Privacy Policy

1. Who this policy is from

This policy covers the Habitumap app for iPhone, the Habitumap app for Mac, and the Habitumap website. It is written from the product specification for launch. If the shipping app differs, this page has to be updated before release.

Habitumap is operated by Jason Jeong, an individual ("Habitumap", "we", "us"). Jason Jeong is the person responsible for personal data (the controller) and the only person who processes it, apart from the service providers named in this policy. We don't publish a street address here because we don't have one confirmed for this draft.

2. What the app stores

You don't make a Habitumap account, and the app does not ask for your email, real name, or phone number. The data below is created because you use the app.

• Habits. Name, icon, color, whether the habit is something you're building or avoiding, schedule, goal (check, count, amount, time, or a daily limit for avoid), reminders, an optional note, start date, order, and whether it's archived or deleted.
• Logs. The day, the amount (a check, a count, a quantity, or seconds for a timer), when it was logged, whether it came from the app, a widget, a notification, a Shortcut, or the Mac app, and a random install id stored with the log.
• Days. A skip (rest day) and an optional note for that day.
• A running timer. Start and pause times, which habit it belongs to, and a device label so another device of yours can say the timer is running on your iPhone or Mac. The label is the device's name when the system allows it, otherwise "iPhone" or "Mac".
• Settings that change the math. Which day the week starts on, and the hour a new day begins. These sync with your habits.
• Settings that stay on that device. A random install identifier (not Apple's advertising identifier, and not the vendor identifier), haptics, appearance, whether usage stats are shared, and a cached note of whether the App Store purchase is active.

Notes are free text. If you type something health-related, it stays in this habit data. We don't read it, and we don't use it to infer anything about you.

3. Where that data goes

On the device. The app stores its database locally and works offline. Widgets and Shortcuts read that same local store. The file is protected so it stays encrypted until the first time you unlock the device after a restart. That lets widgets work while the phone is locked later.

Your private iCloud, not our server. When you are signed into iCloud, the app mirrors that database to your private CloudKit database, the one tied to your Apple Account. Apple runs iCloud. We don't operate that database and we can't see it. A typical sync is seconds to a minute while both devices are online. If you aren't signed in, Settings shows sync as off and the app keeps working locally. Signing out or switching Apple Accounts does not, by itself, delete the local copy. The app writes a backup first.

Backups you don't have to remember. About once a day the app writes a JSON backup of your habit data. In this version you can't turn that backup off. It goes to the app's folder in iCloud Drive when that's available (visible in the Files app), and otherwise stays in local documents on the device. About 14 daily files are kept. We don't receive the file.

Exports you choose. You can export JSON or CSV, and import JSON. An import adds to local data. It does not wipe what you already have. A file only leaves the device if you send it somewhere.

The product spec's rule is that habit content leaves the device only through your private iCloud, a file you export, or the anonymous usage stats in section 5, which are not supposed to contain habit content.

4. What we don't do

• No Habitumap account, and no backend of ours for habit data.
• No ads, and no advertising SDKs.
• No use of the advertising identifier (IDFA), and no fingerprinting.
• No third-party crash reporter that collects personal information. Apple's MetricKit may record performance and crash information for Apple under Apple's own privacy policy.
• No Apple Health connection, no location, no contacts, no photos, and no social features. Health integration is not part of this version.
• No third-party SDKs in the app, other than a possible privacy-first analytics client described below. None is named yet.

5. Usage stats

Settings includes a control labeled "Share anonymous usage stats." It is on by default. You can turn it off. When it's off, events are not sent, and the local queue is cleared.

The events are categories and buckets: which kinds of goals people create (not the habit's name), whether a log came from the app or a widget, whether a goal was met, timer length in a coarse bucket, whether sync is on or paused, and whether a backup was written to iCloud or locally. They are specified to exclude habit names, notes, amounts, and the words you type. The identifier is a random id created on install. It is not the advertising identifier. It changes if you reinstall.

Nothing is sent to an analytics company in the default build. The specification says to keep a no-op plus an on-device system log until a provider is chosen. Events may be queued on the device to be sent in batches only after a provider exists, and never when you have opted out.

If we enable a provider, its name will replace [ANALYTICS PROVIDER] in this policy before data is transmitted, and the App Store privacy label will be updated. The intended label, if data is sent, is usage data that is not linked to your identity. Where the law requires consent before that data leaves the device, including in the EEA and the UK, the app needs to ask first. The current specification defaults the toggle to on, which may not be enough in those places. That flow is [CONFIRM EEA CONSENT FLOW].

6. Notifications, Shortcuts, and widgets

Reminders are optional. The system permission prompt appears when you add a reminder, not during onboarding. A reminder's text can include the habit name (for example, "Time for Read"). Those are local notifications scheduled on the device. We don't send them from a server of ours.

iCloud sync uses a silent push so devices can update without you opening the app. That push is Apple's, for your private database. It is not a marketing notification.

