Legal

Privacy Policy

Last updated: 14 September 2026 · Applies to the ProperHabit iOS app, version 1.0.1, and to this website.

ProperHabit is a habit tracker that runs entirely on your iPhone. There is no account, no server we operate, no analytics and no advertising. This policy explains — in plain language — what that means for your data, and what limited processing still happens when you buy Premium or email us.

1. Who we are

ProperHabit (the "app") and this website are operated by the controller of any personal data described in this policy:

Legal name

Zordon Intelligence spółka z ograniczoną odpowiedzialnością

Registered office

ul. Piotrkowska 270, 90-361 Łódź, Poland

Registration

KRS 0001190915 · NIP 7252358503 · REGON 542545843

Contact

hi@zordonintelligence.pl

2. The short version

This matches the declaration we publish in App Store Connect under App Privacy: "No data collected".

3. Data we do not collect

For the avoidance of doubt, we do not collect, receive, store, sell or share:

• your habits, goals, schedules, notes, completions, streaks or scores;
• health or fitness data of any kind, including the steps, sleep and mindfulness values the app reads from Apple Health;
• your name, email address, postal address or telephone number (unless you choose to email us — see section 17);
• your location, contacts, photos, calendar or microphone data;
• advertising identifiers, device fingerprints or cross-app tracking data;
• crash reports, usage statistics, screen recordings or session replays;
• your payment card details or billing address.

The app makes no network requests to any server we operate or control. We do not run a back-end for ProperHabit, and we have no way to read anything you create in the app.

4. Data stored on your device

Everything you create in the app is written to an on-device database on your iPhone using Apple's SwiftData framework:

• your habits — names, icons, colours, targets and schedules;
• your history — completions, skips (grace days), pauses and notes;
• your statistics and streaks, which are calculated on the device;
• your app settings, including reminder and widget preferences.

Widgets, the Live Activity, the Focus Filter and the on-device insights ("Postępy" / "Progress") all read this same local database. Nothing in that list is uploaded anywhere by us. Because the data never reaches us, we cannot see it, recover it, or delete it on your behalf.

The only ways data can leave your device through ProperHabit are (a) optional iCloud sync, which you control and which we have no access to, and (b) an export or backup file that you create and choose to share or save.

5. Optional iCloud sync

The app can sync your habits across your own Apple devices. This feature is off by default, requires Premium, and is switched on by you in Settings → iCloud → Sync across devices (iCloud) inside the app.

When you enable it, the app uses Apple's CloudKit to mirror your local database into the private database of your own iCloud account (container iCloud.com.zordon.properhabit). In simple terms:

• the data goes to your private iCloud storage, not to us;
• we never receive a copy, and we cannot read or restore it;
• Apple acts as the provider of iCloud under Apple's own privacy policy;
• you can turn sync off at any time in the app, and you can delete the iCloud copy from Settings → your name → iCloud → Manage Account Storage on your device.

If sync is turned off, nothing leaves your iPhone. Turning sync off does not delete the copy already stored in iCloud — see section 14.

6. Apple Health (HealthKit)

With your explicit permission, the app can complete a habit automatically from three Apple Health metrics: steps, sleep analysis and mindfulness minutes. Health auto-complete requires Premium.

• Permission first. The app only reads Health data after you grant access in the Apple system permission sheet. Declining changes nothing except that those habits stay manual.
• Read-only. The app requests read access only. It never writes to, edits or deletes anything in Apple Health.
• Purpose limited. Health values are used for one thing only: deciding whether the habits you linked to them are complete today.
• On-device. Health data is processed on your iPhone. It is never transmitted to us, to Apple on our behalf, or to any third party, and it is never used for advertising or profiling.
• Not sold or shared. We do not sell or share Health data, and we do not use it for any purpose other than the feature you asked for.

You can withdraw permission at any time in Settings → Privacy & Security → Health → ProperHabit, or by removing the linked metric from the habit in the app.

7. Notifications

Reminders are scheduled locally on your device by iOS. We do not operate a push-notification service, we hold no device tokens, and no notification content passes through any server we control. Notifications are optional and can be turned off in the app or in iOS Settings.

