Iteratio ("we", "our", "us", "App") is a habit tracking mobile application designed for users
aged 13 and older. This Privacy Policy describes how we collect, use, store, and protect your
personal information in accordance with Google Play requirements, the General Data Protection
Regulation (GDPR), and other applicable data protection laws.
By using our App, you agree to the terms of this Privacy Policy.
Profile data: name (if signing in via Google — also profile picture)
Habit data: habit names, icons, colors, completion history, as well as your experience
points (XP), level, and earned achievements. Without Premium all of this is stored only on your device, even
when you are signed in; with Premium it syncs between your devices through the cloud (section 6.1)
Linked app (Premium): if you attach an app or a link to a habit, the habit stores the app's name
and identifier (the Android package name or an entry of the built-in catalog) or the link you entered. To let you
choose, the App reads the list of installed apps on your device (Android) or checks which apps from its built-in
catalog are installed (iPhone); this list and the check results stay on your device and are never sent to us. The
chosen app or link syncs to the cloud with the rest of the habit only if you have Premium. Analytics records only
whether the linked app opened or could not be opened, and the link type (app or link), without app names or
link addresses.
3.2 Automatically collected data
Device information: device model, operating system version, unique device identifier
Google Advertising ID (AAID): used only by Google’s ad system (Google AdMob) to show
non-personalised ads and to prevent ad fraud, and only where ads are shown, that is, for users without a
subscription; Google’s analytics service (Firebase Analytics) does not collect it
Analytics events: which screens you opened and which actions you took — creating, completing
and deleting a habit, completing every habit for the day and how many there were, achievements and levels
earned, the subscription screen and the place it was opened from, a subscription purchase and the plan chosen,
redeeming a promo code, exporting your data, changing the language, signing in and the sign-in method,
deleting your account, opening a linked app or failing to open it and the link type. If you are signed in,
these events are tied to your account identifier; your interface language and whether a subscription is active
are stored alongside them. Habit names and link addresses are never sent to analytics.
3.3 Data from third parties
Google Sign-In: if you sign in via Google, we receive your email, name, and profile photo
Sign in with Apple (iPhone): your Apple account identifier and an email address — either your
real one or Apple’s forwarding address if you chose to hide your email; your name arrives only at the very
first sign-in and only if you allowed it
Google Play and the App Store: the state of your subscription — whether it is active, its type
and its expiry date (see section 7.1)
4. Legal Basis for Processing (GDPR)
We process your data on the following legal grounds:
Contract performance: to provide App services
Consent: for direct marketing communications where applicable (you may withdraw at any time)
Consent (where required by law): for the use of the advertising identifier when ads are shown
in connection with Google AdMob, managed through Google’s User Messaging Platform
(UMP) / a Google-certified consent management platform — see
Advertising & consent below for how to change or withdraw those
choices
Legitimate interest: to improve the App and prevent fraud
Legal obligations: to comply with legal requirements
5. How We Use Your Data
We use collected data to:
Provide and maintain App functionality
Sync habits between your devices (for Premium users)
Show habit notifications and reminders (they are created and fire on your device itself)
Improve and personalise user experience
Analyse App usage; if you are signed in, analytics events are tied to your account identifier
Process payments and subscriptions, check the state of a subscription, and prevent one purchase from being reused
Provide technical support
Ensure security and prevent fraud
Serve non-personalised ads in the free version via Google AdMob, subject to your choices and applicable law
6. Data Storage and Security
6.1 Where data is stored
Local storage: primary data is stored on your device — your habits, completion history,
experience points, level, and earned achievements
Cloud storage without Premium: if you are signed in, the cloud (Firebase, Google servers in
EU/US) keeps only your sign-in details — email address, name, profile picture, sign-in method, interface
language, and the time of your last sign-in — and your subscription and promo code details (see
section 7.1). Your habits, completion history, experience points, and
achievements are neither sent to the cloud nor downloaded from it: they stay on your device only
(exceptions below)
Interface language is saved in your profile, but the App takes it from your device, not from
the cloud. On a new device a Premium subscriber gets the language from the profile once the subscription is
confirmed; without Premium the language is not carried over to a new device, so choose it again in the
settings
With Premium: full habit sync between your devices — all habits, completion history,
experience points, achievements, and linked apps
Reminders and the reminder backup: habit reminders are created and fire on the device
itself, for everyone, with or without Premium. There is no server-side reminder backup on any platform or
plan: the App sends nothing to the cloud for reminders — no device identifier, no reminder profile, no habit
names, reminder times, or dates — and our server no longer sends reminders at all. Leftovers from earlier
versions: earlier versions of the App could upload a reminder backup to the cloud (habit names,
reminder times and days, the daily goal, the dates on which you marked a habit done, the device identifier used to deliver notifications — on iPhone, an Apple notification token in its place — and your time zone offset), and the updated App deletes that leftover
reminder backup the next time you open it while signed in and online, on Android and on iPhone, for every
account, with or without Premium
When Premium ends: the copy of your data in the cloud (habits, completion history, experience
points, and achievements) is frozen — the App neither reads nor changes it, the copy itself is not deleted,
and everything keeps working on your device. The same applies to whatever earlier versions of the App
uploaded to the cloud without a subscription. If you subscribe to Premium again and the data on your device
and in the cloud differ, the App asks you to choose Merge, Device Data, or
Cloud Data. The frozen copy is deleted together with your account (section 11)
6.2 Security measures
Data encryption in transit (TLS/SSL)
Password encryption (Firebase Authentication)
Regular security audits
Limited employee access to data
6.3 Retention periods
Account data, habit data in the cloud, and the internal records tied to the account: until account deletion
by user (section 11)
Usage data: 24 months
Payment data: as required by law (up to 7 years)
7. Data Sharing
We do not sell your personal data.
