Privacy Policy

01Who we are

The Tiny App ("we", "us", "our") is a software studio based in Mumbai, India. We build and release small software products ("Apps") to test ideas and learn from real users.

This Privacy Policy applies to:

• our website, thetinyapp.com (the "Site"); and
• every App we publish under The Tiny App brand, unless that App has its own privacy policy that says otherwise.

Together, the Site and the Apps are the "Services".

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it. For the purposes of the DPDP Act, The Tiny App is the Data Fiduciary and you are the Data Principal.

Legal entity: The Tiny App LLP
Registered address: A/321, Desk No.13, 3rd Floor, Master Mind 4, Aarey Milk Colony, Royal Palms, Goregaon East, Mumbai, Maharashtra, 400065
Contact: support@thetinyapp.com

02The short version

• We collect only what we need to run our Apps: typically your name, email, and usage data.
• We don't sell your personal data. Ever.
• We use a small number of trusted service providers (for things like payments, email, and analytics) to operate the Services.
• You can access, correct, or delete your data, or withdraw consent, at any time by emailing us.
• If we ever move an experimental App into another company or product, we will notify you before your data moves with it, and you can delete your account instead.

The rest of this policy is the full detail.

03What we collect

1. Information you give us

• Account details: name, email address, and password when you create an account.
• Billing details: if you buy a paid plan, our payment processor collects your payment information. We do not store your card numbers on our servers. If you request a GST invoice, we collect your billing name, address, and GSTIN.
• Support and feedback: anything you send us when you contact support, reply to our emails, fill in a form, or give feedback inside an App.

2. Information collected automatically

• Usage data: which features you use, actions you take in an App, and approximate timestamps.
• Device and log data: IP address, browser and device type, operating system, referring pages, and crash/error logs.
• Cookies and similar technologies: see the Cookies section below.

3. Information from third parties

If you sign in to an App using a third-party account (for example, "Sign in with Google"), we receive basic profile information (such as your name and email) from that provider, as permitted by your settings with them.

We do not knowingly collect data that qualifies as sensitive (such as health, biometric, or financial account data) unless a specific App clearly requires it and asks you first.

04Why we collect it, and our legal basis

Under the DPDP Act, we process your personal data:

• With your consent, which you give when you sign up and accept this policy — for creating and managing your account, providing the App's features, sending you service and product communications, and (optionally) marketing emails; and
• For certain legitimate uses permitted by law — such as complying with legal obligations, responding to legal requests, preventing fraud and abuse, and protecting the security of the Services.

Specifically, we use your data to:

• Provide, maintain, and improve the Services;
• Create and administer your account and authenticate you;
• Process payments and issue invoices;
• Respond to your support requests;
• Send service notifications (e.g. security alerts, changes to terms, downtime);
• Understand how our Apps are used, in aggregate, so we can decide what to build next;
• Detect, prevent, and investigate fraud, abuse, and security incidents; and
• Comply with applicable law.

Where processing is based on consent, you may withdraw your consent at any time by emailing support@thetinyapp.com or using controls inside the App. Withdrawal doesn't affect processing already carried out, and withdrawing consent needed for core features may mean we can't continue providing you the Service.

Marketing emails are optional. We only send you product updates and marketing if you opt in, and every such email contains an unsubscribe link. Unsubscribing does not affect essential service emails.

05Who we share data with

We do not sell or rent your personal data. We share it only in these cases:

1. Service providers (Data Processors). We use third-party services to run the Services. They process data only on our instructions. Currently these include:

Purpose	Provider
Payments	Razorpay, RevenueCat, Google Pay, Apple Pay, PayU, PayPal
Transactional emails	AWS SES
Customer support	support@thetinyapp.com
Product analytics	PostHog
Hosting and infrastructure	AWS

Each provider has its own privacy policy governing how it handles data (for example, our payment processor collects device information for fraud detection under its own policy).

2. Legal requirements. We may disclose personal data to government authorities or law enforcement where required by applicable law, or where necessary to prevent, detect, or investigate offences, including cyber incidents.

3. Business transitions. We are a studio that experiments with small products. If an App (or our company) is acquired by, merged into, or transferred to another company, personal data associated with that App may be transferred as part of that transaction. If that happens, we will notify you by email and/or a prominent notice in the App before your data is transferred and becomes subject to a different privacy policy, and you will have the opportunity to delete your account first.

4. With your direction. If you connect an App to a third-party service (for example, exporting your data to another tool), we transfer that data at your instruction. Those services are governed by their own terms and privacy policies, and we are not responsible for their practices.

06Cookies

Cookies are small files placed on your device. We use:

• Essential cookies — to keep you signed in and keep the Services secure. The Services won't work properly without these.
• Preference cookies — to remember your settings.
• Analytics cookies — to understand how the Services are used so we can improve them.

You can control or delete cookies through your browser settings. Blocking some cookies may break sign-in or other features.

07How long we keep your data

We keep personal data only as long as needed for the purposes above:

• Account data — for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where law requires longer retention.
• Billing records — retained as required by Indian tax and accounting law (generally 8 years).
• Logs and analytics — retained for a limited period and then deleted or anonymised.

If your account is inactive for an extended period, we may notify you and then delete your data as required under applicable rules.

We may retain data longer where required by law or for ongoing legal proceedings.

08Your rights

Under the DPDP Act, you have the right to:

• Access — obtain a summary of the personal data we hold about you and the processing activities we've carried out;
• Correction and erasure — have inaccurate or incomplete data corrected, updated, or deleted;
• Withdraw consent — at any time, as easily as it was given;
• Grievance redressal — have your complaints about our data handling addressed;
• Nominate — designate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email support@thetinyapp.com from the email address linked to your account, or use the controls inside the App. We will respond within the timelines prescribed by law.

If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.

If you access the Services from outside India (for example, the EEA or UK), you may have additional rights under your local law, such as data portability and the right to object; we will honour valid requests in accordance with those laws.

09Children

The Services are not directed at children. We do not knowingly collect personal data from anyone under 18 without verifiable parental consent, and we do not undertake behavioural tracking or targeted advertising directed at children. If you believe a child has provided us personal data, contact us and we will delete it.

10Data security

We use reasonable security safeguards to protect your personal data, including:

• Encryption of data in transit using TLS/SSL;
• Encrypted database backups;
• Passwords stored only in hashed form;
• Access to personal data limited to team members who need it to operate the Services;
• Anonymisation of data sent to error-tracking and diagnostic tools.

No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify you and the Data Protection Board of India as required under the DPDP Act.

11Where your data is processed

We are based in India. Our service providers may store or process data on servers located outside India. Wherever your data is processed, we take reasonable steps to ensure it receives an adequate standard of protection, and we transfer data only to jurisdictions permitted under applicable Indian law.

12Changes to this policy

As we release new Apps and as the law evolves, we may update this policy. When we make material changes, we will notify you by email or a prominent notice within the Services before the changes take effect. The "Last updated" date at the top tells you when this policy was last revised.

13Grievance Officer

In accordance with applicable Indian law, our Grievance Officer is:

Name: Ronak Shah
Email: ronak@thetinyapp.com
Address: A/321, Desk No.13, 3rd Floor, Master Mind 4, Aarey Milk Colony, Royal Palms, Goregaon East, Mumbai, Maharashtra, 400065.

If you have a question, concern, or complaint about this policy or our data practices, please contact the Grievance Officer with a description of your issue and we will work to resolve it promptly.