Privacy Policy

Little Monk: Daily Planner · Last updated 3 November 2026

1. Who we are

Little Monk: Daily Planner (“Little Monk”, “we”, “us”) is an app for iPhone, iPad, Mac and Apple Watch made by Creative Sparks. For anything about this policy or your data, email support@littlemonk.app.

2. Using Little Monk without an account

You can use every planning, focus and capture feature without signing in. Your tasks, focus sessions (including outcomes, distractions, reflections and parked thoughts), insights and captures (quotes, notes, links, ideas and their sources) are stored only on your device. We cannot see them.

On your device, Little Monk also:

• shares a short summary of your day (task titles, times and the running session) with its widgets and Live Activities on iPhone, using storage that stays on the device;
• adds task titles to the on-device Spotlight index and offers actions to Siri and Shortcuts, so you can find and act on tasks from the system;
• keeps your settings on the device.

Without an account, the only data that leaves your device is the usage and ad-measurement data in section 8, which never includes what you write, and the purchase records in section 10.

3. Permissions you can grant

Each permission is optional and can be changed at any time in your device’s Settings.

• Calendar and Reminders. Little Monk reads the day’s calendar events and your reminders with due dates so it can show them beside your plan. It never edits your calendar events. A reminder only changes when you tick it or move it yourself. This data is never uploaded to our servers or sent to any AI service.
• Microphone and speech recognition. Used when you dictate instead of typing. Speech is turned into text on your device; audio is never saved or sent to us. On recent systems, Apple may download a speech model to your device the first time.
• Camera and photos. Used to scan book pages and documents. Text is recognised on your device. Images are held in memory while you choose the text you want and are never saved or uploaded. Only the text you choose to keep is used.
• Notifications. Reminders for task start times, the end of planned time and planning your day are scheduled on your device. We do not use push notifications and do not collect device tokens.

4. If you create an account

An account is optional. It is needed for sync between devices and for features that use the cloud.

• Account details: your email address and password. Passwords are stored only in hashed form by our authentication provider. We send account emails, such as confirming your address and resetting your password, from no-reply@littlemonk.app.
• Your library, if you turn on sync: signing in uploads nothing by itself. When you choose to connect, your tasks, focus sessions, insights and captures, with the details listed in section 2, are stored on our servers and kept in step across your devices. We keep earlier versions of each item so a mistake or a conflict between devices never silently overwrites your writing.
• Not uploaded: Calendar and Reminders data, your device permissions, notification schedules and audio or images.

5. Little Monk on the web

Little Monk on the web (app.littlemonk.app) is part of your account. It works only when you are signed in, and using your library there needs Little Monk Pro.

• What it stores in your browser: sign-in cookies, needed to keep you signed in. No analytics, advertising or tracking cookies.
• Your library: the web app reads and saves your library directly on our servers, in the same cloud copy that your devices sync with. It does not save your library in your browser’s storage.
• Your time zone: the first time you open the web app, it saves your browser’s time zone to your account so plans made on the web, and by assistants you connect, use your local time.
• Hosting logs: the web app is hosted by Vercel. Like any web host, Vercel records each request’s time, address (URL path), status, duration and your IP address, kept for a short period to run and secure the service. Our own server logs record the request status, timing and which connected assistant made a request. They never contain what you write.

6. AI assistants you connect

You can connect Little Monk to an AI assistant (for example Claude, ChatGPT, Grok or Claude Code). Connecting is your choice and needs Little Monk Pro.

• How access works: when you connect an assistant, you sign in to Little Monk and approve the request on our page. The assistant then receives short-lived sign-in tokens that let it use your library through Little Monk’s tools. It never receives your password. Each account can reach only its own library.
• What an assistant can do: read your day, tasks, deep-work sessions (including their reviews), insights and captures; add and edit tasks and captures; plan or move deep-work sessions; mark tasks done when you ask; and delete items with the same protections as the app. It cannot start or end a session timer, review a session, change a repeat rule, or delete a session’s recorded time without your confirmation.
• What the assistant’s provider receives: whatever the assistant reads from Little Monk while you use it becomes part of your conversation with that assistant and is handled under that provider’s own privacy policy (for example Anthropic for Claude, OpenAI for ChatGPT, xAI for Grok). We do not control how they store it. Connect only assistants you trust with that information.
• What we keep: the list of assistants you have approved, when you approved them and the access they asked for, so you can see and remove them. Changes an assistant makes are saved in your library like any other change, including the version history described in section 4.
• Disconnecting: remove an assistant at any time on app.littlemonk.app › Account › Connected assistants. It can no longer renew its access, and the token it already holds stops working when it expires, normally within an hour. Changes it already made are not undone.

