Privacy Policy

Effective date: November 6, 2026 · Last updated: November 6, 2026

This Privacy Policy explains how Tiny Waffles, Inc. ("Tiny Waffles," "we," "us," or "our") collects, uses, stores, and shares information when you visit tinywaffles.com (the "Site") or use any application, utility, browser extension, or service we publish (together with the Site, the "Services").

We keep this short and in plain language on purpose. If anything is unclear, write to us.

1. Who we are

Tiny Waffles, Inc. is a corporation organized under the laws of the State of Delaware, United States. We are the data controller for the information described in this policy.

This policy applies to all Tiny Waffles Services unless a specific app publishes its own privacy policy, in which case that policy applies to that app and this one fills in anything it does not cover.

2. Information we collect

Information you give us

• Contact details. If you email us, we receive your email address, name if you include it, and whatever you write.
• Account and sign-in details. Some apps let you sign in with a third-party account such as Google. See Google user data below for what that involves.
• Content you provide to an app. Anything you type into, upload to, or ask an app to process so it can do its job.

Information collected automatically

• Server logs. Our hosting provider records standard request logs (IP address, user agent, pages requested, timestamps) for security and reliability. We do not use these to profile you.
• App diagnostics. Some apps may keep local error logs on your own device to help you troubleshoot. These are not sent to us unless you choose to share them.

The Site does not use advertising trackers, third-party analytics, or fingerprinting.

3. How we use information

We use information only to:

• provide, operate, and improve the Services;
• respond to your questions and support requests;
• keep the Services secure and prevent abuse;
• comply with legal obligations.

We do not sell personal information. We do not use it for advertising. We do not use your content or data to train artificial intelligence or machine learning models, whether our own or anyone else's.

4. Google user data

Some Tiny Waffles apps can connect to your Google account through Google's OAuth sign-in so they can work with your Google data on your behalf. This section describes how we handle that data. It applies in addition to the rest of this policy.

What we request and why

Each app asks only for the Google permissions ("scopes") it needs for the feature you are using, and tells you what it will do before you grant access. Depending on the app, that may include:

• Basic profile information (your name, email address, and profile picture), used to show which account is connected and to tell your accounts apart if you connect more than one.
• Gmail read access, used to read message headers and content so an app can organize, group, summarize, or act on your mail as you direct it to. For example, our mailscrub app reads recent list and promotional mail to group it by sender and find the right unsubscribe method.
• Gmail modify or send access, only in apps and features where you ask the app to change labels, archive mail, or send a message on your behalf, and only when you trigger that action.

How we use Google user data

We use Google user data solely to provide and improve the user-facing features of the app you connected it to. Specifically, we:

• process the data to deliver the feature you asked for, such as sorting mail by sender or showing an unsubscribe option;
• display the data back to you inside the app;
• store the minimum needed to make the app work between sessions, as described under Retention and deletion.

Wherever an app's design allows, Google user data is processed on your own device and is never transmitted to Tiny Waffles servers at all. Where a feature does require processing elsewhere (for example, an app that explicitly offers AI-assisted summaries), the app tells you before sending anything, and only the data needed for that feature is sent.

What we never do with Google user data

• We never sell it.
• We never use it to serve advertisements, including retargeting, personalized, or interest-based advertising.
• We never use it to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.
• We never transfer it to data brokers, information resellers, or anyone else for purposes unrelated to the feature you are using.
• Our staff never read it except with your explicit consent (for example, to help with a support request you raised), as required for security or to investigate abuse, or where required by law.

Sharing of Google user data

We do not share Google user data with third parties except: (a) with service providers that process it on our behalf to provide the feature, bound by contractual confidentiality and use restrictions; (b) as needed to comply with applicable law or a valid legal process; (c) as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply and you will be notified; or (d) with your explicit direction or consent.

Revoking access

You can disconnect any Tiny Waffles app from your Google account at any time from your Google Account permissions page or from within the app. When you do, the app's access token is invalidated and the app can no longer reach your Google data. See Retention and deletion for what happens to data already stored.

5. Limited Use disclosure

6. Retention and deletion

• Data on your device. Apps that run on your own computer or in your browser store their data (including any cached Google user data and OAuth tokens) locally. Uninstalling the app, clearing its data, or using the app's reset option deletes it. Where an app stores tokens in your operating system's keychain, removing the app's keychain entry removes the token.
• Data on our servers. Where a Service stores data on our infrastructure, we keep it only as long as needed to provide the Service to you. When you delete your account or disconnect the Service, we delete or anonymize the associated data within 30 days, except for backups, which expire on their regular schedule (no longer than 90 days), and records we must keep to meet legal obligations.
• Support email. We keep correspondence for as long as reasonably needed to handle your request and for our records.
• Server logs. Retained by our hosting provider for a short rolling period, typically no longer than 30 days.

To request deletion of any data we hold about you, email support@tinywaffles.com from the address associated with your account. We will confirm and complete the request within 30 days.

7. Sharing and service providers

We share information only with the following categories of recipients:

• Hosting and infrastructure providers that serve the Site and run any server-side components (for example, our static hosting provider and, where an app uses one, a database or storage provider).
• AI model providers, only for apps and features that explicitly offer AI-assisted functionality, and only for the content you choose to send to that feature. We select providers that contractually commit not to train on data submitted through their API.
• Email providers we use to receive and reply to support mail.
• Authorities and other parties when required by law, to enforce our Terms, or to protect the rights, safety, or property of Tiny Waffles, our users, or the public.
• A successor in the event of a merger, acquisition, or sale of some or all of our assets.

We do not sell or rent personal information to anyone, and we do not share it with third parties for their own marketing.

8. Security

We use reasonable technical and organizational measures appropriate to the sensitivity of the data, including encryption in transit (HTTPS/TLS) for all connections to our Site and APIs, operating-system keychains for credential storage in desktop apps, least-privilege access to any infrastructure, and the minimum OAuth scopes needed for each feature. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify you and any relevant authorities of a breach affecting your personal information as required by law.

9. Children

The Services are not directed to children under 13 (or under 16 where a higher age applies), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct inaccurate information;
• delete your information;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with a supervisory authority.

European Economic Area, United Kingdom, and Switzerland. Our legal bases for processing are performance of a contract (providing the Services you asked for), our legitimate interests (keeping the Services secure and improving them), consent (where you connect a third-party account or opt into a feature), and compliance with legal obligations. You can exercise the rights above by contacting us.

California. Under the California Consumer Privacy Act (CCPA/CPRA) you have the rights to know, delete, correct, and opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under California law, and we have not done so in the preceding 12 months. We do not use or disclose sensitive personal information for purposes other than those permitted by law.

To exercise any right, email support@tinywaffles.com. We may need to verify your identity before acting on a request. You may use an authorized agent where the law allows.

11. International transfers

Tiny Waffles is based in the United States, and our service providers may process data in the United States and other countries. Where we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

12. Cookies

The Site itself sets no cookies. Individual apps may use strictly necessary cookies or local storage to keep you signed in or remember your preferences. We do not use cookies for advertising or cross-site tracking, and we honor Global Privacy Control signals where applicable.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here, update the "Last updated" date, and, for material changes, give notice inside affected apps or by email where we have your address. Continued use of the Services after a change means you accept the updated policy.

14. Contact

Tiny Waffles, Inc.
Email: support@tinywaffles.com
Delaware, United States