8. Cookies, analytics and tracking

This website sets no cookies — not for analytics, not for advertising, not even for preferences. There is no consent banner because there is nothing to consent to. We use no analytics product, no tag manager, no heat-map or session-recording tool and no advertising pixel.

The app contains no analytics and no tracking. No Software Development Kit from an analytics, advertising or attribution vendor is included in the build, and no advertising identifier is accessed. ProperHabit does not ask for App Tracking Transparency permission because it does not track you.

One naming note, so there is no confusion: the app has a statistics screen called Progress (Polish: Postępy) whose on-device calculation module is named "insights". It computes your completion rates, streaks and trends from your own local data. It is not telemetry and it sends nothing anywhere.

9. Third-party services on this website

This website is a static page. Serving it inevitably involves the hosting provider that delivers the files to your browser, and that provider necessarily sees your IP address in order to send you the page.

• Hosting. The site is hosted on Vercel. Vercel processes the IP address and request metadata needed to deliver the page and to protect the service against abuse.

There are no other third-party requests. The typefaces used on this site are served from this same domain rather than loaded from an external font service, so reading these pages discloses your IP address to nobody beyond our hosting provider. The site loads no analytics, no tag manager, no session-recording tool and no advertising pixel, and it contains no embedded videos, social plug-ins, comment widgets or third-party scripts. The legal and support pages make zero third-party requests.

10. Purchases and payments

Premium is sold exclusively through Apple's App Store using StoreKit 2. Apple processes the payment, and we never receive, process or store your payment card details, billing address or Apple Account credentials. What we can see is limited to what Apple provides to every developer: anonymous sales and subscription reports that are not linked to your identity.

Purchases are made under Apple's Media Services Terms and Conditions. The plans, their lengths, renewal behaviour and how to cancel are set out in our Terms of Use and on our Support page. Managing or cancelling a subscription is done through your Apple Account, not through us.

11. Children

ProperHabit is a general-audience habit tracker and is not directed at children under 13. Because the app collects no personal data from anyone, it also collects no personal data from children. If you believe a child has somehow sent us personal data, email us and we will delete it.

12. Legal bases for processing

Where the GDPR requires us to identify a legal basis, these are the bases we rely on. They cover everything described in this policy, and nothing else:

• Article 6(1)(b) — performance of a contract, or steps taken at your request before entering one. If you write to us about the app or a purchase — for example to ask a question or report a problem — we process your message and our reply because that is what you have asked us to do.
• Article 6(1)(f) — our legitimate interests. We have a legitimate interest in answering the people who contact us, in handling requests to exercise the rights in section 13, and in keeping this website available and secure. The unavoidable request data that our hosting provider processes to deliver this page — your IP address and basic request metadata, described in section 9 — is processed on this basis too, because without it the page cannot reach your browser and the service cannot be protected against abuse. We have balanced those interests against your rights: the data is short-lived, limited to what delivery and abuse protection require, and is not used to identify you or to build a profile of you.
• Article 6(1)(a) — consent: we do not rely on it. Nothing described in this policy is based on your consent. The permissions the app requests — Apple Health access, notifications and iCloud sync — are iOS permissions that decide what happens on your own device, and the data behind them is never sent to us, so no processing by us depends on consent. If we ever introduce a feature that needs consent, we will ask for it first, and section 18 says how we would tell you.

One consequence is worth stating plainly: because Apple Health data is read on your device and never reaches us (section 6), we do not process special-category data as defined in Article 9 of the GDPR, and no additional condition for that kind of data is needed on our side.

13. Your rights under the GDPR

If you are in the European Economic Area, the United Kingdom or Switzerland, you have rights under the General Data Protection Regulation over personal data that a controller holds about you. Our situation is unusual: we hold no personal data about you from the app, because it stores everything locally and we operate no back-end for it. The only personal data that exists at all is the request data our hosting provider processes to serve this website (section 9) and any message you choose to send us. That is not a way of avoiding your rights — it means there is little or nothing on our side to access, correct, port or erase, and where there is, we will help.

