Privacy Policy
HabTrack Pro (“the app”, “we”, “us”) helps you track daily habits. This policy explains what data the app handles, where it is stored, which services are involved, and the choices you have. We collect as little as possible: there are no ads and no tracking, and the only analytics are anonymous usage counts you can turn off.
Data stored on your device
Without an account, your habits and history stay on your phone. The app stores the following locally:
- Your habits: name, emoji, creation date, and whether a habit was removed.
- Completion history: the dates you marked each habit as done.
- Reminder times you set for habits.
- Preferences: first day of the week, theme, primary and secondary colors, and whether notifications are allowed.
- If you sign in, your session token, kept in the system’s secure storage (iOS Keychain or Android Keystore).
Home Screen widget (iOS)
To show a habit on your Home Screen, the app shares your habit names, emoji, today’s done status, and your accent color with the HabTrack Pro widget through an App Group container on your device. This data does not leave your phone.
Optional account and cloud sync
Creating an account is optional. If you do, your data is synced so you can use it on other devices. We use Supabase (Supabase, Inc.) for authentication and database hosting. Supabase stores, on our behalf:
- Your email address and account identifiers.
- Your habits (name, emoji, creation date, removed status) and completion dates.
- Your preferences: first day of the week, theme, primary and secondary colors.
- A count of the progress images you share: the card style, whether you had Pro, and the time. The image itself is created on your device and never uploaded.
Friends
Friends is optional and needs an account. If you set up a friends profile, we store your display name, username, and avatar emoji. Any signed-in user can find your profile by searching your name or username, or by opening your invite link (which contains your username), unless one of you has blocked the other.
Nothing is shared by default. Only habits you turn on with “Share with friends” are visible, and only to people whose friend request you accepted or who accepted yours. They see the habit’s name, emoji, streak, and completion grid for up to the last 30 days, or up to a year if they have HabTrack Pro. Reminder times, removed habits, preferences, and your email address are never shared. Removing or blocking a friend ends their access immediately.
We also store friend requests, the people you block, and reports you send. Reports include the reason and any details you write, and are used only to review the reported account. The person you report isn’t told who reported them.
Sign in with Google and Apple
You can sign in with Google (Google LLC) or Apple (Apple Inc.). When you do, that provider confirms your identity and shares your email address and a unique account identifier with us. If you choose Apple’s “Hide My Email”, we only receive a private relay address. These providers process your data under their own privacy policies.
Notifications
Habit reminders are scheduled locally by your device’s operating system. We don’t use a push notification server and don’t collect device push tokens. You can turn notifications off in Settings at any time.
Contacting us
If you email us for support or feedback, we receive your email address, your message, and any details you include, such as the app version and device platform added to feedback emails. We use this only to reply and improve the app.
Anonymous usage data
To learn which features help people build habits, the App Store version of the app sends anonymous usage events to PostHog (PostHog Inc.), stored in the EU. Events are tied to a random ID created on your device, not to your account or email.
The events are: opening the app, adding a habit (with how many habits you have and whether it has a reminder), checking or unchecking a day (and whether that was in the list, the grid, or the widget), seeing the upgrade screen (and what led to it), and buying HabTrack Pro (and which plan). Each event also says whether you have Pro and whether you are signed in, plus basic device information such as app version, OS version, device model, language, and country.
Habit names, emoji, completion dates, usernames, and your email are never sent. You can turn this off at any time in Settings → Privacy → Share anonymous usage data.
Purchases
HabTrack Pro is an optional subscription or one-time Lifetime purchase sold through the Apple App Store. Payments are handled entirely by Apple; we never see your card or payment details. We use RevenueCat (RevenueCat, Inc.) to check whether your purchase is active. RevenueCat receives an anonymous app user ID (or your account ID if you are signed in), your purchase history for this app, and basic device information such as platform, app version, and country, under its own privacy policy.
If you are signed in, RevenueCat also tells our server whether your subscription is active and when it expires. We store only that status, the product, and the expiry date, so the server can decide how much of your friends’ history you can see.
App stores
The app is distributed through the Apple App Store and Google Play. Those platforms may collect data such as downloads, purchases, and crash reports under their own privacy policies. We may see aggregated, anonymous statistics they provide.
What we don’t do
- We don’t sell or rent your data.
- We don’t show ads or use advertising identifiers.
- We don’t use tracking SDKs, and our one analytics service never receives your habit names, email, or account.
- We don’t access your contacts, photos, location, or health data.
How we use your data
We use your data only to provide the app’s features: showing and syncing your habits, applying your preferences, signing you in, sending reminders you asked for, and answering your messages. Where data protection laws such as the GDPR apply, we process data to perform our agreement with you (providing the app) and, for optional features like reminders, based on your consent.
Retention and deletion
Local data stays on your device until you remove habits or delete the app. Synced data is kept while your account exists. You can delete your account at any time in the app (Account → Delete account), which immediately and permanently deletes your account, all synced habits, history, and preferences, your friends profile, friendships, blocks, reports, and share counts, and clears them from that device. You can also email us to request deletion. Purchase records held by Apple, Google, and RevenueCat are kept under their own retention policies. Support emails are kept only as long as needed to resolve your request.
Security
Data in transit to Supabase is encrypted with TLS. Database access is restricted so each account can only read and write its own rows, and friends can only read habits you chose to share. These rules are enforced by the database, not just by the app. No system is perfectly secure, but we take reasonable measures to protect your data.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. To exercise these rights, contact us. You also have the right to lodge a complaint with your local data protection authority.
Children
The app is not directed at children under 13 (or the minimum age in your country), and we don’t knowingly collect their personal data.
Changes to this policy
We may update this policy as the app changes. We’ll update the effective date below and, for significant changes, let you know in the app.
Contact
Questions about privacy? Email hello@bigbyte.me.