Small Wins Privacy Policy

Last updated: 15 January 2026

This Privacy Policy explains how Small Wins (“we”, “us”, “our”) collects, uses, stores, and shares information when you use the Small Wins mobile application and any related services that link to this policy (together, the “Services”).

If you do not agree with this policy, please do not use the Services. If you have questions, contact us at hello@fivesmallwins.com .

1. Information we collect

A) Information you provide

We may collect information you choose to provide when you create an account, sign in, contact support, or use account-related features. This may include:

Name (if provided)
Email address (for example, if provided by Sign in with Apple/Google or if you enter it)
Support messages and information you include when contacting us

B) Account identifiers and authentication (Passkeys / Face ID / Touch ID)

Small Wins supports passkey-based sign-in. Your device may use Face ID or Touch ID to unlock your passkey.

We do not collect, store, or receive your biometric data (such as face scans or fingerprints).
Biometric matching happens on your device.
We store the authentication information needed to verify your sign-in (for example, cryptographic credential identifiers/public keys) and an internal account identifier.

C) Subscriptions and purchases (Premium)

If you subscribe to Premium, purchases are processed by the Apple App Store or Google Play and may be managed through RevenueCat.

We do not receive or store your full payment card details (such as card number or security code).
We may receive subscription status and entitlement/activation information to unlock Premium features.

RevenueCat privacy policy: https://www.revenuecat.com/privacy

D) Push notifications

If you enable push notifications, we process:

A device push token (a technical identifier used to deliver notifications)
Your notification preference (whether notifications are enabled)

Notification delivery uses platform services:

Apple Push Notification service (APNs) on iOS
Google/Firebase Cloud Messaging (FCM) on Android (used for delivery by the platform)

Some notifications may be delivered silently in the background to refresh app content or update widgets; these do not display an alert or sound.

You can disable visible notifications at any time in your device settings.

E) Technical, diagnostic, and usage information

To keep the app stable, secure, and working properly, we may collect limited technical data, such as:

App version, device type/model, operating system version
Language/region settings
Basic diagnostics (for example, crash or performance signals)

This information is used for troubleshooting, security, and improving reliability.

2. How we use information

We use information to operate and improve the Services, including to:

Provide core app functionality (quotes, favourites, themes, settings)
Create and manage accounts and authenticate users (including passkeys)
Confirm subscription status and enable Premium features
Send notifications if you opt in (and respect your preferences)
Provide customer support and respond to requests
Maintain security, prevent fraud, and troubleshoot issues
Comply with legal obligations and enforce our terms

3. How we share information

We do not sell your personal information.

We may share information only in limited situations, such as:

Service providers that help operate the Services (for example, RevenueCat for subscriptions). They process information on our behalf under contractual obligations to protect it.
Notification delivery services: Apple (APNs) and on Android, Google’s notification delivery services (FCM) to deliver push notifications (this involves the device push token).
Legal and safety: if we believe disclosure is necessary to comply with law, protect rights and safety, prevent fraud, or respond to lawful requests.
Business transfers: if we’re involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to appropriate protections.

4. Data retention

We keep personal information only as long as necessary for the purposes described in this policy and to meet legal, security, and operational requirements.

If you request account deletion, we will delete or de-identify personal information from active systems within a reasonable period, unless retention is required for legal compliance, security, fraud prevention, dispute resolution, or backups.
Push notification tokens are retained only while notifications are enabled and/or your account remains active, and may be removed or rotated when you reinstall the app or change settings.

5. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or object to certain processing of your personal information.

You can:

Disable push notifications in your device settings
Request access/deletion/correction by contacting hello@fivesmallwins.com

Australia (Privacy Act 1988): You may request access to or correction of your personal information, and you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your information.

7. Children’s privacy

Small Wins is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will take appropriate action.

8. International processing

Your information may be processed in countries other than where you live (for example, where service providers operate). We take reasonable steps to apply appropriate protections as required by applicable law.

9. Changes to this policy

We may update this policy from time to time. We will update the “Last updated” date above and may provide additional notice in the app or on our website if changes are significant.

10. Contact

Email: hello@fivesmallwins.com
Country: Australia