Smallbird Privacy Policy
Effective 13 October 2026 · App: Smallbird: Quit Vape & Pouches (com.elitecorner.smallbird) · Developer: Elite Corner
What stays on your phone
Everything you enter in Smallbird is saved on your device in an encrypted store (AES-256), with the key kept in Android's secure keystore. This covers your onboarding answers and reasons for quitting, your quit date and streaks, check-ins, craving logs, coach conversation and settings. We never upload it, and we have no copy of it.
Smallbird turns off Android's cloud backup and device-to-device transfer, so none of this goes to a cloud backup either. If you want a backup, Smallbird can make one for you (see below).
Morning check-in and milestone notifications are scheduled on the phone by Android. Their text never names the habit you are quitting. The home-screen widget shows only your number of days.
The AI coach (optional)
The coach is the one part of Smallbird that goes online, and only after you switch it on. Each time you send a message, the app sends this to our server:
| Data | Why |
|---|---|
| Your message and up to six earlier messages from the same conversation | So the coach can reply in context |
| Your streak in days, your average mood and craving level over the last week, and up to five of your usual triggers (such as "Coffee") | So the reply fits where you are |
| Up to three of your reasons for quitting, only if "Share my reasons with the coach" is on (you can turn it off in the coach's settings) | So the coach can remind you why you started |
| A random code that Smallbird created when it was installed. It is not your phone's ID, advertising ID or any account | To limit how many messages can be sent each minute, to keep the service affordable and stop abuse |
Never sent: your name, email, contacts or location, dates or times, your full check-in history or logs, or anything else from the app.
Our server runs on Cloudflare. It passes your message and the context above to Google's Gemini API, which writes the reply as our service provider, and sends the reply back. Our server does not store or log your messages or the replies. Under its paid-service terms Google does not use this data to improve its products; it may keep it for a limited time to detect abuse. Like any web service, Cloudflare sees your IP address when the app connects, and keeps short-lived technical logs (such as the time, the address requested and whether it worked) for a few days for security and fixing problems. These logs never contain your messages.
Your conversation is saved only on your phone. You can erase it with Coach settings → Stop using the coach. The coach is an AI: it is not a doctor or therapist, it can be wrong, and it is not medical advice.
Reporting a reply: if you flag a coach reply, we receive that reply, the reason you picked and any note you write. We keep reports for 30 days to make the coach safer and better. Your own messages and the random code are not attached.
Crash reports
If the app crashes, Smallbird sends an anonymous report to Sentry, our crash-reporting provider (data stored in the EU): the error and where it happened in the code, the app and Android versions, the device model, and a random installation ID that Sentry creates. Reports never include your answers, reasons, check-ins, logs, coach messages or anything you type, and they don't record which screens you used. Any quoted text in an error message is removed before sending. You can turn crash reports off at any time in You → Your data and privacy.
Encrypted backup (optional)
If you make a backup from You → Encrypted backup, Smallbird creates a file locked with a passphrase you choose (AES-256-GCM), and saves or shares it wherever you pick through Android. We never receive it and cannot open it. Without your passphrase, nobody can. The app lock PIN is never included.
App lock
If you set a PIN, only a salted, one-way hash of it is stored on your phone. If you unlock with your fingerprint or face, Android checks it. Smallbird never sees or stores your biometric data.
Purchases
Smallbird is free in this version. If we offer Smallbird Pro later, payment is handled by Google Play, and our subscription provider RevenueCat receives the random install code and your purchase details (which plan, when it renews) so Pro can be unlocked and restored. We never receive your name, email or payment details. We will update this policy before subscriptions start.
What we do not collect
No account, name, email, phone number, contacts, location, photos, advertising ID or analytics. Smallbird shows no ads and does not sell or share data with anyone.
Permissions
- Notifications (asked only if you choose a morning check-in): for the check-in and milestone reminders.
- Run at startup: to keep your reminders scheduled after the phone restarts.
- Biometrics (used only if you turn on app lock and allow it): to unlock with your fingerprint or face.
- Internet: only for the AI coach and crash reports.
- Vibration: for gentle taps during breathing and buttons.
Age
Smallbird is for adults (18 and over) and is not directed at children. The app asks your age at the start and does not continue for anyone under 18. We hold no personal data linked to anyone; if you have a concern, contact us.
Deleting your data
Everything Smallbird keeps is on your phone. To erase it, open You → Your data and privacy → Delete everything, or uninstall the app. Coach messages are not stored by us, so there is nothing to delete on our side. To have a report you sent deleted before its 30 days are up, or a crash report removed, email us.
Changes
If this policy changes, we will update this page and its effective date, and say so in the app if the change matters.
Contact
Questions or requests: elite.corner2018@gmail.com