinySteps Premium subscription. The purchase is handled by Apple or Google. They tell the app whether a subscription is active; we do not receive your payment details or your name from them.

  2. If you export or share a report. The task and journal exports, and the progress report you can generate for a therapist or provider, produce a file on your device. Where it goes next is entirely your choice — we never receive a copy.

  3. The banner advert on the free tier. Google receives technical information from your device in order to serve it — see Advertising below. Premium removes the advert entirely.

  4. The web font used for the app's typeface is requested from Google Fonts when the app opens, which means Google sees the network request. No TinySteps data is included in it.

Advertising

The free version of TinySteps shows one banner advert at the bottom of the screen, served by Google AdMob. A TinySteps Premium subscription removes it.

  • TinySteps requests non-personalised adverts only. That means the advert you see is not selected using a profile of your interests or your activity in other apps.

  • Nothing you enter into TinySteps is used to select adverts, and none of it is sent to Google. Your tasks, habits, journal, medications and wellness logs never leave your device, and the advert has no access to them.

  • To serve and measure even a non-personalised advert, Google receives technical information from your device — such as IP address, device type, operating system version, coarse location derived from IP, and an advertising identifier used for frequency capping and fraud prevention. This is handled by Google under its own policies, not by us.

  • You can reset or limit your advertising identifier in your device settings: Settings → Privacy → Tracking on iOS, or Settings → Google → Ads on Android.

See How Google uses information from sites or apps that use our services.

Reminders and notifications

If you turn on reminders, TinySteps schedules them with your device's own notification system. The text and times stay on the device. No push server is involved and nothing is sent to us.

Keeping, exporting and deleting your data

Your data stays on your device until you remove it. You can:

  • Export your tasks and journal at any time from Profile.

  • Erase everything with Clear all data in Profile, or by uninstalling the app.

Because we hold no copy, deleting it on your device deletes it everywhere. There is nothing for you to request from us and nothing for us to retain.

Your rights

Privacy laws including the CCPA (California) and the GDPR (European Economic Area) give you rights to access, correct, export and delete your personal information, and to object to its sale. TinySteps satisfies these directly: you already hold the only copy, you can read and edit all of it in the app, you can export it, and you can delete it. We do not sell personal information and never have. If you believe we hold something about you, write to support@digipluglabs.com.

Children's privacy

TinySteps is not directed to children under 13, is not designed for families, and we do not knowingly collect information from them. Because it shows adverts it is rated for teens and above. Users aged 13 to 17 should use TinySteps with the awareness of a parent or guardian.

Third parties

TinySteps has no analytics provider and no backend provider. The third parties involved are:

  • Apple and Google, who distribute the app and process subscription payments under their own privacy policies.

  • Google AdMob, which serves the banner advert on the free tier.

  • Google Fonts, which serves the app's typeface as described above.

Changes to this policy

If this policy changes we will update the date at the top of this page, and note anything significant in the app. Continued use after a change means you accept the updated policy.

Contact

DigiPlugLabs LLC · Winter Garden, Florida, USA · support@digipluglabs.com