Pikku
Privacy Policy
Your day, in pencil.
Effective 7 August 2026 · Last updated 7 August 2026
Pikku is a small personal notebook: one page per day, filled in by you. This policy
explains what the app stores, why, who else can see it, and how to get rid of it. It
covers the website at pikkuapp.com and the Pikku
Android app (com.pikkuapp.app), which is a thin wrapper around that same
website.
Pikku is run by an individual developer, reachable at sanidhya.saraswat3@gmail.com, who is the data controller for the information described below.
The short version
- You need an account, because your notebook syncs between your devices.
- What you write in your notebook is stored on Google Firebase and readable only by your own signed-in account.
- Nothing is sold, shared with advertisers, or used to build a profile of you.
- There are no third-party trackers or ad networks in the app.
- You can delete your account, and everything in it, from inside the app.
What Pikku collects
1. Account information
Signing in is required — there is no anonymous mode. Depending on how you sign in, Pikku receives:
- Google sign-in: your email address, your name, and your Google profile picture URL.
- Email sign-in link: your email address. The address is also kept in your browser's local storage so the link can be completed when you return.
This is handled by Firebase Authentication, which also assigns your account an internal user ID and records sign-in timestamps.
2. Your notebook
Everything you put on a page: your notebook's layout and the labels you type onto it, and the marks you make each day — ticks, counts, moods, sleep and wake times, and any free text you write into a text row — together with the date each page belongs to. This is the content of the app and is stored so it is there tomorrow and on your other devices.
Pikku does not read, analyse, or mine this content. It is not used for advertising, is not shared with anyone, and is not fed into any machine-learning system.
3. Reminder settings, if you turn reminders on
Only if you enable the daily nudge:
- the time of day you chose, and your device's time zone;
- a push notification token for each device you enabled it on, plus a random identifier generated by Pikku for that browser profile;
- the date you last marked a page, so a nudge is skipped on days you have already written, and so repeated nudges taper off if you ignore them.
Turning reminders off removes that device's token.
4. Usage analytics
Pikku uses Google Analytics for Firebase to count basic events such as sign-ins and how often core features are used. Google's SDK collects this against a randomly generated app instance ID, and alongside it typical technical data: device or browser model, operating system, app version, language, and an approximate location derived from your IP address (usually city-level). This is used only in aggregate to understand whether the app works, and analytics is silently skipped in browsers that do not support it.
5. Stored on your device
Pikku keeps an offline copy of your notebook in your browser's storage so the app works without a connection, plus small preferences (appearance, the reminder time, a device identifier). Firebase also stores your sign-in session there. These are not cookies used for tracking, and none of them are read by anyone else.
What Pikku never collects
No contacts, no photo library, no files, no precise location, no microphone or camera access, no health or fitness data from any sensor or platform health service, and no advertising identifier. The Android app requests only the notification permission, and only if you ask for reminders.
Why, and on what legal basis
| Purpose | Data | Basis (UK/EU GDPR) |
|---|---|---|
| Give you an account and sync your notebook | Account information, notebook content | Performance of a contract |
| Send the daily reminder you asked for | Reminder settings, push token | Consent — withdraw it by turning reminders off |
| Understand whether the app works | Usage analytics | Legitimate interests in maintaining the service |
| Keep a deleted account from being recreated | User ID, email, deletion timestamp | Legitimate interests in security |
Who else sees it
Google, as Pikku's infrastructure provider, processes this data on Pikku's behalf through Firebase Authentication, Cloud Firestore, Cloud Messaging, Cloud Functions, Analytics, and Hosting. Google's handling is governed by its own Firebase privacy and security documentation and Privacy Policy.
There is no one else. Pikku has no other third-party services, no advertising partners, no analytics vendor besides Google, and no data brokers. Your information is never sold or rented, and it is not shared for anyone's marketing.
The only other circumstances in which data could be disclosed are where the law requires it, or where it is necessary to investigate abuse of the service.
Where it is stored
On Google Cloud infrastructure. Depending on the region your data is assigned to, it may be processed in a country other than your own, including the United States. Google maintains the appropriate safeguards for those transfers, including the EU Standard Contractual Clauses.
How it is protected
All traffic is over HTTPS. Access to your notebook is enforced server-side by Firestore security rules that permit reading and writing only the records belonging to your own signed-in account — another signed-in Pikku user cannot reach your pages. The scheduled job that sends reminders reads only your reminder settings.
No system is perfectly secure, and this policy does not promise one is. If a breach affecting your data occurs, you will be notified where the law requires it.
How long it is kept
Your account and notebook are kept until you delete them — there is no automatic expiry, because the point of the app is that last year's page is still there. Analytics data is retained according to Google's Firebase Analytics retention settings. After deletion, one small record is kept indefinitely: your former user ID, the email address that account used, and the time of deletion. It exists solely so a browser still holding a valid session cannot recreate the deleted account, and it is not used for anything else.
Deleting your account
In the app, open Settings → Delete account. You may be asked to sign in again first, as a safeguard. This permanently removes every daily entry, your notebook layout, your reminder settings and push tokens, and your Firebase Authentication identity, and clears Pikku's local data from that device. It cannot be undone, and there is no backup to restore from.
Signing out, by contrast, leaves your notebook intact and removes only that device's push token.
Your rights
Depending on where you live, you may have the right to access a copy of your data, to correct it, to delete it, to restrict or object to its processing, to data portability, and to withdraw consent. Deletion and correction are available directly in the app — your notebook is editable, and account deletion is immediate. For anything else, or for a copy of your data in a portable format, email sanidhya.saraswat3@gmail.com and you will get a response within 30 days.
Pikku does not sell or share personal information as those terms are defined under California law. If you are in the UK or EU and are unhappy with how a request was handled, you may complain to your local data protection authority.
Children
Pikku is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has created an account, email the address above and it will be deleted.
Changes to this policy
If this policy changes, the updated version will be posted at this address with a new "last updated" date. Material changes will also be announced in the app.