1. The short version
Habit Now works entirely on your device unless you choose otherwise. Your habits, completions and tree live in a database on your phone. You do not need an account, and without one nothing you record ever leaves the device.
If you sign in, your habit data is copied to a private row in the app's database so a second device can see it. If you subscribe to Pro and use the coach, a summary of your habit history is sent to an AI provider so it can write your weekly note. Those are the two moments your data travels, and both are things you switch on yourself.
There is no advertising, no analytics SDK, no crash reporter and no tracking of any kind in this app. Nothing about you is sold, rented, or shared with anyone for marketing.
2. Who runs this
Habit Now is made and operated by an independent solo developer. There is no company, no data team and no third party with access to the database beyond the service providers named in this policy.
For anything in this policy, including requests to see or delete your data, write to contact.appsnow@gmail.com.
3. What is kept on your device
Stored locally, in an app-private database and settings store:
- Your habits — name, icon, colour, whether it is a habit you're building or one you're quitting, its target, and its schedule
- Which habits you completed on which days, and counts for count-type habits
- Your experience points, tree stage and the ledger of which habit-days have already paid out
- Achievements you've unlocked and the ornaments they placed on your tree
- Watering cans used, and on which days
- Reminder times, your chosen background, week-start day and other settings
- Optionally your age and gender, if you enter them — used only to soften the coach's tone
Deleting the app deletes all of it. There is no hidden copy left behind on the device.
4. If you make an account
Accounts are optional and exist for one reason: to move your habits between your own devices. Authentication and storage are handled by Supabase, which acts as the app's database and authentication provider.
When you sign in, Supabase holds:
- Your email address, and a hashed password if you signed up with one
- If you used Sign in with Apple or Google: the email and basic profile the provider returned. Apple's private-relay addresses work fine and are never resolved
- A display name and avatar, if you set them
- Your habits, completions, achievements, watering cans and experience-point records — the same rows described in section 3
Every row is tied to your user id and protected by row-level security, so one account cannot read another's data. Signing out stops the copying; the data already on the server stays until you delete your account.
5. The AI coach
Pro subscribers get a weekly note written by the tree. To write it, the app sends a compact summary of your recent history to Bitmesh, an AI proxy that forwards the request to a large language model.
What goes in that summary:
- Your habit names, exactly as you typed them
- Whether each is a build or quit habit, its target and its schedule
- Derived statistics — completion rates, streak lengths, which weekdays go best and worst, the times of day you usually complete things
- Your tree's current level and health
- Your age and gender, if you entered them
What does not go in it: your email, your name, your account id, your device identifiers, or your location. The note comes back, is stored on your device, and that is the end of it.
Habit names are free text, so they are the one field where you control what the model sees. If a habit concerns your health, your beliefs or anything else you would rather not send anywhere, either name it something only you understand, or leave the coach off — the rest of the app is unaffected by that choice.
6. Purchases
Pro subscriptions are sold by Apple and Google, not by this app. Payment details never reach the developer, and never pass through the app at all.
RevenueCat is used to check whether your subscription is currently valid. It receives an anonymous purchase identifier and the receipt the store issued. It does not receive your habits.
7. Downloading the tree
The first two tree stages ship inside the app. Later stages are downloaded from a Cloudflare content-delivery network the first time you reach them, then cached on your device. Like any file download this involves your device's IP address reaching Cloudflare's servers, which keep standard, short-lived request logs. The request contains no account information and says nothing about you beyond which picture of a tree was fetched.
8. Reminders
Habit reminders are scheduled by your phone's own operating system and fire locally, on time, with no server involved. No push notifications are sent to you from anywhere.
9. What is never collected
- Location, in any form, coarse or fine
- Contacts, calendar, photos, microphone or camera
- Advertising identifiers, and no ad network is present in the app
- Behavioural analytics — no session recording, funnels, heatmaps or event tracking
- Crash or performance telemetry sent to a third party
- Health-kit or fitness data from your device
10. Your choices, and getting your data out
- Use it without an account. Everything except sync works in guest mode, and nothing leaves the device.
- Turn the coach off. No summaries are sent, and the rest of Pro is unaffected.
- See what's stored. Email the address below and you'll get a copy of everything held against your account.
- Delete everything. Email the same address to have your account and every row belonging to it erased. It is a deletion, not a flag — the rows are gone. Deleting the app removes the local copy.
- Correct something. Most of it you can edit directly in the app; for anything you can't, write in.
Requests are handled personally and normally answered within a few days. If you're in the UK or EU, this covers your rights of access, rectification, erasure, restriction, portability and objection under the UK GDPR and GDPR; if you're in California, your rights to know, delete and to opt out of sale — noting that no data is ever sold, so there is nothing to opt out of.
11. Children
Habit Now is not directed at children under 13, and no account should be created for one. If you believe a child has created an account, write in and it will be deleted.
12. Legal basis and storage
Where the GDPR applies, data is processed on the basis of performing the service you asked for — syncing what you asked to sync, writing the note you asked for — and, for optional fields like age and gender, on your consent, which you can withdraw by clearing them.
Account data is kept on Supabase infrastructure and may be processed in the region where that project is hosted. Data is retained for as long as your account exists, and deleted when you ask for it to be.
13. Changes
If this policy changes, the date at the top changes with it, and any change that affects what leaves your device will be announced in the app before it takes effect. Continuing to use Habit Now after that means the updated policy applies.
14. Contact
contact.appsnow@gmail.com — for privacy questions, data requests, deletion, or to tell me something here is wrong.