Privacy Policy

Soft Structure is made by Little Lights LLC (“Little Lights,” “we,” “us”), a company based in the United States. This Privacy Policy explains how we handle information when you use the Soft Structure apps for iPhone, iPad and Android, and the softstructure.app website (together, the “Services”). Little Lights LLC is the controller of the personal information described here.

You need an account so your plans can follow you to another device. You can sign in with Apple, with Google, or by asking us to email you a code. There is no password to choose, so there is none for us to hold. What we get is your email address and an account number.

If you use Apple’s Hide My Email, the address we get is the one Apple makes for you, and that is all we ever see.

What you write lives on your device. Your days, routines, to‑dos, notes, moods and journal entries are stored on the phone or tablet you wrote them on. Signed out, none of it is sent to us at all.

Signing in syncs your plan. Your days, routines, to‑dos and notes follow you to another device, because that is what signing in is for. You can turn it off in Settings.

Your diary is a separate choice, and it starts off. What you write in the journal, and how you record your mood, stay on the device until you say otherwise. The app asks you once, the first time you write an entry, and remembers a no. This is asked separately because it is health information and you should be able to sync one without the other.

You can change your mind about either, in either direction, at any time in Settings.

Encryption. Anything you do sync is encrypted in transit and at rest. We use it only to provide the Services, and we never sell it or use it for advertising.

Where it lives. Our database and sync provider, Supabase, Inc., stores it on servers in the United States. See International transfers.

Deleting it. You can delete any item at any time, and you can delete your whole account from inside the app. When you delete your account, we remove your plans and account record from our systems, and from backups within 30 days.

If you allow it, Soft Structure reads events from the calendars already set up on your device, including Google, Outlook and Apple calendars, so your day appears in one place. Those events are read on your device to draw your day. They are not sent to us, and they are not stored on our servers unless you choose to add one of them to your own plan and you have syncing turned on.

Soft Structure can also write your plan to a calendar if you ask it to. It writes to one calendar that it creates, called “Soft Structure”, in an account you pick. It never writes into a calendar you already had, so nothing it adds can be confused with something you added yourself, and you can hide the whole thing with one tick box in your calendar app.

You can turn calendar access off at any time in your device settings, and the app keeps working without it.

If you allow it, Soft Structure reads one thing from Apple Health: your step count. It is shown on the Walking row of your weekly movement plan so you can see your week at a glance.

Your step count stays on your phone. It is read there, drawn on the Walking row there, and that is as far as it goes — including when syncing is on. The app has no way to send it.

It is read‑only. We ask Apple Health for your step count and ask for no permission to write. Nothing Soft Structure does can put anything into your Health data or change what is already there. We never use health data for advertising, never sell it, and never use it to train anything.

Two things worth being plain about. The steps in Apple Health come from your iPhone, and from an Apple Watch if you wear one. A ring or a strap made by another company appears in Health only if its own app puts it there, and the ones we know of do not write step counts — so we cannot show you those. And if you say no, the row simply shows a dash: Apple does not tell an app that a read was refused, so we cannot tell the difference between “no” and “no steps recorded”, and we do not pretend to.

You can change or withdraw this at any time in the Health app, under Sharing, then Apps and Services.

This is the one exception to everything else on this page.

Everywhere else, dictation happens on your phone: Soft Structure will not record you unless your phone can turn speech into text by itself, which is why the microphone is simply not there on devices that cannot. Nothing you type or speak inside the app leaves your phone unless you turn syncing on.

Siri is different, and no app can make it otherwise. Siri decides for itself whether to transcribe on your device or send the audio to Apple, and there is no setting an app can use to force the first. So an entry you dictate through Siri may leave your phone and be processed by Apple under Apple’s own privacy policy.

Because of that, it is off until you turn it on, in the app, and the app checks that switch every time: turning it off stops the words leaving, not just the button appearing. What goes through Apple is only the entry you dictated that way. We never receive the audio, and we never receive the text: Siri hands the words to the app on your phone, which files them like anything else you typed.

There are two kinds of sharing in the app and they work differently, so they are both here.