7. AI features

Little Monk can turn a brain dump into a draft plan, sort scanned text and answer planning requests (“Ask Monk”). You always review the result before anything is saved.

• On your device first. When Apple Intelligence is available, these requests run on your device.
• Third-party AI (OpenAI). If Apple Intelligence is unavailable or can’t finish, and you are signed in, the request is sent through our server to OpenAI. This is controlled by Settings › Ask Monk › Third-party AI, which is on by default; turning it off stops these requests.
• What is sent: the text you type, dictate or select from a scan (up to 12,000 characters), and for planning requests, your request, the previous reply, your time zone, and the titles, durations and times of the tasks involved and your free time slots.
• What is never sent: your email address or account identifiers, audio, images, calendar data, your notes and reflections, or your full library.
• What we keep: our server does not log or store the content of requests or replies. For each request it records only your account ID, a request ID, the type of request and the time, to apply fair-use limits.
• What OpenAI keeps: we ask OpenAI not to store requests. OpenAI processes them under its API terms, which say API data is not used to train its models by default and may be retained for a limited time for abuse monitoring. See OpenAI’s privacy policy.

8. Usage analytics and ad measurement

To learn which features help and see which of our ads bring people to Little Monk, the iPhone app uses these services. The Mac app sends no usage analytics or ad-measurement data.

• Mixpanel (usage analytics): which screens and features are used, and when, for example finishing onboarding, creating a first task or starting a focus session.
• Google Analytics for Firebase (Google ad measurement): app opens and a few key events, such as finishing onboarding, creating a first task or creating an account, so we can measure our Google Ads campaigns.
• AppsFlyer (ad measurement, iPhone): whether an install or a key event, such as finishing onboarding, creating a first task or creating an account, followed one of our ad campaigns, and how often the app is opened.

These services receive random app and installation identifiers, the app’s vendor identifier, device model, operating system, app version, language, time zone, and your IP address, which they use to estimate your country or city. If you are signed in, analytics may be linked to a random account ID, never your email address.

What they never receive: your tasks, notes, captures, quotes, reflections, scans, AI requests, Calendar or Reminders data, or your email address.

Advertising identifier and tracking permission: after you finish setting up the app, and only while Share app usage is on, iOS asks once whether Little Monk may track you across other companies’ apps and websites. If you allow it, AppsFlyer, Google (Firebase) and RevenueCat receive your device’s advertising identifier, which helps match an install or subscription to the ad campaign that led to it. If you ask the app not to track, iOS does not give us the advertising identifier, and AppsFlyer measures our campaigns through Apple’s privacy-preserving ad attribution (SKAdNetwork) instead. You can change your answer at any time in iOS Settings › Privacy & Security › Tracking. This permission covers tracking only: usage analytics continue unless you turn off Share app usage.

AppsFlyer reports results back to the ad networks we advertise on, such as Google and Meta, only to measure our own campaigns. We do not use this data to show you ads in other apps, and the app itself contains no ads.

Your choice: turn off Settings › Privacy › Share app usage on iPhone and the app stops sending usage analytics and ad-measurement data to Mixpanel, Google (Firebase) and AppsFlyer.

9. This website

littlemonk.app sets no cookies and has no ads. To see how many people visit and which download buttons they use, it uses:

• Cloudflare Web Analytics, which counts page views without cookies or identifiers.
• Mixpanel, which counts clicks on the download buttons: which button, on which page, and whether the screen was phone-sized. No identifier is created or stored in your browser, and we ask Mixpanel not to use your IP address to estimate your location.

Like any website, these services receive your IP address and browser details when the page loads. The “Try it” sample on the home page runs only in your browser: nothing you type there is sent anywhere.

