Privacy Policy

Deleting your account

You can delete your Tinylib account in the Tinylib app or at tinylib.app.

• Sign in and open Profile.
• Select Delete account.
• Select Delete account again to confirm.

Deletion is immediate and permanent.

It deletes your account and your data, except for the following.

• Rooms you were in keep what you added to them, and your name as it appeared there, for the other people in them.
• Apps you published stay with the people who already use them.
• Copies can remain in our backups for up to 30 days.

If you use Tinylib without an account, Forget this device on your profile deletes everything we keep for you in the same way.

Deleting your data in one app

You can delete your data in one app and keep the rest.

• Open Profile, then My data.
• Open the menu beside the app and select Delete my data.
• Select Delete my data again to confirm.

It deletes everything you saved in that app and removes the app from your library. You leave its rooms, which keep what you added to them for the other people in them. Copies can remain in our backups for up to 30 days.

Who runs Tinylib

Tinylib is responsible for your information.

Write to privacy@tinylib.app with any question about it.

What we collect and why

• We use your email address to sign you in and to email you about your account.
• If you sign in with Google or Apple, we receive your account identifier, email address and name from them.
• We show the name you choose to other people and to the apps you use.
• We store what you do in Tinylib, such as your data in each app, your friends, rooms and reminders, and the people you block or report, to provide Tinylib to you.
• We use the email addresses you invite to send them your invitation.
• We record when you accept the Terms and this policy and confirm your age.
• We store a notification address for each device that receives Tinylib’s notifications.
• If you publish apps, we store your contact address, your publisher name, the email addresses of testers you invite, and the name of each computer you publish from.
• When you start buying Pro, we make you a Stripe customer, and store its identifier, when you last started buying, and each subscription’s identifier, status, period, renewal date, currency and price.
• If you use Tinylib without an account, we store the name you give, your data in each app, and your rooms and reminders, for the device you use them on.
• We use your IP address to limit requests and protect Tinylib from abuse.
• We use the country your connection comes from to show Pro’s price in your currency, without storing it.
• We count visits, the sites they come from, and steps such as opening an app, making an account or publishing an app, to see how people use Tinylib. These counts don’t include your name, your email address, your IP address, a cookie, or an identifier for you or your device.

Our legal basis for most of this is our contract with you, the Terms of Service.

We use IP addresses, blocks and reports to protect Tinylib and the people who use it, and counts to improve it, which is our legitimate interest.

We use your information only for these purposes.

You need an email address, or a Google or Apple account, and a name to have an account.

Who receives it

The apps you use receive your name, an identifier that is different in each app, and your data in that app.

An app that uses friends also receives the names of your friends who use it.

People you share a room with, your friends, people you invite, and anyone with your friend link can see your name.

If you publish apps, your publisher name is public, and testers you invite see your contact address.

These companies process information on our behalf:

• Cloudflare hosts Tinylib and stores its data.
• Resend sends Tinylib’s email.
• Google delivers notifications to the Android app through Firebase Cloud Messaging.

They may use it only to provide their service to us, and must protect it as this policy does.

On the web, your browser’s push service delivers notifications, encrypted so that it can’t read them.

Google and Apple handle your information under their own privacy policies when you sign in with them.

When you start buying Pro, we send Stripe your name and your Tinylib account identifier. Stripe sells Pro to you as the merchant of record, through Link, and handles your payment details and receipts under its own privacy policy. Deleting your Tinylib account doesn’t delete Stripe’s records of your purchases. We never see your card details.

We also disclose information when the law requires it.

Where it’s processed

Your information is processed in the United States and in other countries where these companies operate.

Where the law requires, these transfers are protected by the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep it

We keep your information until you delete it or your account.

If you use Tinylib without an account, we keep your information for 30 days after the day you first use Tinylib, and for a year after your last use once you have used it on a second day. Signing in moves it into your account.

We keep IP addresses only in hashed form, for up to two days.

Cloudflare keeps logs of requests to Tinylib, including IP addresses, for up to 7 days.

We keep the counts of how people use Tinylib for three months.

If we close an account for breaking the Terms, we keep a hash of its email addresses and sign-in identifiers to stop it signing up again.

Your rights

You can change your name and email addresses, and export or delete your data, on your profile in Tinylib.

You can also ask us to access, correct, delete or export your information, or object to or restrict how we use it, by writing to privacy@tinylib.app.

If you’re concerned about how we handle your information, you can complain to us or to the data protection authority where you live.

Cookies and your device

Tinylib uses cookies only to know which person a device is, with or without an account, and to complete a sign-in.

Tinylib stores your apps and their data on your device so that they work offline.

Apps can also store data on your device.

Security

We encrypt all traffic between your device and Tinylib.

We store sign-in codes and session tokens only as hashes.

Children

Tinylib is for people 16 and over.

We don’t knowingly collect information from anyone younger.

Changes

When this policy changes, the date at the top changes.