Privacy Policy
Last updated 14 October 2026
HabiTree is a habit tracker. This policy says what the app collects, why, where it is stored, who can see it, and how to delete it. It is written to be read, not skimmed past — it is short on purpose.
In one paragraph: HabiTree stores the habits, check-ins and notes you create, a profile photo if you choose to add one, and, if you allow notifications, a code that lets us send them to your phone, under an account that is anonymous until you choose to sign in. If you connect Apple Health, the app reads it on your phone to tick off habits you choose — the readings themselves never leave your phone. Nothing is used for advertising, nothing is sold, and no analytics or tracking software runs in the app. You can delete everything from inside the app at any time.
What we collect
| Data | Why | Where it comes from |
|---|---|---|
| An account identifier | To keep your data together and separate from everyone else's | Created automatically when you first open the app — no email, phone number or name is needed |
| Your name | Shown on your profile, and to friends on anything you choose to share | You type it during setup. It can be changed at any time |
| Profile colour and settings | Your avatar colour, weekly goal and plan settings | Chosen by you |
| Profile photo (optional, once you sign in) | Shown on your public profile in place of your initials. It is resized to a small square picture before it is uploaded | One picture you choose from your photo library. HabiTree receives only the picture you pick and cannot see the rest of your library |
| Habits | The routines you track: name, category, schedule, target, reminder time, how each is verified, and who can see it. Habit reminders are scheduled on your phone; nothing about them is sent to us beyond the reminder time you set | Created by you |
| Check-ins | Which habits you completed on which days, how long they took, and any note you add | Created by you |
| Auto-check (optional, only if you connect Apple Health) | For a habit you set to Auto-check, which Apple Health measure it is checked against and the target you chose — for example "sleep, 7 hours" — and, for each day it ticks itself off, that the check-in was verified by health data. Nothing else from Apple Health: not the reading, not the device. A day Auto-check ticks is a check-in like any other: if the habit is shared with Friends it becomes a post, and challenges you join count how many of your days were verified | The goal is chosen by you; whether a day met it is worked out on your phone |
| Day plans | Rest days, skipped habits and notes for a given day | Created by you |
| Sign-in details (optional) | If you sign in with Apple, we receive an identifier and, if you allow it, your name and email address. Apple lets you hide your real email | From Apple, only when you choose to sign in |
| Public profile (once you sign in) | Your handle, name, profile photo (if you add one) or avatar colour, an optional bio, whether your account is private, and follower counts — so friends can find you. For a public account, also three numbers worked out from all your check-ins, including ones marked Only me: your current streak, active days this week and total check-ins, plus the last day of that streak. Also your league (Seed to Legend), the XP you earned this week and the trophies you have earned — except trophies for habits you are breaking, which only you see | Chosen by you; the numbers, league, XP and trophies are calculated by HabiTree from your check-ins |
| Who you follow and who follows you | To build your feed and decide who can see your posts | Your follows, and people who follow you |
| Posts, cheers and comments | A check-in you mark "Friends" becomes a post: the habit's name and category, the day, time spent, any note, your streak and your week. Cheers and comments are stored with the post | Created by you and by people you follow |
| Clubs and challenges | Clubs you start or join, challenges you join, and weekly or challenge standings worked out from your own check-ins | Created by you; standings are computed by HabiTree |
| Messages | Messages you send to people you follow who follow you back, and in your clubs' chats | Created by you |
| Notifications | A list in the app of what happened while you were away — new followers and follow requests, cheers and comments on your posts, club requests and joins, and notices when something of yours was removed by our filters or after reports. An item about someone's action shows who it was; a removal notice never names who reported you. Items are deleted after 90 days, or sooner if you delete them | Created by HabiTree when someone interacts with you |
| Notification token (only if you allow notifications) | A device identifier that lets us send the notifications you turned on to this phone — followers, cheers and comments, messages, club chat and clubs | Created by iOS and Firebase Cloud Messaging when you allow notifications. Deleted when you sign out (if you sign out without a connection, the next time the app connects), when you delete your account, and when Apple or Google reports it is no longer valid |
| Notification preferences | The types you switched off in Settings → Notifications, and when we last offered to turn notifications on, so we do not ask too often | Chosen by you. Deleted when you delete your account |
| Reports and blocks | Reports you file and people you block, so we can act on abuse and keep blocked people away from you | Created by you |
Notes and habit names are free text. Anything you type in them is stored as you typed it, so avoid putting anything in a note that you would not want stored.
What we do not collect
- No location, contacts, microphone or camera access, and no access to your photo library. If you add a profile photo, iOS shows its own picker and HabiTree receives only the one picture you choose.
- No advertising identifier, no tracking across other apps or websites, and no analytics or crash-reporting software.
- No marketing. HabiTree never sends marketing or promotional notifications. Notifications sent from our servers never contain your habit names or notes. Habit reminders, which your phone schedules itself, show the habit's name, and your in-app notification list names the check-in someone cheered or commented on.
