Privacy Policy

What the App Saves

Everything you put into Rewarding Habits is stored on your phone (and partly on your watch, if you have one), never on a server of ours. This includes:

• The names of your habits and goals
• Which days you completed them
• Your progress and reflections
• Any rewards you've added

If you buy the full version, Apple or Google handles the payment. Their sales reports tell us about the purchase, such as the country it came from; on Google Play, they can also include the state or region, postal code, city, and phone model. The reports don't include your name or email address, and we never see your credit card or payment info. Now and then, the app may ask whether you'd like to rate it. The rating window comes from Apple or Google, and any rating or review you leave goes to the store, not to us directly. We can read what you post there, along with the details the store shows us, such as your reviewer name, your country, or your phone model, and we may reply.

How We Protect Your Data

Your data isn't just kept off our servers, it's actively protected:

On Android, the app encrypts its database with SQLCipher (AES-256) and keeps it out of Google's cloud backups. If you use Google backup, what a home-screen widget shows (habit and goal names and progress) and the copy of your habits on a Wear OS watch can be included in that backup. On iPhone and iPad, Apple's Data Protection encrypts the app's data. If you back up your iPhone or iPad to iCloud or a computer, that backup can include the app's data, as it can for your other apps.

What We Don't Know About You

We built this app to respect your privacy. Here's what the app never collects:

Crash Reporting

On Android, the app uses Firebase Crashlytics, a Google service, to tell us when something goes wrong so we can fix it. It's on when you install the app, and you can turn it off anytime in Settings → About → Crash Reporting. Here's what that means for you:

• When the app crashes or runs into an error, it sends a report: where in the code it happened, your phone model and Android version, and technical details like available memory and storage
• A report also carries a log of what the app was doing in that session, such as "habit completed," "reward shown," or "purchase started," plus simple counts, like how many habits and goals you have. Habits show up only as random IDs, never by name
• Each report includes a random ID for your copy of the app, so we can tell one phone's crashes from another's. It's a random ID, not your name, email, or Google account
• We built crash reports to leave out your habit and goal names, your reflections, and anything you type
• While Crash Reporting is on, the app also lets Crashlytics know when you open it, so we can see how often it runs without crashing
• Turn Crash Reporting off and the app stops sending reports. Crashes that happen while it's off stay on your phone, and they're sent only if you turn it back on

The iPhone, iPad, and Apple Watch apps have no crash reporting or analytics of their own. If you've chosen to share analytics with app developers in your iPhone's settings, Apple may share crash reports and usage statistics with us in a form that doesn't identify you. Google Play does something similar on Android if you've allowed usage and diagnostics sharing. You control both in your phone's settings.

How Your Phone Talks to Your Watch

If you have an Apple Watch or Wear OS watch, your habits sync between your phone and watch automatically, using the connection Apple or Google builds into the watch. Here's how it works:

• When your phone and watch are connected by Bluetooth, they sync over it. When they're apart, the connection can switch to Wi-Fi or cellular instead
• There's no Rewarding Habits server anywhere in the path. We don't receive, see, or store what syncs
• Apple says everything your iPhone and Apple Watch send each other is encrypted
• On Wear OS, Google says synced data may pass through its own servers at times, for example when Bluetooth isn't available. Google says its Bluetooth link is encrypted and that data it carries through its cloud is end-to-end encrypted
• On Wear OS, Google also backs up to its cloud what your phone sends the watch: your habits and their details (names, identity statements, triggers, plans, rewards, quotes, reminders and health goals) and the last 7 days of completions, including which ones Health Connect completed. Your reflections aren't included. If your watch backs up to your Google account, that backup can include the habits it holds too. On Android, the app hands this copy to Google's watch connection whenever your phone makes that connection available, whether or not a watch is connected at the moment

Health Data

On Android, you can optionally connect the app to Health Connect to link your habits with health data like steps or sleep. If you do:

• You choose exactly which health data to share with the app
• Your health readings, such as step counts and sleep times, stay on your phone and are never sent anywhere. If you link a habit to Health Connect, the habit's health goal, and which of its recent completions came from Health Connect, are handed to Google's watch connection along with the rest of the habit (see How Your Phone Talks to Your Watch)
• You can disconnect Health Connect anytime in your phone's settings

