Our Little ThingPrivacy
Privacy policy
How Our Little Thing handles your data.
Updated October 29, 2026 · Covers app version 1.0.0
The short version
Your answers stay in private storage on this device or browser. Our Little Thing works local-first and has no advertising SDKs or cross-app tracking. An account is optional; you need one only if you choose partner pairing. When you pair, shared records are encrypted on your device before upload so the pairing service is designed not to read your answers.
When optional sync configuration is present, the app can send anonymous usage counts how many times a feature is used, plus app version and platform, tied to a random per-install tag that is not linked to any account, pair, or person. This never includes your answers, questions, notes, memories, photos, names, or dates you entered. It is on by default and can be turned off any time in Settings, under Your data. Other network processing happens only when a feature that needs it is used, verifying a purchase with the relevant payment provider, or optional partner pairing if you choose it.
In the iPhone and Android apps, the same switch also sends anonymous app use and crash reports to our analytics service, PostHog, in the United States: which screens are opened, fixed actions such as opening Premium or finishing a purchase, how long the app is open, the app version, the kind of device, and crash details. It is tied to a random tag, never to your account or your pair, and never includes your names, email, answers, questions, notes, messages, pairing codes, or anything you write or share. IP addresses are not stored. Turning off "Share anonymous usage" in Settings stops it too.
What Our Little Thing stores on your device
The app keeps the following in private app storage on your phone:
- Profiles, including your chosen lane and avatar
- Answers to questions, and your Same Page reveals
- Notes, meaningful dates, and memories
- Photos you choose for memories
- Saved prompts and questions you write yourself
- Settings, including theme and reminder choices
- Local activity counters used to power your own progress display
These counters stay on the device. When optional sync configuration is present, only anonymous totals of how often features are used, never your answers, notes, memories, photos, or names, may be shared, tied to a random per-install tag rather than to you or your pair. This is on by default and can be turned off any time in Settings, under Your data. The same switch covers the anonymous app use and crash reports described above.
Optional partner pairing
Pairing is optional and off unless you turn it on. The app's one-phone experience never requires it.
If you pair, Supabase processes account credentials and service metadata so the service knows which records belong to your pair. The service stores pair membership, key fingerprints, entitlement ownership, and encrypted shared records. Shared records are encrypted on your device before they are uploaded, and the pairing service is designed not to receive plaintext answers.
Private memory photos stay in this device or browser's storage unless you include them in a backup you choose to export. Media you send to your person during a shared game, a voice or photo clue, is uploaded encrypted, locked so only the two of you can open it.
Encryption reduces exposure, but no security measure is perfect. Keep your device, your account password, and any exported files secure. You can delete the pairing account and its service-side records from the app. See the data deletion guide.
Purchases
Our Little Thing Premium is a monthly or yearly subscription. Apple or Google processes phone and tablet purchases; Paddle.com is the Merchant of Record for purchases made in the desktop browser app. The checkout shows the current price, billing period, trial eligibility, taxes, and renewal terms. The app uses RevenueCat to fetch available plans, check entitlements, and restore access.
JPott Studios does not receive your full payment-card details. RevenueCat and the app store may process a receipt, product identifier, purchase status, country or storefront information, and an app-user identifier. Paddle processes the checkout email, country, and payment details you provide for a browser purchase. If you pair, a service account identifier may be associated with entitlement status so the server can authorise shared access. See RevenueCat's privacy policy, Paddle's privacy policy, Apple's privacy policy, and Google's privacy policy.
Permissions
| Permission | Why |
|---|---|
| Notifications | Optional reminders that you schedule. You can decline this, or turn it off later in device settings, and the app still works. |
| Photo library | Choose photos for a profile picture or memories. The app asks when you start the photo feature and copies the selected picture into app storage. |
| Camera | Scan a private invite QR code, or take a private profile or memory photo, only when you choose that option. Access is requested at that moment. |
| Microphone | Optional voice input or a private game voice clue, only when you start that feature. Clues stay on this phone in same-phone play, or are encrypted before paired-phone upload when pairing is available. Background recording is not enabled. |
| Calendar | Add a special date to your calendar, after permission is requested. Declining leaves the rest of the app working. |
Our Little Thing does not request your precise location or contacts.
Exports and backups
You can export a backup at any time. Your device then offers destinations such as Files, email, messaging, or cloud storage. JPott Studios does not receive that file.
Backups are password-protected v3 files on both native and browser versions. They include answers, notes, your profile photo, and memory photos. You choose where to save or share a backup; JPott Studios does not automatically upload it to a server. Once you choose a destination, that destination’s own terms and privacy practices apply.
The backup password is not stored and cannot be recovered. If you lose it, the v3 backup cannot be opened. Older plaintext v2 backups can still be imported, with an explicit warning before import.
Keeping and deleting data
Local data stays until you delete items, replace data during a restore, or remove the app's data from your device. Operating-system backups and any copies you export are controlled by you and the platform you chose.
If you paired, the app provides controls to disconnect this phone, revoke the pair for both members, and delete the pairing account and its service-side records. See the data and account deletion guide.
Deletion has a limit worth knowing. Revoking a pair can stop future access, but it cannot remove information a partner already saw, remembered, photographed, or separately saved on their own device.
Children
Our Little Thing is intended for a general audience and is not directed to children under 13. JPott Studios does not knowingly use the app to solicit personal information from children. If you believe a child has provided account information through pairing, contact us so we can investigate.
This website and the desktop version
This website and the desktop (browser) version of Our Little Thing count visits anonymously so we can see what helps people. Each page view, or tap on a store button, sends a small note: which page, whether the device is a phone, tablet or computer, and on the first page of a visit, the name of the site that sent you here (for example Google or Instagram). It uses no cookies and stores nothing in your browser, and we do not keep your IP address or anything that identifies you. The notes are kept in our own database, hosted by Supabase.
Our web host, Vercel, also counts visits with Vercel Web Analytics, which uses no cookies and does not follow you to other sites. Like any web host, Vercel handles standard request details such as IP address, the page asked for, browser type and time, for security and delivery.
Google Analytics helps us see which articles and pages are read and which app links are used. Its advertising features are turned off and it does not follow you to other sites. If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, it stays off until you choose Allow on the small cookie notice; choosing No thanks keeps it off. Everywhere else it is on when the page loads, and it sets Google Analytics cookies to tell a new visit from a returning one. It sends Google the page you viewed, the page that sent you here, taps on app store buttons, and your device type. We never send the full web address with its extra details. You can change your choice at any time with the Cookie choices link at the bottom of every page. Google says GA4 uses IP addresses only to work out a rough location and discards them before the data is stored. Google handles this data under its own Privacy Policy. The desktop (browser) version of the app does not use Google Analytics. The anonymous first-party counter and Vercel Web Analytics described above use no cookies.
Changes and contact
This policy may be updated as features, service providers, or legal requirements change. The published date above changes whenever it is revised.
Privacy questions: jpottstudios@gmail.com. Do not email answers, passwords, or pairing invite codes. General help is on the support page. This policy covers Our Little Thing; the other JPott Studios apps have their own at apps.jpottstudios.com/privacy.