You can already exercise most of those rights directly, and for free, in the app:

• Access and portability. Your full history is visible in the app and can be exported from Settings (JSON and database backup) and from the Progress screen (CSV). Premium includes export; you can also read everything on screen without paying.
• Rectification. Edit or delete any habit, completion or note at any time.
• Erasure. Delete entries individually, or delete the app to remove all local data.
• Restriction and objection. Turn off Health access, notifications, or iCloud sync whenever you like; each one is opt-in and individually revocable.
• Automated decisions. Streaks and scores are calculated on your device from your own data. No automated decision about you produces legal or similarly significant effects.

Where we do hold something — a support email you sent us, or a request to exercise a right — we handle it on the basis of your request and our legitimate interest in answering you, and we keep it only as long as needed to resolve the matter. To make any request, email hi@zordonintelligence.pl.

You have the right to lodge a complaint with a supervisory authority. Our lead authority is the Polish data protection authority:

Supervisory authority

Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland · uodo.gov.pl

You may also complain to the authority in your own country of residence, place of work or place of the alleged infringement.

14. Retention and deletion

Local data stays on your iPhone until you remove it. There is no automatic expiry and no retention period on our side, because there is no "our side".

• To delete everything: delete the ProperHabit app from your device. iOS removes the app's local database with it.
• If you had iCloud sync on: deleting the app removes the local copy but may leave the synced copy in your private iCloud storage. Remove it in Settings → your name → iCloud → Manage Account Storage → ProperHabit. If you simply reinstall, iCloud may restore your habits — which is usually what you want, but is not "deletion".
• If you have iCloud Backup enabled in iOS: your device backup may include the app's data, under Apple's control and your own iCloud settings.
• Reinstalling without a backup or sync: your history is gone permanently. We cannot recover it for you, because we never had it.
• Support emails: we keep them only as long as needed to deal with your question.

15. Do Not Sell or Share (California)

Under the California Consumer Privacy Act as amended by the CPRA, and under comparable US state privacy laws, we state plainly:

• We do not sell personal information, and we have not sold any in the preceding twelve months.
• We do not share personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for any purpose beyond providing the feature you asked for.
• There is nothing to opt out of. Because we do not collect, sell or share personal information, no "Do Not Sell or Share My Personal Information" link is required or offered — offering one would imply we hold data we do not hold.
• No discrimination. We do not offer financial incentives for data, and we do not treat you differently for exercising any privacy right.
• Health data. Health data read through Apple Health never leaves your device and is not sold or shared, consistent with the limits the CCPA places on sensitive health information.

To ask a question or make a request under these laws, email hi@zordonintelligence.pl. We may need to confirm the request came from you, but since we hold no account data, in most cases there will be nothing for us to disclose beyond this policy.

16. International transfers

We do not transfer your app data anywhere, because we never receive it. The only cross-border element is the processing that happens when you choose to interact with us or with Apple:

• Hosting (section 9) may involve infrastructure outside the EEA, including in the United States, with the providers' own transfer safeguards in place.
• Apple processes App Store purchases and iCloud storage as an independent controller in the countries where it operates. Apple's own safeguards apply.
• Support email is processed by our email provider; if we ever need to move it outside the EEA, the transfer relies on an appropriate safeguard such as the European Commission's Standard Contractual Clauses.

17. Trader information and contact

For any question about this policy, or to exercise a right described above, contact the controller:

Trader / controller

Zordon Intelligence spółka z ograniczoną odpowiedzialnością

Postal address

ul. Piotrkowska 270, 90-361 Łódź, Poland

Identifiers

KRS 0001190915 · NIP 7252358503 · REGON 542545843

Contact point

hi@zordonintelligence.pl — the fastest way to reach us. We aim to reply within a few business days.

App support

See the Support page for help with the app, purchases and accessibility feedback.

Data protection enquiries

Welcome in English or Polish. Write "Privacy" in the subject line so it reaches the right person.

18. Changes to this policy

We may update this policy when the app changes — for example, if a future version adds a feature that involves processing data in a new way. The "Last updated" date at the top of this page always shows the current version, and the previous versions remain available on request.

If a change is material, we will say so in the app or in the App Store release notes before it takes effect. Continuing to use the app after an update means you accept the revised policy. If we ever introduce a feature that collects data, we will describe it here and ask for your consent first — and this policy will say so before that feature ships.

See also our Terms of Use, the End User License Agreement and the Support page.