1. Sending a list, a week, or a menu. You can send a workout or a week from Move, your grocery list or the week’s menu from Nourish. In each case the app shows you the text first, then hands it to your phone’s own share sheet, and you choose who gets it — the same as any message you send yourself.

What travels is the list in front of you, and only that. A grocery list is the shopping; a week is workout names and times. Your day, your journal, your notes, your step count and your phone’s own calendar stay where they are.

We do not send it for you, and nothing is kept on our side to make it work.

2. A calendar invite. You can send a workout as a proper calendar invite. It is a file your phone makes and your share sheet sends; it lands in whatever calendar they already use, and they need no app, no account and nothing from us. We do not see it and we keep nothing about it.

Dictation

If you dictate instead of typing, your device’s own speech recognition turns your speech into text, on your device. We never receive or store any audio. In fact the app refuses to record at all unless your phone can transcribe without sending anything away, which is why the microphone button is simply not there on devices that cannot. The text you end up with is treated like anything else you write. You can turn microphone access off at any time in your device settings.

Asking Siri to write something down is the one exception. See Asking Siri to write something down.

Recipes you save

A picture you put on a recipe is kept on your phone, in the app’s own storage. It is not sent to us and it does not appear on your other devices, so it goes if you delete the app or clear its data. The recipe’s name and ingredients are kept with the rest of your plan, and everything above applies to them.

The one time a picture travels is when you ask the app to read a recipe off a photograph. That is described under AI features, and we ask you before the first one goes.

Purchases

Purchases and subscriptions are processed by Apple or Google, depending on where you downloaded the app. We never see your payment card details. Apple or Google shares limited transaction information with us, such as which product was bought and whether the subscription is active.

To keep track of whether your subscription is current, we use a company called RevenueCat, which sits between the app and the two stores. It receives the purchase receipt your phone gets from Apple or Google, the type of device, the app version, and the country of your store account. It also receives an anonymous identifier it makes up for your installation. That identifier is not your name, your email, or anything you have typed into the app.

Nothing you write in Soft Structure goes to RevenueCat. Your day, your notes, your moods and your medications stay on your phone. The only thing that leaves is the fact that a subscription was bought, so the app knows to let you in. RevenueCat is a company in the United States, so for customers in the UK and Europe this is a transfer outside your own country — see International transfers.

Analytics and crash reporting

Soft Structure does not currently collect any analytics or crash reports. There is no analytics or crash‑reporting software in the app at all.

We may add crash reporting and anonymous usage counts later, to find out what is broken. If we do, it will be behind a switch in Settings that you can turn off, turning it off will stop every such call rather than merely hiding it, it will never include the content of your plans, your diary, your notes or your health information, and this Policy and our App Store privacy labels will be updated before it ships.

When you write to us

If you email support, we keep your message and our reply so we can answer you and so we remember the conversation if you write again.

Soft Structure asks before using certain features of your device. Every one of them is optional, is used only for the purpose described, and can be changed at any time in your device’s Settings. The app keeps working without any of them.

• Calendars — to show the events already on your device alongside your plan, and, if you ask, to write your plan into a calendar the app creates. See Calendars.
• Microphone — only while you are dictating.
• Speech recognition — to turn that dictation into text on your device. No audio reaches us.
• Apple Health — read‑only, step count only, for the Walking row of your movement plan. See Apple Health and your step count.
• Camera — when you photograph a recipe, or take a picture to put on one.
• Photos — when you import a screenshot of a recipe, or pick a picture for one. The app only ever sees the picture you choose.
• Notifications — only if you turn them on, to remind you of something on your day or to tell you before a free trial ends.

What the app does not ask for: your location, your contacts, Bluetooth, or permission to track you across other companies’ apps and websites.

They run only when you choose to use one, and the app asks your permission the first time. You can withdraw it at any time in Settings.

How a request travels. It goes to a small service we run on Cloudflare, which exists so that our key to the AI provider is never inside the app. That service checks you are signed in, counts your usage against your monthly allowance, passes the request to Anthropic, PBC and passes the answer back.

