Privacy Policy
Last updated: August 17, 2026
The short version. Habit Tracker: HabitWin is local-first: your habits, check-ins, notes and moods are stored on your device. You do not need an account to use the app. Health data read from Apple Health or Health Connect stays on your device and is never used for advertising. The only things that leave your device are: anything you send us deliberately (feedback), the data Google AdMob needs to show ads to users without a subscription, and — only if you choose to sign in and subscribe — your habit data, encrypted in transit, for cloud backup and sync.
Who we are
The app is provided by JUNAID MOHAMMED ABDUL NAYEEM, located in Chicago, Illinois, USA. You can reach us at junaid.mohammed777@yahoo.com.
What is stored on your device
Your habits, check-ins, notes, journal entries, moods, reminders, pause periods, statistics and app settings are kept in a private database on your device. This includes an optional display name, a chosen glyph or profile photo, and — if you enable app lock — a passcode stored only as a salted, stretched cryptographic hash, never as the passcode itself. Uninstalling the app removes this data from your device.
Device features the app can use — only with your permission
- Health data (Apple Health on iOS, Health Connect on Android). If you link a habit to a health metric, the app reads that metric to fill the habit in for you: steps, sleep, exercise, distance, active calories, hydration, mindful minutes and body weight. If you turn on write-back, the app can also write hydration and mindful-minute entries you log in the app back to your health store. Health data is processed on your device only, is never uploaded to us, is never shared with any advertising provider, and is never used for advertising or profiling.
- Notifications. Used for the habit reminders you set (scheduled locally on the device) and to tell you when we reply to your feedback.
- Camera and photo library. Used only if you choose a profile photo. The image is copied into the app's private storage and stays on your device.
- Biometrics (Face ID, Touch ID, fingerprint). Used only if you turn on app lock, and only to unlock the app. Biometric data is handled entirely by your operating system; the app never sees it.
Accounts, cloud backup and sync
An account is optional. If you sign in with Google or Apple (through Firebase Authentication) and hold an active Pro subscription, your habits, check-ins and related entries are backed up to our servers so they can sync to any device you sign in to. In that case we store your account identifier, the email address your provider gives us, and the habit data you chose to sync. Data is encrypted in transit. If you never sign in, none of this happens and we hold nothing about you beyond what the sections below describe.
Advertising
The free version is supported by advertising served by Google AdMob. To serve, frequency-cap and measure ads, AdMob may collect your device's advertising identifier, IP address, approximate location derived from it, and ad-interaction data. Google's use of this data is governed by Google's privacy policy. Your health data, habit data, journal entries and moods are never shared with any advertising provider and are never used for ad targeting. An active Pro subscription removes all advertising.
Feedback and support
If you send feedback from inside the app, we receive your message and a randomly generated installation identifier so we can reply. If notifications are enabled, a push token is stored so our reply can reach your device. You may include an email address or phone number; they are used only to respond to you.
Purchases
Subscriptions are processed by Apple (App Store) or Google (Google Play). We never receive or store your payment card details. A purchase receipt is validated with the store to activate your subscription and to record the entitlement.
Children
The app is not directed to children under the age required by your local law to consent to data processing, and we do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will address it.
Security
Data in transit is encrypted. On-device data is protected by your device's own security, which is why a device passcode is worth having. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Your choices and rights
- Grant or revoke Health, Notification, Camera and Biometric permissions at any time in your device settings.
- Export your data as CSV or JSON from inside the app, at any time.
- Delete your account and any synced data — see Account & Data Deletion.
- Remove advertising by subscribing to Pro.
- Depending on where you live (including under the GDPR and CCPA), you may have rights of access, correction, deletion and objection over the limited data we hold. Email us and we will act on it.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Changes to this policy
We may update this policy from time to time. Changes take effect when the updated policy is posted here, with a new effective date.
Disclaimer
HabitWin is a general wellness and productivity app. It is not a medical device and does not diagnose, treat, cure or prevent any condition or disease. If you have concerns about your health, consult a qualified professional.