We keep what the ball needs. Nothing else.

The short version

There are no ads, no analytics companies, and no tracking of you across other apps or websites. We never ask for your name or email to use the app. We do create an anonymous account for you the first time you open it — that is explained in full below, because it is the least obvious thing we do. You can delete everything from inside the app at any time, including before you have ever signed in.

What we create before you sign up

The first time you open TinyDecision, the app creates an anonymous account for you. You are not asked for anything and no name or email is involved. It exists so your decisions can be saved and so your included access period can be tracked. Under the GDPR this identifier is still personal data, which is why we describe it plainly rather than calling it “device information”.

Three things are worth knowing about it:

• It is stored in your device’s Keychain, which means it can survive deleting and reinstalling the app. That is deliberate: it is how your decisions come back if you reinstall.
• We are given an automatic display name — something like “Tiny Lotus” — generated from your account identifier. It is not derived from anything about you, and you can change it.
• We use Apple’s DeviceCheck to record that this device has already had its 30-day included access period. DeviceCheck lets us store two bits of information per device with Apple. It contains no identity, no name, and nothing about you — only whether the period has been used. We rely on it to stop the same device claiming the free period repeatedly. Our lawful basis is our legitimate interest in preventing abuse of a paid product (Art. 6(1)(f) GDPR). Deleting your account does not clear it, because the device has still had its period.

What you give us if you sign in

Signing in is optional and only needed to sync across devices or to use groups. Depending on how you sign in we receive:

• — Sign in with Apple: an identifier from Apple, and your name if you choose to share it. Apple never gives us a photo. If you use Apple’s Hide My Email, we only ever see the relay address.
• — Email link: your email address, used to send the sign-in link and to recognise you next time.

Our lawful basis for this is performing the contract you asked for (Art. 6(1)(b) GDPR) — you cannot sync an account we cannot identify.

Your decisions

Your questions, your options, and which one the ball picked are stored on your device and, so they survive reinstalling and reach your other devices, on our servers. In a group, the members of that group can see the shared question, the options, and the result — that is the point of a group.

A profile photo is optional. If you set one it is stored in a protected bucket and is visible to members of groups you join.

Crash reports and app health

We record a small set of events — onboarding finished, a decision started and finished, a group created or joined, a paywall shown, a purchase made, a sync failure — plus crash reports, so the app can be fixed when it breaks.

Your question text, your option text, group names, display names, email addresses and images are never included in any of it. That is not a promise we ask you to take on trust: the app carries a list of the only fields allowed into a diagnostic report, and anything else is dropped before it is sent.

No tracking

TinyDecision does not track you across other companies’ apps or websites, does not sell or share your data for advertising, and contains no advertising SDKs. This is why the app never shows you Apple’s tracking permission prompt — there is nothing to ask for.

Who else touches your data

• — Supabase — database, accounts, and file storage. Our processor.
• — Apple — DeviceCheck, purchases through the App Store, and notifications. Apple handles your payment details; we never see them.

Data may be processed outside the European Economic Area by these providers, under the safeguards their agreements provide, such as the European Commission’s standard contractual clauses.

How long we keep things

Your decisions and profile are kept until you delete your account. Crash reports and health events are kept for a limited period and then discarded. The DeviceCheck bit is kept for the life of the device, because that is the only way it can do its job.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop certain processing, and object to processing we do on the basis of legitimate interest. Write to say@anotheragence.com and we will respond within one month.

You do not need an account to delete your data. Delete Account works from inside the app whether or not you have ever signed in, and removes your profile, your decisions, and your anonymous account. It does not cancel an App Store subscription — only you can do that, through Apple.

If you think we have handled your data badly, you may complain to your national data protection authority.

Children

TinyDecision is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will remove it.

Changes

If this policy changes in a way that matters, we will say so in the app before the change applies to you. The date at the top always reflects the current version.