That service keeps nothing you send or receive. It writes down one number — how many words a request used — so your monthly allowance can be counted.

The exception is yours to make. If an answer is wrong and you tap to report it, that answer is kept so a person can read it. Just the answer: what you asked is not sent with it.

What each feature sends. The braindump sends what you wrote in the box and the shape of your day. Estimating how long a task takes sends the task’s name. “Make me a plan” on the Move screen sends only which parts of your week are free, as times — no names, nothing from your to‑dos, your diary, your notes or your step counts. If what you write in the braindump is about food, the names of the recipes you have saved go with it, so the planner can put your own dishes on your menu. The names only, never the ingredients, the steps or your pictures, and never when you are writing about anything else.

Photos of recipes. Take a photo of a recipe, or import a screenshot of one, and the app turns it into a recipe you can save, cook from, and build a grocery list from. Your phone asks to use your camera, or your photos, the first time.

To read the words, the picture is sent to Anthropic and the recipe comes straight back for you to check before anything is saved. Afterwards the picture stays on your phone with the recipe.

Your content is not used to train AI models, and we do not keep it or use it for advertising.

AI answers can be wrong. Please do not rely on them for medical, mental health, legal or financial decisions.

Soft Structure shows no ads, and we do not sell your personal information.

The app contains no advertising or tracking software of any kind, and it does not collect your device’s advertising identifier. It does not ask for permission to track you, because it has nothing to track you with.

If we ever advertise the app elsewhere and want to know whether those ads worked, that would mean sharing your advertising identifier and basic events such as installing or subscribing — never anything from your plans, your diary or your health information. We would have to ask your permission first, and this Policy and our App Store privacy labels would be updated before any of it happened.

• To provide the Services, including your account and syncing across your devices.
• To run the AI features you choose to use.
• To process purchases and subscriptions.
• To respond to your messages and provide support.
• To understand how the app performs and fix problems.
• To measure any ads we run, with your permission where required.
• To keep the Services secure and prevent misuse.
• To comply with legal obligations.

We share information only with:

• Anyone you send something to. A workout, a week, a grocery list, a menu or a calendar invite — whatever you chose to send. None of it passes through us. See Sending something to someone.
• Service providers who process it on our behalf and under contract: Supabase, Inc. (database, accounts and syncing), Apple and Google (sign‑in, payments and app distribution), RevenueCat, Inc. (keeping track of whether your subscription is current), Anthropic, PBC (AI features, when you turn them on), and Cloudflare, Inc. (our website, and the small service that holds our AI key).
• Authorities or others when required by law, or to protect the rights, safety and security of our users, Little Lights, or others.
• A successor business, if Little Lights is involved in a merger, acquisition or sale of assets. This Policy will continue to apply.

We have no advertising partners and no analytics provider, because the app does not do either of those things. If that changes, this list changes first.

This section is our Consumer Health Data Privacy Policy under laws such as Washington’s My Health My Data Act and similar laws in Nevada, Connecticut, and other states.

What it covers. Information you enter about your wellbeing — self‑care, rest, mood, what you write in your journal, your movement and the notes you keep about it — may be considered “consumer health data”. Your step count from Apple Health is health data too.

Where it is. All of it starts on your device and stays there. Signing in does not send it. It reaches our servers only if you separately turn syncing on, and the diary — what you write and how you record your mood — has its own switch, asked for separately from everything else, precisely because it is health information. Your step count is never sent at all, whatever you have turned on.

How it is used and shared. Anything you do sync, we use only to provide the Services: syncing between your devices, running an AI feature you have asked for, or answering a message you send us. It is encrypted in transit and at rest. We share it only with our sync provider, Supabase, Inc., which stores it for us, and — for AI features you turn on — with Anthropic, PBC. We never sell consumer health data and never share it with advertising partners.

Your rights. You can see it, delete it, withdraw your consent, and ask for a list of the third parties we have shared it with, by emailing support@softstructure.app or by deleting your account in the app.

