Privacy

Last updated 28 October 2026

The short version.

I'm Aniket, and I make Little Space on my own. I built it for my own notes first, so I wanted it to be the kind of app I'd trust with them. This page explains exactly what happens with your data, in plain words. If anything is unclear, email me and I'll answer.

Who's responsible

Aniket Parihar
Street and number
Postcode Berlin, Germany
hello@littlespace.pro

The app

Your notes

Everything you write is saved in one file on your Mac. That file is encrypted with AES-256. The key that unlocks it is created on your Mac the first time you open the app and kept in your Mac's Keychain, not next to the file. Nothing you write is sent to me or anyone else.

The app keeps a short activity log on your Mac to help fix sync problems. It never contains what you wrote, only things like "copied a sticky to Notes" and error codes. You can open it from Settings and see for yourself.

Voice

When you press the mic or hold the voice shortcut, your Mac turns your speech into text using Apple's built-in speech recognition. Little Space asks for it to run on your Mac only. Nothing is recorded or saved, and no audio leaves your Mac. The first time you use a language, macOS downloads that language from Apple once.

iPhone sync with Apple Notes

This is off until you switch it on in Settings. When it's on, Little Space copies your stickies into a folder called "Little Space" in the Notes app on your Mac, and reads changes back from that folder. It doesn't read or change any of your other notes. You can keep any sticky out of it with "Keep on this Mac only".

From there, Apple's iCloud brings the folder to your iPhone like any other note. That copy is stored by Apple under your Apple account and Apple's privacy policy, not by me. By default Apple encrypts iCloud Notes but holds the keys. If you turn on Apple's Advanced Data Protection, your notes are end-to-end encrypted and only your devices can read them. Turning sync off stops the copying.

Permissions the app asks for

You can take either back any time in System Settings, under Privacy & Security.

What the app never does

No account, no sign-in, no analytics, no crash reports, no ads, no tracking of any kind. The app has no code for talking to the internet. Links you save in a note open in your own browser when you click them.

This website

The site has no cookies, no analytics, no tracking pixels and no fonts or scripts loaded from other companies.

The demo at the top remembers two small things in your browser while the tab is open: whether you've found the tabs on the edge, and whether you skipped the tour. They stay in your browser, are never sent anywhere, and disappear when you close the tab.

The site is hosted by OpenAI's website hosting and delivered through Cloudflare. Like any web server, they briefly log your IP address and browser type so they can send you the page and keep the site safe. How long the host keeps these logs. I don't use these logs to find out who you are, and I don't look at them.

Buying Little Space

Payments are handled by Polar, which sells Little Space on my behalf (as the "merchant of record") and takes care of VAT and receipts. When you buy, Polar collects your name, email, payment details and country to take the payment and work out tax. I never see your card details. Polar's own privacy policy explains how it handles them.

Polar shares your name, email, country and order with me, so I can send you the download, help you if something goes wrong, and give refunds. I keep this for as long as tax law requires, which in Germany is usually up to 10 years for sales records. I don't send newsletters and I don't sell or share your details with anyone.

The legal basis is that I need this to sell you the app and help you with it (Art. 6(1)(b) GDPR), and to meet tax rules (Art. 6(1)(c) GDPR).

Email

If you email me, I use your email only to reply. I delete the conversation once it's done, unless it's about a purchase that I need to keep for tax reasons.

Your rights

You can ask me what I have about you, to correct it, to delete it, to limit how I use it, to object, or to get a copy. Since I hold so little, this is usually quick: just email me. You can also complain to a data protection authority. Mine is the Berlin Commissioner for Data Protection and Freedom of Information.

Changes

If something here changes, I'll update this page and the date at the top. If it's a big change, like the app starting to send anything anywhere, I'll say so clearly on the website first.