Privacy Policy
Smallish · last updated 27 August 2026
Smallish is a productivity app. It has no account, no login and no sign-up: you
never give it an email address, choose a password, or see a screen before the app.
This policy describes the only two things that ever leave your device, and what
happens to them.
What stays on your device
Your pages, tasks, first actions, deadlines, journal entries, focus sessions,
settings and your name are stored in a database on the phone itself. That database
is the whole truth of the app. It is never uploaded, never synchronised, and never
backed up to us — there is no server holding a copy.
What leaves your device, and only when you ask
Two features send data, and neither runs on its own. Nothing is transmitted when
you open the app.
- Breaking a task into steps. When you tap the button that
breaks a task down, the task's title, its first action and its page name are sent
to our server and from there to Anthropic, whose model writes the steps.
- Adding things by speaking. Speech is turned into text by iOS
on your device. If you continue, that transcribed sentence is sent to our server
and from there to Anthropic, whose model decides where the sentence splits into
separate items.
Anthropic processes this text to answer the request and retains it under its own
privacy policy. We do not use
anything you send to train models, and there is no model trained by us.
The installation identifier
The paid plan includes a daily allowance, and counting it requires telling one
request from another. So the app generates a random identifier the first time it
runs and keeps it in the iOS Keychain.
- It is not linked to you: it is not derived from your name,
your phone, your Apple ID or any hardware identifier, and it is not an
advertising identifier.
- It is sent with the two requests above so the server can count that day's
usage against it, together with your device's local date so the allowance resets
at your midnight rather than ours.
- The server stores only a running count for the current day under that
identifier. Yesterday's count is not read and not kept.
Tracking, advertising and analytics
There is none of any of it. Smallish does not track you across apps or websites,
contains no advertising, no advertising identifier, no third-party analytics SDK,
and shares nothing with data brokers. Nothing you send is combined with data from
other companies.
What our server records
Our server does not log the contents of requests — task titles
and dictated sentences are never written to a log. When a request fails, the log
records the status code, which route it was, the request identifier returned by
Anthropic, and a short truncated hash of the installation identifier. That is what
lets a fault be diagnosed without keeping what you wrote.
Subscriptions and payment
Subscriptions are sold and charged by Apple. Smallish never sees your card, your
billing address, or your Apple ID. To confirm a subscription is active, the app
sends the transaction identifier Apple issued to our server, which asks Apple
whether it is still valid. Manage or cancel your subscription in the Settings app;
cancelling is never done through us.
Children
Smallish is not directed at children and does not knowingly collect information
from them.
What is kept, and how to leave nothing behind
- On the device: deleting the app deletes its database. The
installation identifier lives in the Keychain and survives deleting the app; it
is cleared when the device is erased.
- On our server: what is stored against your identifier is a
single number and the date it belongs to — how many requests you made that day.
It is replaced the next time you use one of the two features above, and once its
date has passed it is never read again. It is not a history: there is never more
than one of them, however long you use the app.
- To leave nothing connected to you: delete the app and erase
the device. That clears the identifier, and what remains on our side is a number
and a date with nothing linking it to you, to your device, or to any future
installation.
- At Anthropic: retention of the text sent for processing is
governed by Anthropic's own
privacy policy.
The website, which is a separate thing
The app collects no email address, and the sentence at the top of this
page stays true. This section is about
smallish.app, which is a different thing with
different rules, and both are described here so that neither has to be guessed
at.
- What is collected: if you type your email address into the
form on that page, it is stored, together with the date and the two-letter
country code the connection already carries. Nothing else — no name, no IP
address, no browser or device details, no cookies, and nothing loaded from
another company's server.
- What it is for: one thing, which is to tell you when
Smallish reaches the App Store.
- Where it lives: a database run by Cloudflare, who host this
site. It is not shared, not sold, and not sent to any mailing or analytics
service.
- How to leave: write to
gustavo@guztdesign.com and the row is deleted.
You do not have to explain why, and there is nothing to unsubscribe from in the
meantime, because nothing is sent until there is something to say.
Visiting the page collects nothing. The address is stored only if you type it
and submit it.
Changes
If this policy changes, the date at the top changes with it.
Contact
Questions about any of this: gustavo@guztdesign.com.