Privacy Policy

Overview

HabitFlow ("we", "our", or "the app") is built with privacy as a core principle. All of your habit data — habits, completions, streaks, categories, reminders, and settings — is stored on your device, and we do not operate a backend or keep a copy of your habit database. However, the app records how it is used, including screen recordings that can show your habits, as described under Analytics and Session Recordings below. If you subscribe, the data required to process your subscription also leaves your device.

Data Stored on Your Device

Your habits, completions, streaks, categories, reminders, widget configuration, and app preferences are stored locally using the platform's built-in storage (UserDefaults / App Group container on iOS; Room database and DataStore on Android). This database is not uploaded. It leaves your device only if you use the Export feature, in which case you control where the exported file is saved or shared. Anything shown on screen can appear in session recordings, described below.

No account or registration is required. We do not ask for your name or email address, and we do not access your contacts, photos, files, device location, or any advertising identifier.

Analytics and Session Recordings (PostHog)

HabitFlow uses PostHog to understand how the app is used, find problems and improve it. It collects the following:

• Session recordings — a video-like replay of the screens you view and your taps and scrolls. Recordings are not masked, so they can show anything on screen, including habit names and descriptions, completions, streaks, and text as you type it.
• Usage events — such as app opens, screens viewed, elements tapped, and paywall activity.
• Diagnostics — crash and error reports, app logs, and the timing of network requests.
• Device information — such as device model, operating system, app version, and approximate location derived from your IP address.

This data is tagged with an anonymous identifier generated by PostHog, not with your name or an account. Because recordings show your screen, avoid entering sensitive information in HabitFlow if you do not want it recorded. PostHog data is hosted in the United States.

Subscriptions (RevenueCat & Apple/Google)

If you purchase HabitFlow Pro, the purchase is processed by Apple (App Store) or Google (Play Billing) and our subscription state is managed by RevenueCat. RevenueCat receives an anonymous app user ID generated on your device, the purchase token from the store, and your entitlement status (whether Pro is active). It does not receive any of your habit data.

Permissions

HabitFlow may request the following device permissions:

• Notifications — to deliver habit reminders you schedule. Reminders are scheduled on your device, though reminder screens can appear in session recordings.
• App Groups (iOS) / Widget storage (Android) — to share habit data between the app and the home screen widget on your device.

All permissions are optional. The app functions without them.

Data Retention

• On-device data (habits, completions, preferences, widget state) is retained on your device until you delete it or uninstall the app. We keep no copy of this database.
• Session recordings are retained by PostHog for 30 days.
• PostHog analytics events are retained by PostHog per their default retention policy (currently up to 7 years for event data). Events are tied to an anonymous device identifier.
• RevenueCat subscription records are retained for as long as required by RevenueCat and the relevant app store to service your subscription, manage refunds, and meet legal/tax obligations.

How to Delete Your Data

• Delete on-device data — uninstall HabitFlow, or on Android go to Settings → Apps → HabitFlow → Storage → Clear data. This permanently removes all habits, completions, reminders, and preferences from your device.
• Delete analytics data and recordings — email us at [email protected] and we will request PostHog to delete the events and recordings associated with your anonymous device identifier.
• Delete subscription data — email us at the address above to request deletion of your RevenueCat record. Note that the underlying purchase receipt held by Apple or Google is governed by their respective privacy policies and is outside our control.

Children's Privacy

HabitFlow is not directed at children under the age of 13 and we do not knowingly collect personal information from them. If you believe a child's data has been recorded, email us and we will request its deletion.

Changes to This Policy

If we update this privacy policy, the revised version will be posted on this page with an updated date. Continued use of the app after any changes constitutes acceptance of the updated policy.

Contact

Questions about this policy, or requests to delete your data, can be sent to [email protected].