Privacy policy for Tiny Doors
Tiny Doors has no accounts, no sign in, and no email address for you to give it. Almost everything the app knows stays on your phone and goes no further.
What never leaves your phone
Your notes, your photos, the doors you opened, the dates you opened them, and every setting you chose. All of it is stored in the app's own storage on your device.
There is no upload path for notes or photos anywhere in the app. That is a design rule rather than a setting, so there is nothing here to switch off and nothing to trust us about: the code has no way to send them.
The one time any of it moves is when you tap "Export my data" in Settings, which builds a zip file and hands it to Android's share sheet so you can choose where it goes. That happens on your tap and nowhere else.
What the app does send
If anonymous counts are switched on, the app sends a small record when certain things happen. Each record carries five things and nothing more:
- a random anonymous ID (below)
- the name of the event, from the fixed list below
- a few properties, from the fixed list below
- the time the event happened on your device
- the version of the app
The anonymous ID
The app generates a random ID on your device the first time it opens. It is not your name, not your email, not your Google account, not your phone number, not an advertising identifier, and not any identifier Android assigns to your device. It is a random value that exists so the counts can tell one install from another without knowing who anyone is.
Settings shows you that ID under Share anonymous counts, with a Copy button. You can replace it at any time with Reset, next to Copy. Resetting also discards anything waiting to be sent, so nothing stamped with the old ID leaves the phone afterwards.
The complete list of events
This list is closed. The app sends these and nothing else.
The list, event by event
| Event | What it records |
|---|---|
first_open | The app was opened for the first time |
onboarding_done | The opening screens were finished |
door_shown | A door was served for the day. Properties: the door's ID and its category |
door_opened | A door was answered with "I did it" |
door_not_today | A door was answered with "Not today" |
door_reroll | A different door was requested for the day |
note_added | A note or photo was saved. Property: whether there was a photo, true or false |
weekly_offline | The weekly one-tap question was answered. Property: yes, no, or skip |
monthly_reconnect | The monthly question about reaching out was answered. Property: yes, no, or skip |
monthly_attempt | The monthly question about trying something was answered. Property: yes, no, or skip |
day_better | The occasional one-tap question was answered. Property: yes, no, or skip |
returned_after_absence | The app was opened again after a week or more. Property: which range the gap fell in, 7 to 13 days, 14 to 29, 30 to 89, or 90 and over |
trial_notice_shown | The one notice about the free month ending was shown |
unlock_viewed | A screen about the one-time purchase was reached. Property: which screen led there |
unlock_purchased | The one-time purchase completed |
notif_enabled | A daily reminder time was chosen |
export_created | An export file was built |
telemetry_disabled | Anonymous counts were switched off. This is the last record ever sent |
What is never in those records
The text of your notes. Your photos, or anything derived from them. The wording of any door. Your location. Your contacts. Anything you typed anywhere in the app. Any advertising identifier. Any identifier belonging to your device or your Google account.
The "If things are heavy" page sends nothing at all. Nothing you do on that page is recorded, on your phone or anywhere else.
Switching it off
The switch for anonymous counts is in the opening screens, and again in Settings as Share anonymous counts. Switched off, the app does not even record events to send later, so there is nothing sitting on the phone waiting for you to change your mind.
Who else is involved
Supabase stores the anonymous counts for us, on servers in the European Union. They process that data on our instructions and for no purpose of their own.
Google Play handles the one-time purchase. Payment details go to Google and never to us. The app never sees, stores, or sends a card number.
That is the entire list. There is no advertising network, no analytics SDK from anyone, and no tracker of any kind in this app.
Advertising
There is none. No ads, no ad network code, no sponsored content, and no plan to add any.
Deleting your data
On your phone: Settings, then Delete everything. You type the word DELETE to confirm, and every door, note, photo, and setting on the device is removed. It cannot be undone.
The anonymous counts already sent: these are keyed to the random ID and nothing else. Settings shows you that ID under Share anonymous counts, with a Copy button. Send it to the address below and we will delete every record carrying it. Switching the toggle off stops any further counts, and resetting the ID means everything sent afterwards is unconnected to anything sent before.
Children
This app is not directed at children and asks for no information about anyone's age.
Changes to this policy
If this changes, the date at the top changes with it and the previous version stays available at the same address.