What you read stays on your phone.

Small Print reads your screen to protect you, so we've kept this short and plain. Last updated 1 October 2026.

The short version: the app never sends the text of the pages you read, or anything you type, anywhere by itself. There are no ads, no tracking and no accounts. A few things go online only if you choose: online shop checks (a shop's web address, and our warning list), a report you send, anonymous totals if you switch on sharing, and a feedback email if you send one. Each is explained below.

What the app reads, and why

What	Why	What's kept
Text on your screen (accessibility service)	To spot subscription wording on the page you're viewing and warn you.	Nothing saved. The last page checked is held in memory only, for the Diagnostics panel.
Site names and prices it warned you about	To show "Recently spotted", fill in cancellation letters, and remind you not to use a service you're cancelling.	On your phone, most recent 15 sites.
Email addresses shown on a flagged page	To suggest who to send your cancellation letter to.	On your phone, up to 3 per site.
Notifications (only if you turn on bank & message checks)	To spot scam texts and messages, a small payment to a new company, or a reply to your cancellation email.	Only the names of shops you've paid, and a short note of scam messages it warned you about. Message text is never saved.
Which apps can read your screen or notifications	To tell you when another app gets this access, which is how banking malware works.	The names of those apps, and the ones you've said you trust.
A family member's name and number (only if you add one)	To offer a one-tap text or call after a serious warning.	On your phone. Nothing is sent unless you tap Send in your own messaging app.
Your name and email (only if you type them)	To fill in cancellation letters.	On your phone, until you change them or uninstall.
A shop's web address (only if you turn on online shop checks)	When a page is selling something, to look up how long its website has existed in the public domain registration records (via rdap.org). Scam shops are usually only weeks old.	The registration date, cached on your phone for 30 days. rdap.org and the domain registry see the web address being looked up (not who you are or anything else), as with any website request.
The Small Print warning list (only with online shop checks)	Downloaded from thesmallprint.app about once a day and checked on your phone.	The list itself. Because the whole list is downloaded, nobody learns which sites you visit.
Reports and appeals (only if you send one)	To review scam sites for the warning list, and to let businesses ask for a review.	The website address and what you write. Appeals also keep the email you give, to reply. We store only a scrambled (hashed) version of your internet address, to stop abuse. Reports from the app are sent only when you tap Send.
Anonymous totals (only if you agree to "Share anonymous impact counts")	To show how much harm Small Print prevents.	Once a day the app sends counts only: how many warnings it showed, how many you backed away from, and an estimate of money protected rounded to the nearest £10. No website names, no page text, and nothing that identifies you or your phone. Off unless you switch it on.
"Report a page it got wrong" (only if you use it)	To help us fix a missed trap or a false alarm.	This opens an email in your own email app, addressed to us, containing the text Small Print read on the last page it checked. You can read and edit it before you send it. Nothing is sent unless you press Send.
Reminders and follow-ups	To remind you to cancel and check the company confirmed.	On your phone, until done.

What we never do

Send page text, anything you type, your notifications or your personal details off your phone by ourselves. The only things that go online are the ones in the table above that say "only if", and each needs you to switch it on or press Send.
Read password fields. Android hides them from apps like ours.
Tap, type or buy anything for you. Small Print only shows warnings.
Show ads, track you or sell data. The optional anonymous totals can't be linked to you.
Send email for you. Cancellation letters open in your email app, and nothing is sent until you tap Send.

This website

thesmallprint.app is a static website hosted on Microsoft Azure. It sets no cookies and has no analytics. Our hosting provider keeps standard server logs (such as IP addresses) for security, and fonts are loaded from Google Fonts, which receives your IP address when the page loads.

Deleting your data

Everything Small Print keeps is on your phone. Uninstall the app (Settings › Apps › Small Print › Uninstall) and it's all deleted. You can also remove individual reminders and safe-listed sites inside the app.

Reports and review requests: how long we keep them

If you send a report, we keep the website address, the type of problem and the date as part of our evidence record. The words you wrote, any amount you gave and the scrambled version of your internet address are erased after 12 months. Review requests from businesses keep the email address and message until 12 months after we've decided, then those are erased too. We don't ask for, and don't want, screenshots of bank statements or card details.

Our warning list names websites, not people. Where we hold information about the people behind a website (for example a director named in a public register), we keep it internally, we don't publish it, and we hold it on the basis of our legitimate interest in protecting consumers from financial harm.

Your rights

Under UK data protection law you can ask for a copy of the personal information we hold about you, ask us to correct or erase it, or object to how we use it. Email us at the address below. We'll reply within one month and may need to confirm who you are first. Because the app keeps everything on your phone and reports aren't linked to your name, in most cases we hold nothing that identifies you.

Children

Small Print is intended for adults and isn't directed at children.

Changes

In October 2026 we added optional online shop checks (described above), switched off until you turn them on, with an explanation in the app first. If we ever change what goes online, we'll say so here and in the app before it happens.

Contact

Small Print is made by Zigazag Limited, a company registered in England and Wales (company number 17378424), which is responsible for this app and website. Questions about privacy: john@evengreen.co.uk.

You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).