Privacy Policy

HabitGrid · Effective 9 September 2026

This Privacy Policy explains what HabitGrid (“the App”) does with your information. The App is developed and published by Cevat Akdemir, an individual developer based in the Republic of Türkiye (“we”, “us”). We are the data controller for the limited processing described below.

We have written this policy to be specific rather than generic: it describes only what HabitGrid actually does. If a service is not named here, the App does not use it.

The short version

• The App does not require an account, and we do not ask you to sign up or log in.
• We do not sell your personal information, and we never have.
• We do not use your data to serve you advertising, and the App contains no ad networks.
• The App collects anonymous usage and crash data to help us improve it — no advertising, no third-party tracking — and you can turn this off in Settings.
• Your content stays on your device, and in your own iCloud account if you turn on syncing.

Information stored on your device

Everything you create in HabitGrid — your habits, their names, icons and colours, your completion history, reminders and settings — is stored locally on your device by the App.

This data is not transmitted to us. We operate no server that receives it, and we have no technical means of reading it. It remains under your control: it is included in your device backups if you have those enabled, and it is removed when you delete the App (see “Deleting your data” below for how iCloud copies are handled).

The App also lets you export your data to a file and import it back, so you can take a copy with you or move it elsewhere. The export is produced on your device and goes wherever you choose to send it; it does not pass through us.

iCloud sync

HabitGrid can keep your data in step across your devices using Apple’s iCloud, through the CloudKit framework built into iOS. This is off by default and only starts when you turn it on in the App’s settings.

When syncing is on, your data is stored in the private database of your own iCloud account. It is not stored on our servers and it is not shared with us. We cannot see, retrieve or restore it. Apple provides this storage as our processor, and its handling of the data is governed by Apple’s Privacy Policy and your iCloud terms with Apple.

Turning syncing off stops further data from leaving your device. Any copy already in iCloud stays in your account until you remove it, which you can do from Settings → [your name] → iCloud → Manage Account Storage on your device.

Purchases and subscriptions (RevenueCat)

In-app purchases and subscriptions in HabitGrid are sold by Apple through the App Store. We use RevenueCat to keep track of what you are entitled to, so that a purchase you have made is recognised on your other devices and can be restored.

We never receive your payment details. Your card, billing address and Apple ID stay with Apple. We do not see them at any point.

RevenueCat receives:

• a randomly generated identifier for the installation, used as the subscriber ID, and the identifier for vendors (IDFV) — an Apple identifier that is shared only among apps from the same developer and is reset when you delete them;
• the App Store transaction receipt, which tells us which product was bought, when the subscription renews or expires, and whether it is active;
• basic technical context — app version, device model, operating system version, and country derived from the App Store storefront.

RevenueCat, Inc. acts as our data processor and provides protection for this data equal to that described in this policy; see the RevenueCat Privacy Policy.

Managing or cancelling a subscription is done through Apple, in Settings → [your name] → Subscriptions on your device. Apple’s handling of the purchase is covered by Apple’s Privacy Policy.

Product analytics (PostHog)

HabitGrid uses PostHog to understand how the App is used in aggregate, so we can see which features are worth improving and where people get stuck.

PostHog receives:

• a randomly generated identifier for the installation, which is not your name, email address, Apple ID or advertising identifier;
• a small number of events marking milestones in setting the App up and using its main features — for example finishing onboarding or creating an item — together with the App being opened, updated or closed. We do not record which screens you view or which controls you tap.
• basic technical context — app version, device model, operating system version, and coarse country- or region-level location derived from your IP address.

PostHog does not receive the content you create in the App. Event names describe actions, not the text, images or personal details you enter.

PostHog Inc. acts as our data processor and provides protection for this data equal to that described in this policy; see the PostHog Privacy Policy and Data Processing Agreement. We do not use PostHog for advertising, and we do not enable cross-app or cross-site tracking.

Analytics is on by default. You can turn it off at any time in the App’s settings; when it is off, no events are sent.

Crash and error reporting (Sentry)

HabitGrid uses Sentry to report crashes and errors, so that faults can be diagnosed and fixed.

