Privacy Notice

Last updated: October 15, 2026

Who is responsible

Madison Northington, an individual based in the United States, runs Little Steps and is the data controller for your personal data — we decide how and why it is used.

What we collect and why

• Account details (name, email, sign-in info, including from Google sign-in) — to create your account and let you sign in.
• Your content (brain dumps, tasks, reminders, routines, habit check-ins, journal entries, moods, sidekick choices) — to provide the service. Brain dump text is sent to an AI provider only to organize it for you.
• Notification tokens — to send reminders you turn on.
• Purchase status (what you bought, plan status) — to unlock your extras. Card details are handled by Paddle; we never see them.
• Technical data (IP address, device and browser type, basic usage and error logs) — for security, fraud prevention, and fixing problems.
• Support messages — to help you when you contact us.

Legal basis

We use your data to perform our contract with you (running the app), for our legitimate interests (security, improving the app), with your consent (such as notifications, which you can turn off), and to meet legal obligations.

Who we share it with

• Service providers that host the app, store data, send notifications, and run AI features for us.
• Paddle, our Merchant of Record, for selling products, managing subscriptions, payments, tax compliance, and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities when the law requires it.

We don't sell your personal data or share it for targeted advertising.

How long we keep it

We keep your data while your account is active. When you delete your account or it's no longer needed, we delete or anonymize it, except records we must keep by law (like purchase records).

Your rights

Depending on where you live (for example, California and other US states with privacy laws), you can ask to access, correct, delete, or get a copy of your data, and to opt out of any sale or sharing (we don't do either). We won't treat you differently for using these rights. To make a request, email us at nudgebug@outlook.com.

Security

We use appropriate technical and organizational measures, including encrypted connections, access controls, and rules so each person can only see their own data.

Cookies and storage

We only use essential cookies and browser storage to keep you signed in and remember app settings. We don't use advertising cookies. You can clear them in your browser settings, though you'll be signed out.

Children

Little Steps isn't meant for children under 13, and we don't knowingly collect their data.

Changes

If we update this notice, we'll change the date at the top.

Questions?

Email us at nudgebug@outlook.com and we'll get back to you.