Privacy Policy
1. Your habits stay on your phone
Your habits, check-ins, notes, reminder times and statistics are stored only in the app's private storage on your device. Habitlog has no account and no server of its own, and we cannot see, read or recover your habits. The app does not use your camera, microphone, location, contacts, photos or files, and it works fully offline.
Copies of your habits leave the app only in these cases, all under your control: (a) Android's own backup (Auto Backup to your Google account, if you have it turned on in Android settings) may include the app's data so it can be restored on a new phone — that backup belongs to your Google account and we have no access to it; (b) a backup or CSV file you export yourself and save or share where you choose; (c) a heatmap image you choose to share. Importing a backup or a Loop Habit Tracker CSV reads only the file you pick.
Reminders are scheduled on the device by Android. Their delivery times (for the Reminder health screen) are measured and kept on the device only.
2. Permissions
- Notifications (Android 13 and later, the only permission Habitlog asks for) — asked when you turn on your first habit reminder or tap “Allow”. Used for the reminders you set yourself, with Done and Snooze buttons, and for at most one short note a day about a free trial or offer. You can refuse or turn it off at any time; the app keeps working.
- Run at startup (RECEIVE_BOOT_COMPLETED, no prompt) — re-schedules your reminders after the phone restarts.
- Vibration (no prompt) — a short haptic tap when you check off a habit.
- Internet and network state (no prompt) — only for ads, analytics, crash reports, purchases and the consent message. Your habits are never sent.
Habitlog does not request exact-alarm, battery-optimisation, location, storage, camera, microphone or contacts permissions.
3. Analytics and crash reports (Google Firebase)
With your consent where required, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix crashes. We log anonymous events such as “paywall viewed” or “purchase completed”, plus device model, OS and app version, approximate region and an app-instance identifier. We never log habit names, notes or any text you type; the app enforces this with an allow-list of event parameters (for example the habit type or a streak-length bucket). Crash reports contain the error type and stack trace only. Firebase Remote Config is used to tune paywall and ad settings.
4. Advertising (Google AdMob and Unity Ads)
The free version shows ads: a slim banner on the habit detail and Settings screens (never on Today), an occasional full-screen ad after you save a new habit or close a detail screen (never after a check-off or when you open the app from a reminder), and optional rewarded ads you choose to watch to unlock a Pro feature for an hour. Ads never cover onboarding, the habit editor or the paywall, and never appear in the first two minutes of first use. Habitlog Pro removes all ads.
Ads are served by Google AdMob, with Unity Ads competing through AdMob mediation and serving the banner directly. These partners may collect the advertising ID, device and usage information and approximate location derived from your IP address to serve and measure ads. See Google's and Unity's privacy policies.
5. Your choices (GDPR, UK GDPR, Swiss FADP, US state laws)
In the EEA, the UK and Switzerland, Habitlog asks for your consent through Google's consent message (IAB TCF) before personalised ads or analytics are used. If you decline, ads are non-personalised and analytics stays off. In US states with privacy laws (such as California, Virginia, Colorado), you can opt out of the “sale” or “sharing” of personal information and targeted advertising. You can change your choice at any time in Settings → Privacy choices.
Legal bases (GDPR): consent for analytics and personalised ads; performance of a contract for the features you use and for purchases; legitimate interest for crash diagnostics where consent is not required. You may request access, deletion, correction or portability of data we control, object to processing, or lodge a complaint with your supervisory authority. California residents (CCPA/CPRA): we do not sell personal information for money; ad partners may receive identifiers as described above, which you can opt out of in Privacy choices. We do not discriminate against users who exercise their rights.
6. Purchases
Subscriptions and the lifetime purchase are processed by Google Play. We never receive your payment details; Google tells the app whether Pro is active.
7. Retention and deletion
Your habits remain on your device until you delete them or uninstall the app; files you exported and your Android backup are kept wherever you stored them until you delete them. Analytics data is retained by Google for up to 14 months. See how to delete your data.
8. Children
Habitlog is not directed to children under 13 (under 16 in the EEA) and we do not knowingly collect their data.
9. Changes
We will update this page if our practices change and revise the date above.