10. Purchases

Purchases and subscriptions are processed by Apple; we never see your payment details. We use RevenueCat to know which subscription you have and to restore it on your devices. RevenueCat receives a random app user ID (or your account ID if you’re signed in), your purchase and subscription history from Apple, the product, price, currency and App Store country, and basic device information. On iPhone, unless you turn off Share app usage, RevenueCat also receives the AppsFlyer installation ID and the Mixpanel ID so purchases can be matched to the campaign that led to the install and to how the app is used, together with the app’s vendor identifier and, only if you allowed tracking, the advertising identifier.

11. How we use your data

We use the data described in this policy to provide the features you ask for (your account, sync, AI requests, purchases and account emails), to understand and improve the app, to measure our own advertising, and to keep the service secure and within fair-use limits. We do not sell your personal information, we do not show ads in the app, and we never use what you write for analytics or advertising. Where data protection law requires a legal basis, we rely on providing the service you requested, on our legitimate interests in improving the app, keeping it secure and measuring our marketing, and, where the law requires it, on your consent, which you can withdraw in Settings.

12. Service providers

Each provider processes data on our behalf, under terms that require them to protect it:

• Supabase: account sign-in, approving assistants you connect, database and server functions, hosted in the Mumbai, India region.
• Vercel: hosts Little Monk on the web and the server that connected assistants use.
• Amazon Web Services (Amazon SES): sending account emails, in the Mumbai, India region.
• OpenAI: the optional third-party AI described in section 7, processed in the United States.
• Mixpanel: usage analytics, and download-button counts on this website.
• Cloudflare: hosts this website and counts its page views.
• Google (Firebase): ad measurement for our Google Ads campaigns.
• AppsFlyer: ad measurement on iPhone.
• RevenueCat: subscription and purchase records.
• Apple: the App Store, payments, on-device Apple Intelligence and speech models, under Apple’s own privacy policy.

Because of this, your data may be processed outside the country where you live, including in India, the United States and the European Union. We do not share your data with anyone else unless the law requires it.

13. How long we keep data, and deleting it

• On your device: until you delete it or remove the app.
• On our servers: for as long as you have an account. Items you delete are marked as deleted and their earlier versions are kept for recovery until you delete your account.
• Analytics and ad-measurement data: kept by those providers under the retention settings we choose, only as long as we need it to understand app usage, fix problems and measure campaigns, then deleted or reduced to totals that don’t identify anyone.
• Purchase records: kept for as long as needed to provide your subscription and meet tax and accounting obligations.
• Connected assistants: until you disconnect them or delete your account. Conversations you had with an assistant are kept by that assistant’s provider under its own policy.
• Delete your account in the app at Settings › Account & sync › Delete account, or on the web at Account › Delete account. This permanently deletes your synced library, its version history, your AI request records, the assistants you connected and your account. The copy of your library on your devices is kept unless you delete it. Email us to also delete analytics, ad-measurement or purchase data linked to your device or account.
• Export your library at any time, signed in or not, at Settings › Account & sync › Export library.

14. Your choices and rights

You can use Little Monk without an account, change permissions in your device’s Settings, turn off Share app usage and Third-party AI, disconnect sync and connected assistants, export your library and delete your account. Depending on where you live, including under the GDPR, UK GDPR, California law and India’s Digital Personal Data Protection Act, you may also have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict its use, to opt out of the sharing of personal information for advertising measurement, and to complain to your local data protection authority. To use any of these rights, email support@littlemonk.app. We will reply within 30 days.

15. Security

Data travels between the app and our servers and providers over encrypted connections (HTTPS). Each account can only read and change its own records. Your sign-in session is stored in your device’s Keychain. On the web, it is kept in a cookie for app.littlemonk.app only, and connected assistants use short-lived tokens that you can revoke. No system is perfectly secure, but we keep what we collect to the minimum the features need.

16. Children

Little Monk is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, email us and we will delete it.

17. Changes to this policy

If we change how we handle your data, we will update this page and the date at the top. For significant changes, we will also let you know in the app before they take effect.

18. Contact

Creative Sparks · support@littlemonk.app