Privacy Policy
Last updated: February 2026
LittleSteps ("we", "our", "us") is committed to protecting the privacy of you and your family. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the LittleSteps mobile application.
1. Information We Collect
We collect the following information when you use LittleSteps:
- Account information: Email address and display name, collected during sign-up or via third-party authentication (Apple, Google).
- Family information: Children's first names and optional dates of birth, as provided by you.
- Journal content: Photos and captions you create within the app.
- Device information: Device type and operating system version, used solely for app compatibility and troubleshooting.
2. How We Use Your Information
We use your information solely to provide the LittleSteps journaling service:
- To create and maintain your account
- To store and display your journal entries
- To enable partner sharing features within your family
- To improve app performance, reliability, and user experience
We do not use your information for advertising, analytics profiling, or any purpose beyond providing the core service.
3. Data Storage & Security
Your data is stored securely using Supabase, which employs industry-standard encryption both at rest and in transit (TLS 1.2+). Photos are stored in private storage buckets accessible only to authenticated members of your family. Authentication tokens are stored on-device using platform-native secure storage (iOS Keychain).
4. Data Sharing
We do not sell, trade, rent, or share your personal information with third parties. Your journal entries and photos are private to you and your linked partner. The only third-party services involved are:
- Supabase: Our backend infrastructure provider, which processes data on our behalf under strict data processing agreements.
- Apple / Google: If you choose to sign in with Apple or Google, the respective provider handles authentication. We receive only your email and name — no passwords.
5. Children's Privacy
LittleSteps is designed for parents and guardians, not for use by children. We collect only the minimal information about children necessary to organize your journal entries (first name and optional date of birth). We never share children's information with third parties. We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect information directly from children under 13.
6. Your Rights
You have the right to:
- Access your data at any time through the app
- Update your profile information and journal entries
- Delete individual journal entries at any time
- Delete your entire account and all associated data from Settings > Delete Account
- Request a copy of your data by contacting us
7. Account Deletion
You can delete your account at any time from within the app via Settings > Delete Account. When you delete your account, we permanently and irreversibly remove:
- Your profile and account information
- All journal entries and associated photos
- All children data
- Partner connections and invitations
This process is immediate and cannot be undone. If you are the only member of a family, all family data is deleted. If a partner remains, their data and shared entries they authored are preserved.
8. Data Retention
We retain your data only for as long as your account is active. Once you delete your account, all data is permanently removed from our servers within 30 days (to account for backup rotation). We do not retain data for analytics or other purposes after deletion.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the app and updating the "Last updated" date. Your continued use of LittleSteps after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at: