Smallwise Privacy Policy

Effective date: 28 October 2026

Smallwise is operated by Swejan Kothamasu. For privacy questions, support, or data requests, contact admin@buildauramatrix.com. This policy covers the Smallwise iOS app, its beta versions, and its privacy/support pages.

Information we collect

Account and profile information: your account identifier, email address, display name, time zone, selected mascot, and authentication-provider identifiers. Apple or Google may supply your name and email when you choose their sign-in service. If you use Apple's Hide My Email, we receive the relay email address Apple provides. Apple may provide your name only on your first authorization. If you use email/password sign-in, Supabase Auth processes your password; Smallwise does not put passwords in its application database.

Habit and Kith information: habit titles and schedules; Kith names, purposes, memberships and roles; invitations; completion/skipped states and dates; optional private notes; and group activity events. We store account deletion requests and the information needed to carry them out.

Device and technical information: a device push token when you enable notifications, notification environment, request/error information, and the technical information our hosting, authentication and sync providers need to deliver and secure the service, such as IP addresses and request timestamps. We do not request access to your contacts, photos, precise location, HealthKit or advertising identifier.

Support information: messages and attachments you choose to send us. Please do not send passwords, sign-in tokens or sensitive private notes in a support message.

How we use information

We use this information to create and secure your account, display your profile, provide habits and check-ins, manage private Kiths and invitations, calculate progress, synchronize your data across your devices, deliver notifications you enable, handle account recovery/deletion, respond to support, and diagnose service failures or abuse.

Smallwise does not sell personal information, display advertisements, or use an advertising or third-party behavioral analytics SDK. We do not use your habits or notes for advertising or AI model training.

What other people can see

My Kith is your personal space. Its habits, check-ins and progress are not shown to other Kith members.

In a group Kith, active members can see member display names and mascots, roles, habit titles and schedules, shared completion/skipped states, and group activity. A habit marked Just mine in a group Kith is still visible to that Kith; it gives only its owner a check-in. A shared habit gives each active member a separate check-in. Neither choice makes your notes visible to other members.

Private notes are visible only to their author through Smallwise. Kith owners and members cannot read them through the app. Notes are stored by our backend and synchronization providers so they can sync to your own devices. Smallwise does not provide end-to-end encryption; 'private' does not mean the service providers never process the data.

Kiths have no public discovery, public profiles or public habit feed. People who receive an invite link can see limited information needed to review the invitation, and can join if the invitation remains valid and the Kith has room. Treat invite links as private access links. Other members can independently copy or capture information they can see; deleting your account cannot remove their screenshots or copies outside Smallwise.

Providers and disclosures

Supabase provides authentication, database storage and backend functions. PowerSync, provided by JourneyApps, processes the permitted account and Kith data needed for synchronization, including your private notes when syncing them to your own devices. Apple and Google process the sign-in information needed when you choose their authentication services. Apple Push Notification service delivers remote notifications to devices that enable them.

These services process information needed for their roles and are governed by their applicable privacy terms and data-processing arrangements. Their privacy information is available at https://supabase.com/privacy, https://www.powersync.com/legal/privacy-policy, https://www.apple.com/legal/privacy/, and https://policies.google.com/privacy.

Our privacy/support pages are hosted using Cloudflare Pages. The hosting platform and its infrastructure providers may process connection information and operational logs to serve and secure these pages, under their applicable privacy terms. These pages do not add advertising or analytics scripts. Cloudflare's privacy information is at https://www.cloudflare.com/privacypolicy/.

We may disclose information where required by law, to respond to a valid legal request, or where reasonably necessary to protect users, security or legal rights. Service providers and infrastructure may process information outside your country.

Notifications and local storage

Habit reminder times and device notification preferences stay on your device and are not synchronized as account preferences. Habit reminders are scheduled locally through iOS. Kith join alerts are generated by our backend and sent through Apple; they do not include your private notes or habit details. You can change notification preferences in You → Reminders and in iOS Settings.

Smallwise keeps an account-scoped local cache and pending check-ins on your device so the app can work offline. Pending check-ins sync when connectivity returns, subject to the app's same-day check-in rules. Signing out clears visible account data and account cache through the app's cleanup process. Some device preferences, such as whether you have seen the introduction, can remain on that device. iOS controls device backups and system notification settings.

Retention and account deletion

We retain account and app data while your account is active so you can use your habits, Kiths and history. Archiving a habit or Kith preserves history; it is not a request to delete your account. Leaving a Kith ends access and archives your habits there; it does not itself delete all prior history.

To request account deletion, open You → Account settings → Delete account. If you own active group Kiths, you must first transfer their ownership or archive them. Deletion is scheduled after a 30-day recovery period. During that period you can sign in to recover the account. After the recovery deadline, the account and its associated personal records are removed by the scheduled cleanup process; processing can take additional time. Contact us if deletion has not completed as expected or if you cannot access the app.

Other members' habit assignments and check-ins are their records. Shared habit definitions, Kith records and history needed by remaining members may remain after your account is removed, with your creator/account reference removed where the data model supports it. Names or other personal details you typed into shared titles are not automatically detected or removed. Contact us if such content needs deletion or review. This limitation does not restrict any deletion rights you have under applicable law.

Limited operational records may be retained as necessary for security, troubleshooting, legal obligations or dispute handling. Infrastructure logs and any provider-managed backups follow the applicable provider retention processes and may not be removed at the same instant as active account records. We do not promise a backup-erasure period that we have not verified.

Your choices and requests

You can edit your profile, manage your habits, leave Kiths, disable notifications, sign out, and initiate account deletion from the app. You can also manage Apple or Google authorization in those providers' account settings. Removing a provider authorization alone does not submit a Smallwise account deletion request.

Contact admin@buildauramatrix.com to request access, correction, deletion, or other privacy rights available in your location, including a copy of your data where applicable. We may need to verify that you control the account before responding. We will handle requests as required by applicable law. Where applicable, you may also complain to your local privacy regulator.

Security

We use HTTPS for data sent between the app and its services, authenticated access, and account/membership controls designed to limit data access. No system or transmission is completely secure. Please protect your device, sign-in accounts and invite links, and report suspected unauthorized access to admin@buildauramatrix.com.

Children

Smallwise is not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly collect information from children below the applicable minimum age. If you believe a child has provided information, contact us so we can review and address it.

TestFlight beta information

If you install Smallwise through TestFlight, Apple processes beta-testing information under its terms and privacy notices. We may receive installation/session information, crash reports and feedback you submit through TestFlight. Feedback or screenshots you send can contain app content; review them before sharing. Beta features and data behavior may change as the app develops.

Policy changes and contact

We will update this page and its effective date when this policy changes. Where required, we will provide additional notice or obtain consent. For privacy or support, contact Swejan Kothamasu at admin@buildauramatrix.com.