Effective August 10, 2026
App privacy.
This policy covers the AI Agent Assistant: Agentic AI iOS app. The website you are reading has a separate, shorter policy.
Little Tough LLC (“Company,” “we,” “us”) respects your privacy. This policy explains what data the App collects, how we use it, and the choices you have. There is no account system: you never give us a name, an email address, or a password.
1. Information we collect
1.1 Stored on your device
- Anonymous user ID. A randomly generated identifier (UUID) stored in your device’s Keychain. It is not linked to your name, email, or any account.
- Usage data. Message counts, daily limits, and subscription status, stored locally in the Keychain.
- Conversation history. Your conversations with agents are stored on your device, not on our servers.
1.2 Processed by our servers
- Message content. When you send a message it is transmitted to our cloud servers, which relay it to the AI model provider to generate a response. Messages are processed in real time and are not retained on our servers after the response is delivered. They are not used to train models.
- Anonymous user ID. Sent with requests for rate limiting and subscription verification. It cannot be used to identify you personally.
1.3 Collected by third parties
- Google Firebase. Our cloud infrastructure provider. Firebase Cloud Functions process API requests, Remote Config delivers configuration, and Firebase Analytics (Google Analytics for Firebase) records in-app product events — screens viewed, agents selected, conversations started, paywall and purchase steps — together with an app-instance identifier and coarse device and region information. We use this only to understand which parts of the App work. Advertising features and Google Signals are not enabled. See Firebase privacy and security.
- RevenueCat. Manages subscription and purchase state. Receives your anonymous user ID and transaction data from Apple. See RevenueCat’s privacy policy.
- Apple App Store. Processes all payments and handles billing information under Apple’s privacy policy. We never see your payment details.
2. What we do not collect
We are committed to minimal collection. We do not collect:
- Your name, email address, or phone number
- Your location data
- Your contacts, photos, or other device data
- Device advertising identifiers (IDFA)
- Data used for advertising, ad targeting, or cross-app tracking
- Biometric data
The App does not track you across apps or websites owned by other companies, and shows no ads.
3. How we use information
| Data | Purpose |
|---|---|
| Anonymous user ID | Rate limiting, subscription verification, abuse prevention |
| Message content | Generating AI responses (processed in real time, not stored) |
| Purchase data | Granting subscription access and credit balances |
| Product analytics | Understanding which features are used, and fixing what is broken |
| Local usage data | Enforcing free-tier limits and showing your usage |
4. Notifications
The App may ask permission to send notifications, which it uses to tell you about a limited-time offer or a change in your usage allowance. Notifications are scheduled on your device — we do not need or collect a push token to send them, and you can turn them off at any time in iOS Settings.
5. Data retention
- Message content: not retained on our servers; processed transiently to generate a response.
- Anonymous user ID: exists as long as the App is installed. Deleting the App removes it from your device.
- Subscription data: retained by RevenueCat and Apple under their own policies.
- Analytics events: retained by Firebase Analytics under Google’s retention settings, in aggregate and tied only to an app-instance identifier.
- Local data: stored in your device Keychain until you delete the App or reset Keychain data.
6. Data security
- All network communication uses HTTPS/TLS encryption.
- API keys and secrets live in a server-side secret manager, never in the App binary.
- Local data is stored in the iOS Keychain, encrypted and protected by your device passcode.
- Server-side rate limiting prevents abuse.
7. Children’s privacy
The App is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has used the App, contact us and we will take appropriate action.
8. Your rights and choices
- Delete local data. Uninstall the App to remove everything stored locally, including your anonymous ID and conversation history. Uninstalling also ends all analytics collection.
- Manage subscriptions. Cancel or change subscriptions in your Apple ID account settings.
- Request deletion. Email us to request deletion of any server-side data associated with your anonymous ID.
If you live in the European Economic Area, the United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or CCPA — including access, correction, and deletion. Contact us to exercise them.
9. International data transfers
Your data may be processed on servers in the United States. By using the App you consent to that transfer, which may involve data-protection laws different from those in your jurisdiction.
10. Third-party links
The App may link to third-party websites or services. We are not responsible for their privacy practices, and we encourage you to read their policies.
11. Changes to this policy
We may update this policy. The effective date above always reflects the current version, and continued use of the App after a change constitutes acceptance.
12. Contact us
Questions about this policy or our data practices: apps@littletough.com.
Little Tough LLC, 5830 E 2nd St, Ste 7000 #13875, Casper, WY 82609, USA.
