Privacy Policy

Who runs it

Small Group is made by me, Jake Huebner, an independent developer. It isn't a company. Questions about your data go to support@smallgroupapp.com. Using the app also means agreeing to the Terms of Use.

What the app keeps

• Your account: your email address, used to send you sign-in codes, and the name you choose.
• Your groups: which groups you're in, your role in each, and invite links. Owners and moderators can also block people from rejoining a group.
• Your tap-ins: which group you tapped in to and on what day. This history powers the calendar and streaks, so it stays with the group even if you leave.
• Photos and captions: what you post with a tap-in. Before uploading, the app shrinks your photo and removes its hidden details, including its location. Posts are deleted 30 days after you post them, or sooner if you delete one or a moderator takes it down. A photo you upload but don't post is deleted within about an hour.
• Readings: the reading owners and moderators set for the group.
• Reports: if you report a post, the report and the reason you give. The group's owner and moderators see the reason, but not who sent it. I get an email about each report, also without who sent it, so I can act on it within a day.
• Blocks: the people you've blocked, so you and they don't see each other's posts. Nobody can see who blocked them.
• Notifications: your phone's notification address and your notification choices. Sent notifications are deleted after 7 days.
• Server logs: like most online services, the servers keep technical logs, such as IP addresses and request times, for security and troubleshooting.

What it doesn't do

• No ads, no analytics or tracking, and no selling or sharing your information for marketing.
• No location. The app never asks for it, and removes it from your photos.
• The camera and photo library are used only when you take or pick a tap-in photo.
• Emails are only sign-in codes. There's no mailing list.

Who can see what

• Members of your group see your name and your tap-ins, and your photos and captions for the 30 days they're up. That includes people who join the group later.
• Owners and moderators can manage members and review reported posts.
• If you block someone, you and they stop seeing each other's posts, in every group.
• Nobody outside your groups can see your posts.

Services that handle it

A few services run parts of the app on my behalf. Each handles your information only to do that job, under its own privacy terms:

• Supabase stores the database and photos and handles sign-in, on servers in the United States.
• Resend sends the sign-in code emails, and the report emails I get.
• Expo sends notifications and delivers app updates. Apple, and Google on Android, deliver notifications to your phone.
• GitHub hosts this website, including the page invite links open. Like any web host, it keeps standard server logs. The site has no tracking of its own.
• If you test the app through TestFlight, Apple may share crash reports and any feedback you choose to send.

Deleting your data

You can delete your account anytime in the app, under You → Delete account. That immediately deletes your account, your name, your memberships, your tap-ins and posts, your blocks, and your notification settings. Your photos are gone from storage within a few minutes.

If you own a group, it passes to the next person in line, or it's deleted if you're its only member. Reports you sent stay, but no longer say who sent them. Server logs and any backups expire on their own schedule.

You can also email me and I'll delete your account for you.

Children

Small Group isn't meant for children under 13, and I don't knowingly collect their information. If you think a child has an account, email me and I'll delete it.

Changes

If this policy changes, the date below changes too. For bigger changes, I'll also say so in the app or by email.

Last updated: October 29, 2026