- No health readings. If you connect Apple Health, the app reads your sleep, steps, workouts, active energy and mindful minutes on your phone: to tick off habits you set to Auto-check, and to show you, on the Connected devices screen, which apps and devices have saved this data lately. This works with any device that saves to Apple Health, such as an Apple Watch, Oura ring, Garmin, WHOOP or Fitbit. The readings themselves (hours slept, step counts, workout times) and which device recorded them never leave your phone: they are not sent to our servers, used for advertising or marketing, shared with sponsors or anyone else, or stored in iCloud. The app never writes to Apple Health. Connecting is optional, everything else works without it, and you can turn access off at any time in the Health app → your profile → Apps.
Where it is stored
Your data is stored in Google Firebase (Cloud Firestore and Firebase Authentication), in Google's data centre in the eastern United States, and cached on your device so the app works offline. Profile photos are stored in Firebase Cloud Storage, and each uploaded photo is sent to Google Cloud Vision to be checked for explicit or violent content (see below). Google processes it on our behalf under Firebase's privacy terms and, for Cloud Vision, Google Cloud's data processing terms, which provide protection at least equal to this policy. Notifications you have allowed are sent through Firebase Cloud Messaging and Apple's Push Notification service, so their text (for example, who cheered your post, or the first words of a message sent to you) passes through Google and Apple on its way to your phone. No other company receives your data.
Who can see it
Your habits, check-ins, plans and settings are visible only to you. Each habit and each check-in has a visibility setting — Only me or Friends — and anything marked Only me is never shown to anyone else, though it still counts towards the numbers on your profile (see below).
Social features need a signed-in account. Once you sign in and choose a handle:
- Anyone signed in to HabiTree can find your public profile (handle, name, profile photo or avatar colour, bio, follower counts) by searching. If your account is public, they also see your streak (and its last day), active days this week and total check-ins — counted from all your check-ins, including ones marked Only me, though never which habits they were — and who follows you and whom you follow. They also see your league, this week's XP and your trophies, and people who follow you see where you rank among the people they follow this week. Trophies for habits you are breaking are never shown to anyone but you. With a private account those numbers, your league, XP and trophies are removed from your profile and you do not appear on anyone's leaderboard, and your follower and following lists are visible only to you.
- People who follow you see your posts (check-ins you mark Friends), and can cheer and comment on them. With a private account, only people you approve can follow you.
- Club members see who else is in the club, the club's weekly board (how many days each member was active) and its chat. If you join a club, your active days this week appear on its board, visible to members of that club, whether your account is public or private.
- Challenge participants see each other's standing in that challenge, including how many of the days were verified by Apple Health.
- Messages are seen only by the people in the conversation. They are not end-to-end encrypted: they are stored on our servers and may be reviewed if they are reported.
- Anyone you block cannot see your posts, comments, follower lists or full profile, or message you, and is not told they were blocked. They may still see your name, handle and photo in search results.
Text you write where others can see it — names, handles, bios, posts, comments, club names and messages — is automatically checked for offensive language. Profile photos are automatically checked by Google Cloud Vision SafeSearch when they are uploaded, and a photo that appears to be sexually explicit or violent is removed; your profile then shows your initials again. Content people report, including reported profiles and their photos, is reviewed by a person; if several people report the same profile, its photo is removed straight away. A photo removed automatically, by the check or after reports, is kept privately for review for up to 90 days, then deleted. If our filters or reports remove something of yours, you see a notice in your notifications. Content that breaks our community rules may be removed.
How long we keep it
For as long as you have an account. A profile photo is deleted when you remove it or replace it with a new one; a photo removed automatically is kept privately for review for up to 90 days, then deleted. Notifications in your list are deleted after 90 days. A notification token is deleted when you sign out (or, if you were offline, the next time the app connects), when you delete your account, and when Apple or Google reports it is no longer valid. Deleting your account deletes your data — see below — including your profile photo, your posts, comments, cheers, follows, club join requests, clubs you own and your messages; one-to-one conversations you were part of are removed for both people. Backups are removed within 30 days of deletion. A record of reports and moderation decisions is kept so we can show how abuse was handled, but when you delete your account your identity is removed from it: you are taken off the tallies of reports you filed, and records about you or your content are redacted.
Deleting your account and data
In the app: Home → gear icon → Account → Delete account. This permanently removes your habits, check-ins, plans, profile, profile photo, notification tokens and your notification list, and the account itself. It cannot be undone. If you cannot use the app, email jakeshmoney24@gmail.com from the address linked to your account and we will delete it for you within 30 days.
If you signed in with Apple, deleting your account also revokes HabiTree's access under your Apple ID. If you have a paid subscription, deleting your account does not cancel it — manage subscriptions in your iPhone's Settings → Apple ID → Subscriptions.
Notifications
HabiTree asks before sending notifications, and only when you do something they help with — such as sending a message or following someone — never when you first open the app. Everything works if you say no. You can turn notifications off per type in Settings → Notifications, or entirely in your iPhone's Settings.
Your rights
Wherever you live, you can ask us what we hold about you, ask for a copy, correct it, or have it deleted. Email jakeshmoney24@gmail.com. If you are in the EU, UK or California you have specific rights under GDPR, UK GDPR and CCPA; we honour them for everyone.
Age
HabiTree is not directed at children under 13. The app's social features require you to confirm you are 13 or older before they can be used. If we learn that we hold data from a child under 13, we delete it.
Changes
When this policy changes, the date at the top changes and the app will show a notice if the change affects what is collected or shared.