Widgets, the Lock Screen, Live Activities, the Mac menu bar, Shortcuts, and Siri can show a habit name or today's count because you put the widget there or asked for the shortcut. That stays on your devices and in Apple's systems. A timer alert fires on the device that started the timer.

7. Purchases

If you buy Habitumap, Apple processes the payment through the App Store. We don't receive your card number, billing address, or full payment details. Apple can tell the app whether your Apple Account has an active subscription or the lifetime purchase, so the app can unlock. That status is cached on the device. The same Apple Account unlocks iPhone and Mac (one universal purchase). See the Terms of Use for renewal and refunds.

8. This website

The site is static. It does not set cookies, and it does not include a tracking script. The host that serves the files, Vercel, may keep ordinary connection logs such as IP address, user agent, and the page requested, under Vercel's privacy policy. We don't add to those logs.

Early access. The form asks for an email address. It is not connected to a mailing provider. Submitting it checks that the address looks valid and shows a confirmation on the page. It does not transmit the address to us or to anyone else, and it does not store it in the browser.

When we connect a provider, we will update this policy first. We intend to collect only the email address, use it to tell you when Habitumap launches, and not sell it. The provider will be named here as [WAITLIST PROVIDER]. We'll keep addresses for [WAITLIST RETENTION], and we'll delete an address if you ask. Write to jeongjason5914@gmail.com.

9. How long data stays

• A habit, its logs, and its notes stay until you delete them. Deleted habits go to Recently deleted for 30 days, then the app permanently removes them. "Delete now" removes them immediately after a second confirmation. Sync carries a deletion to your other devices and to your private iCloud.
• Daily backup files roll off after about 14 days.
• Usage-stat events stay queued on the device until they're sent or until you turn the setting off, which clears the queue. On-device system logs follow the operating system's own retention.
• Deleting the app removes the on-device database. It does not automatically delete the private iCloud copy or iCloud Drive backups. Those belong to your Apple Account. You can remove an app's iCloud data from Apple Account settings, and you can delete backup files in the Files app.

10. Children

Habitumap is not directed to children under 13, and we don't knowingly collect personal information from them. The app is a general habit tracker. Don't use the website form if you are under 13. If you're a parent and believe we have information from a child, email jeongjason5914@gmail.com and we will delete it. We don't ask for a child's email in the app, because the app doesn't ask for an email at all.

11. GDPR and UK GDPR

If those laws apply, you can ask to access, correct, delete, or restrict personal information we hold, object to certain processing, and take a copy you gave us. Habit data is on your devices: export in the app is the practical way to take a copy, and delete in the app is the practical way to erase it. For anything we actually receive, such as a future waitlist email, contact jeongjason5914@gmail.com.

You can also complain to your local supervisory authority. Our intended bases are: you asked the app to keep habit data on your devices and in your iCloud so the app can function; a contract, once you purchase, for providing the paid app; and, for usage stats that leave the device, either your consent or a basis we're allowed to use only after the EEA flow above is settled. We don't claim a basis we haven't confirmed.

An EU or UK representative, if we need one: [EU/UK REPRESENTATIVE, IF APPLICABLE].

12. California and other US state privacy laws

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We don't offer that, so there is no sale to opt out of. The in-app usage-stat toggle is the control for those stats.

Categories that can exist, described honestly:

• Identifiers. A random install id on the device. An email address only if you later join the website list. We don't collect those from the app itself.
• Commercial information. Apple holds the purchase record. We may learn only whether the purchase is active.
• Usage data. The anonymous product events in section 5, if they are ever transmitted.
• User content. Habit names, notes, and logs, stored on your devices and in your private iCloud, not collected by us.
• Sensitive information. Only if you choose to type it into a note or a habit name. We don't receive it and we don't use it to infer characteristics about you.

California residents can ask us to know, delete, or correct personal information we hold, and not to be discriminated against for asking. Because we don't hold habit content, most of those requests are done in the app or in your Apple Account. For website information, email jeongjason5914@gmail.com. We will need enough detail to find the request, and we won't ask you for a habit history in order to answer it.

13. International transfers

iCloud storage locations are determined by Apple, under Apple's privacy policy (apple.com/legal/privacy). If a future analytics or email provider stores information outside your country, we will name the provider in this policy before we use it.

14. Security

The on-device store uses Apple file protection that stays in place until the first unlock after restart. The Mac app is sandboxed, as the Mac App Store requires. Sync uses your private iCloud database. None of that is a promise that data can never be lost. Devices fail, iCloud can be full or paused, and backups exist so a copy is still on your side of that line.

15. Changes

We'll post changes on this page and change the effective date. If a change means we start sending usage stats to a named provider, or start storing waitlist emails, that will be in the policy before it happens. Where the law requires a fresh choice, we'll ask.

16. Contact

Privacy requests, access and deletion requests, and legal notices go to Jason Jeong at jeongjason5914@gmail.com. Support is also at the support page.