Privacy policy

This policy covers the planned iOS, Google Play and Android China releases. Features and services vary by channel; a feature unavailable in your version does not imply that its associated data is being processed. The app and membership service are preparing for release.

Habits, check-ins, goal rules, schedules, exceptions, reminders, mood samples, friction reasons, reviews and milestones are stored in the local database to provide habit tracking and analysis. Basic use does not require registration with a name, phone number or email.

Local reminders display habit names and scheduled times. iOS widgets access a minimal habit/index snapshot via an on-device App Group, without habit notes or calendar text. You choose where to save or share exported JSON/CSV files; destination services apply their own policies.

The iOS version provides sync through an Apple CloudKit private database across devices using the same Apple account. This is separate from membership verification; purchasing membership does not upload habit content to the billing server. Availability depends on your Apple account, system settings and network.

Android does not provide iCloud sync. Local files may also be covered by system backups you enable; their scope and deletion are governed by your device provider. Cross-platform automatic sync is not currently promised.

When membership is enabled, the billing service processes a hash of a random membership credential, purchase proofs, payment channel, product and order identifiers, amount, creation time, expiry and entitlement status. These support verification, duplicate prevention, restoration and refund status. A recovery credential is kept in secure storage on the device. These identifiers should not be treated as fully anonymous or as no data processing.

iOS uses the App Store and the Google Play release uses Google Play purchases. Android China plans to offer one-time monthly/yearly passes through WeChat/Alipay App payments, subject to the final channel-approved release. Payment providers may process transaction, device and security information under their own policies. Habit tracking does not ask for bank-card passwords.

The billing service location, providers and final retention periods will be disclosed before activation. This section does not imply billing data is already being transmitted when membership is not enabled.

Notification permission supports local reminders; iOS calendar read access supports conflict detection. System authorization may allow full event access, but the app extracts time ranges and hashed identifiers only. It does not use, save or upload titles, notes or attendees. Declining optional permissions does not prevent basic habit tracking.

Android network access supports enabled online services; boot reception restores local reminders. The permissions and services page lists their scope by platform. The current design does not integrate advertising, behavioral analytics or ad-tracking SDKs, and does not request location, contacts, camera or microphone access.

When you email support, we receive your sender address, message and any attachments you choose to include, and use them to respond and resolve the request. Do not send passwords, full payment proofs, recovery credentials or unrelated sensitive information.

This website currently has no advertising-tracking or analytics cookies. Once deployed, hosting or security services may process IP addresses, request times, paths, browser information and error logs to serve pages and maintain security. Actual providers, log scope and retention must be configured and disclosed before deployment.

Local habit data remains until you delete it; cloud data and system backups are managed through their respective services. Membership credentials, orders, support messages and logs should be retained only as necessary for their purpose. Transaction records legally required to be retained must have restricted use and access. Specific server-side periods and legal grounds will be finalized before activation.

Billing endpoints require HTTPS and recovery credentials use system secure storage. Protect your devices, store accounts and exported files. No system can guarantee absolute security.

You can view, edit and export habit records, revoke optional permissions in system settings, and clear local habit data from the app settings. Clearing local content does not delete cloud data, backups or order records, or cancel a subscription. See the data deletion guide on the support page.

For data we process, contact support to request access, a copy, correction, deletion, restriction or withdrawal of applicable consent. We request only information needed to verify your request; do not send recovery credentials. If immediate deletion is legally unavailable, we will explain the reason and scope of retention. Where applicable, you may complain to your local supervisory authority.

We aim to respond to ordinary privacy requests within 15 business days, subject to any different deadline required by applicable law.

The product is intended for a general audience and is not directed at children. In mainland China, personal information of children under 14 is subject to special protections; services involving such processing require appropriate guardian consent and specific rules before being offered. Other regions follow their applicable age thresholds and laws. Guardians may contact support with concerns.

Before releasing in different regions, we will describe the relevant legal bases, recipients and transfer arrangements for the actual services and processing activities. Local-first design does not settle every jurisdiction’s legal requirements. Material changes will update the date and be communicated appropriately; renewed consent, when needed, will be obtained before new processing begins.