Your data
stays yours.
The short version: We store the minimum needed to run the app. We don't sell your data, show you ads, or share anything with your pact members that you haven't already chosen to share.
What we collect
When you create an account we collect:
- Your email address (to sign you in via magic link)
- A display name (you choose this)
- Your timezone (so your daily check-in resets at the right midnight)
When you use the app we record:
- The pacts you create or join
- Your daily check-ins — whether you marked done or skip, and on which date
- Emoji reactions you send to other members
- Your per-pact reminder preferences (the time and whether to skip if already done)
We also collect anonymous usage events (things like "app opened", "check-in recorded") to understand how the app is being used, and crash reports when the app stops working unexpectedly.
What we never collect
- No messages or comments — there is no chat in the app
- No photos or media
- No location data
- No contacts or address book
- No health or fitness data
- No payment information (the app is currently free)
What your pact members can see
In a shared pact, other members can see:
- Your display name and avatar
- Whether you checked in today — done or skip
- Your daily record for the past week
- How many days in a row you've shown up
- Reactions you send to them
Misses are never shown to the group. If you didn't open the app one day, no one is told. Skips are shown as a neutral marker — we do not label them as failures or notify anyone about them.
Who else handles your data
We use a small number of trusted services to run the app:
- Convex — our backend and database, hosted in the US
- PostHog — anonymous analytics (what features people use)
- Sentry — crash reporting (what broke, on what device)
- Expo — delivers push notifications to your device
PostHog, Sentry, and Expo only receive anonymous or device-level data — they never see your habit content or check-in records. We do not sell your data to anyone, ever.
Keeping your data safe
Your data is transmitted over encrypted connections (HTTPS). Pacts are private — you can only join a group you were invited to. There are no public profiles, no discoverability, no feeds.
Your choices
You can update your display name and timezone at any time in settings. You can leave a pact whenever you want, and your check-in history stays with the pact (other members can still see the shared history). If you want your account deleted entirely, email us and we will remove your data within 30 days.
Children
Tiny Pact is designed for people 13 and older. If you believe a child under 13 has created an account, please contact us and we will delete it.
Changes
If we make changes that affect how we handle your data, we will update the date at the top of this page. For significant changes we will email you.
Contact
Questions or requests? Email privacy@tinypact.app. We read every message.