On iOS, you can optionally connect the app to Apple Health to automatically complete habits you link to a health goal (like steps, sleep, water, active energy, distance, flights climbed, heart rate variability, mindful minutes, or workouts). If you do:

• It's completely optional and off until you turn it on for a specific habit
• The app only reads the metrics you approve; it never writes to or changes your Health data
• The app never sends your health readings anywhere, never stores the readings themselves, and never uses them for advertising or marketing. A habit's health goal, and which of its completions came from Apple Health, are saved with the habit like the rest of your data
• You can revoke access anytime in your iPhone's Settings → Privacy & Security → Health

Home Screen Widgets

If you add a widget to your home screen, the app shares your habit info with the widget. This all happens on your phone, and the widget doesn't send your habits anywhere. (On Android, Google backup can include what a widget shows; see How We Protect Your Data.)

Smart Features

If you use coaching, the urge chat, or the reward and quote suggestions, all the "thinking" happens right on your device. On Android phones that support it, the app uses Gemini Nano, Google's AI model that runs on your phone; on other Android phones, it uses guidance built into the app. On iPhone and iPad, no AI model is involved: coaching and suggestions come from guidance and templates built into the app. Either way, these features never send your habits or anything you write to a server.

On Android, the app uses Google's ML Kit to check for and run Gemini Nano, including for the short message you see when you complete a habit. ML Kit sends Google diagnostics such as your phone model and Android version, the app version, your language settings, identifiers for your phone and your copy of the app, error codes, the length of each request and reply, and how long a reply took. Google says everything the app sends the model, and every reply, is processed on your device. If Gemini Nano isn't on your phone yet, the app asks Android to download it from Google.

Exporting & Importing Your Data

You can export all your habits, goals, and progress as a file at any time. You own your data completely:

• Exports can be optionally encrypted with a password you choose
• You can import data back into the app from a backup file
• We never see, access, or store your exported files

Reminders

When you set up reminders, your phone handles everything. We don't see when you get notified or what the reminders say.

Delete Your Data

Rewarding Habits stores your habits on your devices. There's no account, and we keep no copy of your habits on any server, so apart from crash reports and store sales records (both covered below), there's no app data of yours on our end to delete. You're in full control:

• Delete individual items: Remove specific habits and goals from within the app at any time, and on iPhone and iPad, specific reflections too
• Clear all app data (Android): Go to your phone's Settings > Apps > Rewarding Habits > Storage (or Storage & cache), then tap Clear storage (on some phones, Clear data). This removes everything the app has stored on your phone
• Delete the app: Removing the app deletes everything it stored on that device. On iPhone and iPad, choose Delete App rather than Offload App, because offloading keeps the app's data. If you use a Wear OS watch, delete the app there too

Once you clear or delete the app, your data is gone from that device and can't be recovered, unless a copy remains somewhere else: a file you exported, a watch that still has the app, or one of the backups described above.

The only records we receive about how you use the app are Android crash reports (see Crash Reporting), any crash reports and statistics you've chosen to share through Apple or Google, the sales reports Apple and Google send us, and any rating or review you post on the store. Crash reports are built to leave out your habit names and anything you type, and Google keeps them for 90 days, then begins removing them. Google's ML Kit diagnostics (see Smart Features) go to Google, not to us.

If you have any questions about deleting your data, contact us at family@rewardinghabits.com.

Kids Under 13

The app never asks for anyone's name, email address, or contact details, and we don't collect them through the app, including from kids under 13. Android crash reports include a random ID for your copy of the app, never your name or email address, and Google's ML Kit diagnostics are described under Smart Features.

This Website

This website counts visits with Cloudflare Web Analytics, which doesn't use cookies and doesn't follow you across other sites. It tells us things like which pages are popular, not who you are.

If This Policy Changes

If we ever update this policy, we'll change the date at the top. But our promise stays the same: your data is yours, and we don't want it.