A crash report contains:

• the technical stack trace describing where in the code the failure occurred;
• app version, device model, operating system version, and device state at the time (such as free memory);
• a randomly generated installation identifier, so repeated reports from one device can be grouped.

Crash reports are not intended to contain the content you create. We do not attach your data to reports, and we do not send Sentry your name or email address. Because a stack trace is generated automatically at the moment of failure, we cannot guarantee that a fragment of data is never included incidentally; where that is possible we configure Sentry’s data-scrubbing to remove it.

Functional Software, Inc. (Sentry) acts as our data processor and provides protection for this data equal to that described in this policy; see the Sentry Privacy Policy. Reports are retained for a limited period and then deleted automatically.

Crash reporting is on by default. You can turn it off at any time in the App’s settings.

Notifications

If you allow notifications, HabitGrid schedules them locally on your device. Their content and timing are determined on the device itself; nothing is sent to us or through a push server, and no notification token is collected. You can withdraw permission at any time in Settings → HabitGrid → Notifications.

The App Store and ratings

HabitGrid may invite you to rate it, and offers a link to write a review. Both are handled entirely by Apple’s App Store. If you choose to leave a review, the review and any name shown alongside it are published by Apple under your App Store account, not by us. We receive only the aggregate, anonymous statistics Apple makes available to every developer — such as total downloads and the average rating — which do not identify you.

Legal bases for processing

Where the GDPR or the Turkish Personal Data Protection Law (KVKK) applies, we rely on the following bases:

• Performance of a contract — the processing needed to make the App work as you have asked it to, including recognising a purchase you have made.
• Legitimate interests — keeping the App stable and secure, which is why crash reports are collected, and seeing in aggregate how the App is used so we can improve it, which is why product analytics is collected, balanced against your interest in privacy. You can object at any time in the App’s settings — analytics and crash reports have separate switches, and collection stops.

How long we keep information

Data stored on your device is kept until you delete it or delete the App. Data in your iCloud account is kept until you remove it from that account. Crash reports are retained for up to 90 days and then deleted automatically. Analytics events are retained in aggregated form for up to 12 months. Purchase records are kept for as long as your entitlement may need to be restored, and for as long as tax and accounting law requires us to keep them. If you email us, we keep the correspondence for as long as needed to deal with it, and normally delete it within 24 months.

Deleting your data

You can remove your information at any time, without asking us:

• Delete the App from your device. That removes the data it stored locally.
• To remove the iCloud copy, turn syncing off in the App and then delete the App’s data in Settings → [your name] → iCloud → Manage Account Storage. Deleting the App alone does not necessarily remove data already in iCloud.
• Revoke notification permission in Settings → HabitGrid → Notifications.

For anything held by the third-party services named above, write to cevatsupport@gmail.com and we will delete what we can identify. Because we deliberately avoid collecting information that identifies you, please tell us anything that helps us locate the records — for example the device and the approximate date. We answer within 30 days.

Children

HabitGrid is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us at cevatsupport@gmail.com and we will delete it.

Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to restrict or object to its processing, to receive it in a portable form, and to withdraw consent you have given. Residents of the European Economic Area and the United Kingdom have these rights under the GDPR; residents of the Republic of Türkiye have equivalent rights under the KVKK; residents of California have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.

We do not sell or share personal information as those terms are used in the CCPA/CPRA, and we do not engage in cross-context behavioural advertising.

To exercise any right, email cevatsupport@gmail.com. Exercising these rights is free. You also have the right to complain to your local data protection authority.

International transfers

Some of the service providers named above are based in the United States and other countries outside your own. Where personal data is transferred out of the European Economic Area, the United Kingdom or the Republic of Türkiye, it is done under the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism offered by the provider.

Security

Data on your device is protected by iOS, including the device encryption that applies when your device is locked with a passcode. Connections to any service named above use encrypted HTTPS. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy — for example if a future version of the App uses a new service. The effective date at the top of this page always shows when it last changed. When a change is material, we will make it noticeable in the App or on the App Store listing rather than relying on you to re-read this page.

Contact

Cevat Akdemir
Email: cevatsupport@gmail.com

We are an individual developer, not a company, and we have not appointed a data protection officer because we are not required to. Email reaches us directly.