This privacy policy is applicable to the Small Steps To-Do application (hereinafter referred to as "Application") for mobile devices, which was developed by Small Steps Development (hereinafter referred to as "Service Provider") as a Freemium service. This service is provided "AS IS".

The Application acquires the information you supply when you download and register the Application. Registration with the Service Provider is required to use the core features.

The information provided by users is categorized as follows:

• Authentication Data: Information required for login, including your email address, password hash, or unique user identifiers (UID) provided by third-party authentication services (e.g., Firebase Authentication). This data is used to secure your account and manage your access.
• Task Data: Data directly supplied by you for the core service, including your written goals, task input, generated step-by-step plans, suggested time durations, and completion status. This data is essential for the AI-powered task breakdown functionality.
• Account Status Data: Information related to your usage limits, such as your subscription status, tracking of the daily input limit, and the current number of active tasks, which is used to enforce the Freemium model.
• Contact Data: Information you provide when you contact the Service Provider via email for support or inquiries.

The Service Provider uses this information solely to provide the core services, manage accounts, and administer support.

In addition, the Application may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device's unique device ID, your mobile operating system, the type of mobile Internet browsers you use, and information about the way you use the Application.

This Application does not gather precise information about the location of your mobile device.

The Service Provider shares your information with the following trusted third-party service providers solely to perform core application functions on our behalf. These providers do not have an independent use of the information disclosed to them and have agreed to adhere to the rules set forth in this privacy statement:

• Firebase Authentication (Google): Used to handle user authentication and manage your unique user ID and login credentials.
• Google Cloud AI (Gemini AI): User-provided Task Data is transmitted to this service for processing and generating the step-by-step breakdown.
• Zeabur (Hosting and Backend): Used for hosting the application's server and the primary data storage (PostgreSQL database). Your Task Data, Authentication Data, and Account Status Data are stored securely on this platform.

The Service Provider may also disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena, or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;

You can halt all collection of information by the Application easily by uninstalling the Application. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network. If you wish to delete all User Provided Data associated with your account, please contact us at the email address provided below.

The Service Provider will retain User Provided data (including your Task Data) for as long as you use the Application to allow you to review your progress history. The Service Provider will retain Automatically Collected information for up to 24 months. If you'd like the Service Provider to delete User Provided Data that you have provided via the Application, please contact them at fcfdev8@gmail.com and we will respond in a reasonable time. Please note that some or all of the User Provided Data is required in order for the Application to function properly.

The Application is not intended for use by children under the age of 13, and the Service Provider does not knowingly solicit data from or market to children under this age.

The Service Provider is concerned about safeguarding the confidentiality of your information. We provide physical, electronic, and procedural safeguards to protect information we process and maintain. Your data is stored securely in a PostgreSQL database, and we are committed to maintaining high security measures for user data. We limit access to this information to authorized employees and contractors who need to know that information in order to operate, develop or improve the Application. Please be aware that, although we endeavor to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of 2026-01-12.

By using the Application, you are giving your consent to the Service Provider processing of your information as set forth in this Privacy Policy now and as amended by us. "Processing,” means using cookies on a computer/hand held device or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining and disclosing information.

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at fcfdev8@gmail.com.

This privacy policy page was customized for Small Steps To-Do.