Privacy Policy

Smallish · last updated 19 August 2026

Smallish is a productivity app. It has no account, no login and no sign-up: you never give it an email address, choose a password, or see a screen before the app. This policy describes the only two things that ever leave your device, and what happens to them.

What stays on your device

Your pages, tasks, first actions, deadlines, journal entries, focus sessions, settings and your name are stored in a database on the phone itself. That database is the whole truth of the app. It is never uploaded, never synchronised, and never backed up to us — there is no server holding a copy.

What leaves your device, and only when you ask

Two features send data, and neither runs on its own. Nothing is transmitted when you open the app.

• Breaking a task into steps. When you tap the button that breaks a task down, the task's title, its first action and its page name are sent to our server and from there to Anthropic, whose model writes the steps.
• Adding things by speaking. Speech is turned into text by iOS on your device. If you continue, that transcribed sentence is sent to our server and from there to Anthropic, whose model decides where the sentence splits into separate items.

Anthropic processes this text to answer the request and retains it under its own privacy policy. We do not use anything you send to train models, and there is no model trained by us.

The installation identifier

The paid plan includes a daily allowance, and counting it requires telling one request from another. So the app generates a random identifier the first time it runs and keeps it in the iOS Keychain.

• It is not linked to you: it is not derived from your name, your phone, your Apple ID or any hardware identifier, and it is not an advertising identifier.
• It is sent with the two requests above so the server can count that day's usage against it, together with your device's local date so the allowance resets at your midnight rather than ours.
• The server stores only a running count for the current day under that identifier. Yesterday's count is not read and not kept.

Tracking, advertising and analytics

There is none of any of it. Smallish does not track you across apps or websites, contains no advertising, no advertising identifier, no third-party analytics SDK, and shares nothing with data brokers. Nothing you send is combined with data from other companies.

What our server records

Our server does not log the contents of requests — task titles and dictated sentences are never written to a log. When a request fails, the log records the status code, which route it was, the request identifier returned by Anthropic, and a short truncated hash of the installation identifier. That is what lets a fault be diagnosed without keeping what you wrote.

Subscriptions and payment

Subscriptions are sold and charged by Apple. Smallish never sees your card, your billing address, or your Apple ID. To confirm a subscription is active, the app sends the transaction identifier Apple issued to our server, which asks Apple whether it is still valid. Manage or cancel your subscription in the Settings app; cancelling is never done through us.

Children

Smallish is not directed at children and does not knowingly collect information from them.

What is kept, and how to leave nothing behind

• On the device: deleting the app deletes its database. The installation identifier lives in the Keychain and survives deleting the app; it is cleared when the device is erased.
• On our server: what is stored against your identifier is a single number and the date it belongs to — how many requests you made that day. It is replaced the next time you use one of the two features above, and once its date has passed it is never read again. It is not a history: there is never more than one of them, however long you use the app.
• To leave nothing connected to you: delete the app and erase the device. That clears the identifier, and what remains on our side is a number and a date with nothing linking it to you, to your device, or to any future installation.
• At Anthropic: retention of the text sent for processing is governed by Anthropic's own privacy policy.

Changes

If this policy changes, the date at the top changes with it.

Contact

Questions about any of this: gustavo@guztdesign.com.