Privacy Notice

Who is responsible

Little Trials is provided by Juan Pablo Lopez Guzman, a sole trader based in the United Kingdom trading as Little Trials. He is the data controller for personal data processed through the service. Contact: hello@littletrials.com.

What we collect and why

• Account details (email, display name, sign-in credentials or Google sign-in) — to create and secure your account. Basis: contract.
• Experiments, logs and notes — to provide the notebook and, if you ask, the AI reflection coach. Basis: contract.
• Membership status (plan, renewal dates, environment) — to provide Lab access. Basis: contract.
• Technical data (IP address, device and browser details, error logs) — for security, fraud prevention and fixing problems. Basis: legitimate interests.
• Support messages — to answer you. Basis: legitimate interests.

When signed out, experiments are stored only in your browser. We don't sell your data or use it for advertising.

Who we share it with

• Service providers who host the app, database and sign-in, and who provide the AI model behind the reflection coach (only the experiment you ask about is sent).
• Paddle, our Merchant of Record, for selling Lab, managing subscriptions, payments, tax compliance and invoicing.
• Professional advisers, such as accountants and lawyers.
• Authorities, where required by law.

International transfers

Some providers process data outside the UK/EEA. Where they do, we rely on adequacy decisions or standard contractual clauses.

How long we keep it

We keep account data while your account is active and delete or anonymise it within 30 days of account deletion, except records we must keep by law (such as tax records).

Your rights

Under UK and EU data protection law you can request access, correction, erasure, restriction, portability, or object to processing, and withdraw consent where we rely on it. Email us and we'll respond within one month. You can complain to the Information Commissioner's Office (ico.org.uk) or your local authority.

Security

We use appropriate technical and organisational measures, including encrypted connections, access controls and per-account data isolation.

Cookies and storage

We use only essential browser storage to keep you signed in and save signed-out experiments. We don't use analytics or marketing cookies. You can clear this storage in your browser settings.