Privacy Policy

Who we are

Little Days is operated by Wermom Technologies Inc. (Toronto, Canada), 3417-5 Sheppard Ave E, Toronto, ON M2N 0G4, Canada. In this policy, "Little Days", "we" and "us" mean Wermom Technologies Inc., which is the data controller for the personal information described here. You can reach us through the support form.

On your iPhone and in your iCloud

Your private diary is what you write and add in the app: moments (text, photos, short videos and voice notes), the transcripts of voice notes, the time and place of a moment, feelings, markers, collections and your settings. It is kept in the app's storage on your iPhone.

iCloud

If iCloud is available, Little Days also keeps a copy of your private diary in your own iCloud account (Apple's CloudKit private database), so it comes back after a reinstall or on a new iPhone. That copy counts against your iCloud storage and is handled by Apple under your Apple Account. We cannot access it. If iCloud is off or full, the diary keeps working on your iPhone and the app tells you it is not backed up.

Widgets, Shortcuts and the Lock Screen

The widgets, Shortcuts actions and Lock Screen controls read a small snapshot of your diary that the app stores in a container on your iPhone shared only with the app and its extensions (an iOS App Group). Nothing in it leaves your iPhone.

Face ID

If you turn on the lock, Face ID or your passcode is checked by iOS on your iPhone. Little Days never receives your biometric data.

Device backups

Your diary may also be part of your iPhone backups (iCloud Backup or a backup to your computer), depending on your settings. Those backups are handled by Apple or by your computer under your control.

Permissions the app asks for

Each one is optional and asked for when you first use the feature. You can change them in iOS Settings at any time.

Account

You do not need an account to keep a private diary. If you want to share a diary or collection, or join one, you sign in with Apple. Where the app offers them, you can also sign in with Google or with a code sent to your email. We receive:

• a user identifier, and the email address from your sign-in (with Sign in with Apple this may be Apple's private relay address);
• the display name, handle and picture you choose, your ink colour and your home time zone;
• if you allow push notifications for shared diaries, your device's push token;
• your subscription status (see "Purchases").

This information is stored in a database run for us by Supabase. We use it to run your account, show you to the people you share with, and send the notifications you allow.

Shared diaries and collections

When you share a diary or collection, or add to one that someone shared with you, the content is stored on our servers so every member can see it according to their role:

• the moments (text, photos, videos, voice notes and their transcripts), with their date, time, place and feelings;
• who wrote each moment, the member list and each member's role, and invitations and requests to join;
• hearts, views and reports you send.

Photos, videos and voice notes are stored in private storage on Cloudflare R2; the rest is in our Supabase database. Members of a diary can see what its owner and other members add to it. A moment you write in a shared diary also stays in your own private iCloud copy.

We do not read shared diaries. We may look at specific content if someone reports it, if it is needed to keep the service secure, or if the law requires it.

If you stop sharing, leave or delete

• Stop sharing a diary: our copy is deleted at once. You keep the whole diary on your iPhone and in your iCloud.
• Delete a shared diary you own: it moves to Recently deleted for 30 days, then it is permanently deleted with its media.
• Delete a moment: it moves to the bin and is permanently deleted after 30 days.
• Leave a diary: your moments stay in it unless you delete them first. Delete your own moments before you leave if you want them gone.

Technical sync records that let other devices catch up are kept for up to 90 days.

Reports

You can report a moment, a person or a diary in the app. We keep your report (who reported what, and the reason you wrote) so we can review it.

Push notifications

For shared diaries we send a notification through the Apple Push Notification service when something new happens in a diary you belong to. You choose which diaries notify you.

Purchases and subscriptions

Little Days Plus and Extended are sold through Apple's App Store. Apple processes the payment and handles your Apple Account, billing details and receipts under Apple's Privacy Policy. We do not receive your name or payment details.

To switch plan features on, the app sends your App Store purchase information and an anonymous app user ID to RevenueCat, a subscription service that tells us whether your subscription is active. RevenueCat does not receive your diary.

Diagnostics from Apple

If you turn on "Share with App Developers" in iOS Settings (Privacy & Security, then Analytics & Improvements), Apple may share crash reports and usage statistics with us. Apple controls this data and does not identify you to us.

Support messages

If you contact us through the support form, we receive:

Messages are stored in a Cloudflare D1 database in North America. We use them only to answer you and to improve Little Days. We keep them for up to 12 months after we receive them, then delete them. You can ask us to delete them sooner.

The form is protected by Cloudflare Turnstile, which checks that a person, not a bot, is sending the message. To do that, Cloudflare processes technical signals from your browser and device, such as your IP address and browser characteristics, under the Turnstile Privacy Addendum. Cloudflare does not use this information for advertising. We do not add you to any mailing list.

This website

This website is hosted on Cloudflare Pages. To deliver and secure the site, Cloudflare processes technical information about each request, such as your IP address. The website sets no cookies of its own and uses no analytics, advertising or tracking scripts. The only third-party script is Cloudflare Turnstile, and it loads only on the support page.

Service providers, sharing and selling

We do not sell personal information, share it for cross-context behavioral advertising, or use it to track you across other companies' apps and websites.

We rely on these service providers, each only for the purpose stated:

• Apple: App Store distribution, payments, iCloud for your private diary, push notifications, Maps place names, Sign in with Apple, and optional crash reports.
• Supabase: our database and sign-in for accounts and shared diaries.
• Cloudflare: storage for the media of shared diaries (R2), website hosting, support-message storage and Turnstile bot protection.
• RevenueCat: subscription status.
• Google, only if you choose to sign in with Google.

These providers may process information in countries other than yours. We may disclose information if the law requires it, or to protect the rights, property or safety of our users or others.

Deleting your data

• Your private diary: delete a moment or the whole diary in the app. Deleting it also removes it from your iCloud copy once iCloud has synced. To remove everything Little Days keeps in iCloud, open iOS Settings, tap your name, then iCloud, and manage Little Days storage.
• Your account: delete it in the app's Settings. Shared diaries you own are deleted, your profile is anonymised (name, handle and picture removed) and your sign-in is deleted. Moments you wrote in other people's diaries stay there as "Deleted account" unless you delete them first.
• Backups: copies in your existing iPhone backups remain until those backups are replaced or deleted.
• Support messages: ask us through the support form and we will delete them.
• Subscriptions: deleting data or the app does not cancel a subscription. Cancel it in your Apple Account settings (see the Terms).

Your rights

Your private diary is on your device and in your iCloud, under your control. For information we hold, which means your account, shared diaries and support messages, you can ask us to access, correct, delete or export it, or object to how we use it. We answer within 30 days. We will not treat you differently for exercising these rights.

If you are in the European Economic Area or the United Kingdom, we handle account and shared-diary information because it is needed to provide the service you asked for, and support messages because we have a legitimate interest in answering them. You may also complain to your local data protection authority.

Children

You must be at least 13 to create an account. Little Days is not directed to children under 13, and we do not knowingly collect personal information from them. Parents and guardians may keep a diary about their children as part of their own diary or a shared one; that content is the parent's and is handled as described above. If you believe a child under 13 has an account or has sent us information, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change materially affects how we handle your information, we will also tell you in the app.

Contact

Questions about privacy? Use the support form and choose the topic "Privacy or deleting data", or write to Wermom Technologies Inc., 3417-5 Sheppard Ave E, Toronto, ON M2N 0G4, Canada.