United States

Depending on the state you live in, including California, Colorado, Connecticut, Oregon, Texas, Utah, Virginia, and others, you may have the right to:

• Find out and get a copy: learn which personal information we have on you and receive it.
• Fix it: have mistakes corrected.
• Erase it: have your information deleted.
• Take it with you: receive it in a format you can move elsewhere.
• Opt out: say no to the “sale” of personal information, to “sharing” for cross-context behavioral advertising, and to targeted advertising.

We do not sell personal information for money. Some state laws may treat advertising measurement with partners as “sharing” or “targeted advertising.” You can opt out by declining or turning off tracking in your device settings, or by emailing us.

Europe and the United Kingdom

If you are in the European Economic Area, Switzerland, or the United Kingdom, you have the right to:

• See your data: request a copy of the personal information we have about you.
• Fix it: have mistakes corrected.
• Erase it: have your information deleted.
• Pause it: have us stop using your information while a concern is being resolved.
• Take it with you: receive your information in a format you can move to another service.
• Say no: object where we rely on legitimate interests.
• Change your mind: withdraw consent you have given, such as for AI features or tracking.
• Raise a concern: lodge a complaint with the data protection authority where you live.

How to make a request

Email support@softstructure.app, or delete your account from within the app. If you are in the EEA or the UK, you can also contact our representatives. We will respond within the time required by law. We may need to verify your identity, and you may use an authorized agent where the law allows. If we decline your request, you can appeal by replying with the subject line “Appeal”. We will not discriminate against you for exercising your rights.

• Contract: to provide your account, sync your plans, and deliver your purchases.
• Consent: for AI features, advertising tracking, calendar access, and the processing of health-related information. You can withdraw consent at any time.
• Legitimate interests: for anonymous analytics, crash reporting, security, and responding to your messages, balanced against your rights.
• Legal obligation: where we must keep or disclose information by law.

Our website does not track visitors across other sites, so it responds the same way whether or not your browser sends a Do Not Track or Global Privacy Control signal. In the app, tracking is controlled by your device’s tracking and advertising ID settings.

We keep what you have chosen to sync, and your account information, for as long as your account exists. If you delete an item it is removed from our systems, and from backups within 30 days. If you delete your account, the same applies to everything in it — and because everything is tied to your account record, removing that record removes the lot.

If an account is inactive for two years, we delete it and tell you first by email.

Counts of how much AI allowance you have used are kept so the allowance can be counted; they contain no content. An answer you report as wrong is kept until it has been looked at. Anything you send us by email is kept as long as needed to answer you.

Anything that never reaches us is never kept by us: whatever you have not synced, the pictures on your recipes, and your step count. A photograph you ask the app to read is the one that does travel, and it is not kept either — see AI features.

We use reasonable technical and organizational measures to protect personal information, including encryption in transit and at rest, access controls, and providers who meet recognized security standards. No method of transmission or storage is completely secure, but we work to protect your information and to limit who can access it.

Little Lights is based in the United States, and our providers process information in the United States and other countries. Where we transfer personal information from the EEA, Switzerland, or the UK, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

Because we are based outside the European Economic Area and the United Kingdom, we are appointing representatives in both, who you will be able to contact about this Policy or your rights instead of contacting us directly. Their names and addresses will appear here once they are in place.

Until then, and at any time afterwards, you can reach us directly at support@softstructure.app, and we will answer.

Soft Structure is not directed to children under 13, and we do not knowingly collect personal information from them. In the EEA and UK, people under 16 should use AI features and allow tracking only with a parent’s consent where local law requires it. If you believe a child has provided us with personal information, contact us at support@softstructure.app and we will delete it.

Soft Structure is a planning and wellbeing tool. It is not a medical device and does not diagnose, treat, cure or prevent any disease or condition, or provide medical advice. It does not tell you when to take anything: if you put medication in your day, the time is the one you chose, and your label and your prescriber are the only guidance that counts. Always seek the advice of a qualified health professional with any questions about your health.

We may update this Privacy Policy from time to time. We will post the new version on this page and update the date at the top. If we make significant changes, we will let you know in the app or by other appropriate means before they take effect.

Little Lights LLC
support@softstructure.app