Canopy

Privacy Policy

Canopy for iOS · Smallwoken Labs
Effective

The short version. Canopy is a journal that keeps your writing on your device. We do not have a server that holds your entries, we have no account to sign into, and we cannot read what you write. The only information that reaches anyone else is what is needed to sell you a subscription and, where you ask for them, a few features that call Apple’s own services.

1. Who we are

Canopy is made by Smallwoken Labs (“we”, “us”). This policy covers the Canopy iOS app (bundle identifier world.smallwoken.canopy) and this website. You can reach us at contact@smallwoken.world about anything in this document. For the purposes of the UK and EU GDPR, Smallwoken Labs is the data controller for the limited personal information described below.

2. What stays on your device

Everything you make in Canopy is written to storage on your iPhone or iPad and stays there. That includes:

None of it is sent to us. We operate no server that receives journal content, and there is no account system, so there is nothing for us to log into and read. If you delete the app, that content is deleted with it unless you have a backup, and we have no copy to restore.

3. Device permissions, and what each one is for

iOS asks your permission before Canopy can use any of the following. You can refuse any of them and keep using the app; the feature that needs it is simply unavailable. All of them can be changed later in Settings → Canopy.

Camera and photo library

Used to put a photo on a page. Images are read into the entry and stored on your device. Canopy does not upload them, and does not scan your library beyond the items you pick.

Microphone and speech recognition

Used for voice notes and dictation. Recording is local. Transcription is not always local: Canopy uses Apple’s Speech framework, and depending on your device, language, and iOS version, Apple may process the audio on its servers to produce the text. That processing is governed by Apple’s Privacy Policy, not this one. If you would rather no audio ever leave the device, do not use dictation — type the entry instead.

Location

Used only when you ask an entry to record where it was written. Canopy requests a coarse position (accurate to roughly a kilometre) and asks Apple’s MapKit to turn it into a place name. That lookup sends the coarse coordinates to Apple, and is again covered by Apple’s privacy policy. Only the resulting name — a city or district, never coordinates — is saved to your entry. Location is requested while you are using the app; Canopy does not track you in the background.

Notifications

Used for writing reminders you set and, if you start a free trial, for a reminder before it converts to a paid subscription. Notifications are scheduled on your device. There is no push server, so we do not learn whether you opened one.

4. Purchases and subscriptions

Subscriptions are sold through Apple’s In-App Purchase system and managed for us by RevenueCat, Inc., which tells the app whether you have an active subscription.

To do that, RevenueCat receives:

We see this as aggregate revenue reporting and, for an individual installation, subscription status. We never receive your payment card or Apple Account credentials — Apple handles payment and does not share them with developers. Apple’s own handling of your purchase is covered by Apple’s privacy policy.

We rely on this processing to perform our contract with you: without it we cannot tell whether you have paid for the features you are asking for.

5. Analytics

Canopy uses PostHog to understand how the app is used — which screens are opened, which features are used, and where the app fails. Events are tied to a random identifier for your installation, not to your identity.

Journal content is never sent as part of an event. We do not record entry text, photos, audio, or place names. You can turn analytics off in Settings → Privacy inside the app, and we ask for your consent before collecting anything where the law requires it.

6. Backups and iCloud

If you have iCloud Backup or encrypted device backups turned on, iOS may include Canopy’s data in those backups. That is a function of your device, under your control in iOS Settings, and governed by Apple’s terms. We have no access to your backups.

7. This website

This site sets no cookies and runs no analytics or tracking scripts. It is hosted by Vercel Inc., which processes standard server logs (IP address, user agent, requested page) to serve the site and protect it from abuse. Fonts are served from Google Fonts, which may receive your IP address when a page loads.

8. Children

Canopy carries a 4+ App Store content rating, which means it contains nothing age-inappropriate. That is a separate question from who the app is for: Canopy is not directed to children under 13, our Terms of Service require that age to use it, and we do not knowingly collect personal information from anyone younger.

If you believe a child under 13 has provided us with personal information, contact us at contact@smallwoken.world and we will delete what we hold. In practice there is very little to delete — as described above, journal content never reaches us.

9. How long anything is kept

Journal content is kept on your device for as long as you keep it — deleting an entry or the app removes it, subject to the Recently Deleted area inside the app and to any backups you have made. Subscription records held by RevenueCat and Apple are retained for as long as needed to service your purchase and to meet tax and accounting obligations. Email you send us is kept until the matter is resolved and then for a reasonable period afterwards.

10. Your rights

Depending on where you live — including under the EU and UK GDPR, PIPEDA in Canada, and the CCPA/CPRA in California — you may have the right to access, correct, delete, or port personal information about you, to object to or restrict its processing, and to withdraw consent.

Because your journals never leave your device, most of these rights are exercised directly in the app: your content is already in your hands, exportable from the app, and deletable by you at any time without asking us. For the limited purchase information described in section 4, write to contact@smallwoken.world and we will respond within the time the applicable law allows. We will need enough information to locate the record — usually your Apple transaction ID — and we may be unable to act on a request we cannot verify.

We do not sell or share personal information as those terms are used in the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. Exercising any of these rights will never cause us to treat you differently. If you are in the EEA or UK and are unsatisfied with our response, you may complain to your local supervisory authority; in Canada, to the Office of the Privacy Commissioner.

11. International transfers

Smallwoken Labs operates from Canada, and the service providers named above (Apple, RevenueCat, Vercel) operate internationally, including in the United States. Where personal information is transferred out of the EEA or UK, it is done under appropriate safeguards such as the European Commission’s standard contractual clauses.

12. Security

On-device content is protected by iOS itself — the device passcode, file-level encryption, and the app sandbox — which is why keeping a passcode set matters more than anything we could do. Data in transit to Apple and RevenueCat is encrypted with TLS. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted to or from the app.

13. Changes to this policy

We may update this policy as the app changes. The effective date at the top always reflects the current version, and material changes will be announced in the app or by a notice on this page before they take effect. Continuing to use Canopy after a change takes effect means you accept the updated policy.

14. Contact

Smallwoken Labs — contact@smallwoken.world. We answer privacy questions at the same address as everything else.