Privacy

Last updated 22 October 2026. Plain-language version — no dark patterns, no "by using this service you agree to things you didn't read".

The short version: by default, nothing you type leaves your device. Smallrung runs entirely in your browser. There is no account, no sign-up, no tracking script, and no analytics on this site.

When you turn on reminders, some things do leave your device

Reminders need something running while your browser is closed, so this part can't be local. If — and only if — you switch reminders on, we store the following on our server, tied to a random 24-character token:

• Your goal: type, target, start date, deadline
• The generated plan: which action on which day at which time
• Your recorded results: done / smaller version / skipped, with a timestamp
• Optionally: one email address you choose, for the weekly update

That's it. We do not store your name, your address, your card number (that never touches our server — see below), your location, or anything about your device. The server that holds this runs in the United States.

Turning it off deletes it

Switch reminders off and the app calls DELETE /api/state/<token>. The record is removed from our store immediately, and the calendar URL stops working. We keep no shadow copy. If you want a copy for yourself first, use "Export data" in Settings — it gives you everything as a JSON file.

Third parties

• Lemon Squeezy — our payment provider. They act as the merchant of record: they take the payment, handle sales tax and VAT worldwide, and their name appears on your card statement. Your card details never touch our server and we never see them — we receive only a confirmation that an order exists.
• Our email provider — sends the weekly update if you set one up. It receives the recipient address and the email body, nothing more.

There are no advertising networks, no social plugins, no session recorders, and no third-party analytics on any page of this product.

Cookies

None. We don't use cookies at all. The app stores its state in localStorage, which is not a cookie and is never sent to a server on page load.

How long we keep things

• Local data: until you clear it.
• Reminder data on the server: until you turn reminders off, or 12 months after your goal's deadline, whichever comes first.
• Payment records: for as long as tax law requires (typically 7 years), held by Lemon Squeezy as merchant of record.

Your rights

Depending on where you live (CCPA in California, GDPR in the EU/UK), you may have the right to access, correct, delete, or port your data, and to object to processing. Because we hold so little, most of this is one click:

• Access / port: Settings → Export data.
• Delete: Settings → Turn off reminders, then clear your browser data.
• Anything else: email us and we'll answer within 30 days.

We do not sell personal information. We do not share it for cross-context behavioural advertising. There is nothing to opt out of.

Children

Smallrung is not for anyone under 16. We don't knowingly collect data from children. Weight-related goals in particular are not appropriate for minors without medical supervision.

Security

The connection is HTTPS. Reminder tokens are 96-bit random values, and a wrong or missing token returns the same 404 as an unknown one, so tokens can't be probed. We don't store passwords because there are none.

Changes

If this policy changes in a way that affects what leaves your device, we'll say so in the app before it takes effect — not only on this page.

Contact: hello@smallrung.com
This page is written to be understood, not to be litigated.

← Back to the app · Terms