We may share data with the following categories of recipients:
Firebase Analytics (Google LLC): App usage events; if you are signed in, together with your
account identifier
Law enforcement: upon lawful request
7.1 Subscription verification and promo codes
When you buy a subscription in Google Play, a label identifying your App account is attached to the purchase:
on Android this is the account identifier itself, and it goes to Google Play together with the purchase. The
App sends the purchase confirmation to our cloud service — not only at the moment of purchase, but also every
time you sign in and every time your Premium status is checked. The service asks Google for the state of the
subscription, and its status, type and expiry date, along with the purchase confirmation itself, are stored
next to your account, so that the check can be repeated from any of your devices. Google sends us notifications
when a subscription changes (renewal, cancellation, refund). We also keep an internal record of which account a
purchase confirmation belongs to: this is how we try to keep the same purchase from being turned into Premium
on several accounts. Purchases made before such a label existed do not carry one; for them we rely on the
internal record alone, which assigns the purchase to the first account that presents it to our service.
On iPhone the subscription is handled by the App Store, and a label identifying your App account is attached to
the purchase: not the account identifier itself, but a value irreversibly derived from it. It serves the same
purpose — it helps the subscription go to the account that paid for it. The App sends the App Store purchase
confirmation to our cloud service and stores it next to your account in the same way as on Android. Our service
does not ask Apple for the state of the subscription: it passes the confirmation to Google for the same check as
on Android, and Google does not recognise App Store purchases.
If you redeem a promo code in the App on Android, we store which code was redeemed, the date it was redeemed,
and the date until which it grants Premium, and we mark on the code itself that you have redeemed it, so that
it cannot be redeemed again from the same account. On iPhone promo codes are handled by the App Store in its
own window: no record of the code appears on our side, and Premium arrives through the ordinary subscription
check.
The internal records — the one for the purchase and the one for a redeemed promo code — are deleted together
with your account.
8. Advertising & consent (AdMob / Google UMP)
If you use the free version of the App with advertising, we use Google AdMob. Depending on
your region, Google’s User Messaging Platform (UMP) and our settings in the AdMob
Privacy & messaging console may present a consent or options screen when you first open
the App or when the law requires an update.
How to change or withdraw choices related to ads and the advertising ID:
On launch: where the law requires it, Google’s consent form (UMP) appears automatically on
first launch, depending on your region and settings.
In the App: the Settings → Legal → Privacy settings item opens Google’s
privacy options form (UMP), where you can change or withdraw your consent. This item appears only where Google
requires consent.
Android system settings: you can reset or limit your advertising ID in your device settings
(e.g. Google / Ads, or the equivalent path on your device); these settings do not change the consent you gave
in Google’s form.
Withdrawing ad-related consent may result in different types of ads or limited ad delivery; the free App may
still show ads where permitted. The App does not request personalised advertising: it asks Google’s ad system
for non-personalised ads only.
On iPhone we do not track you across other apps and websites: the App does not ask for that tracking permission
and does not use the advertising identifier for it.
Premium: subscribers use the App without third-party ad banners; this section
applies only to the free tier.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the USA.
We ensure appropriate data protection safeguards in accordance with GDPR (Standard Contractual Clauses).
10. Your Rights
Depending on your location, you have the right to:
Access: obtain a copy of your personal data
Rectification: correct inaccurate data
Erasure: delete your account and all associated data
Restriction: restrict processing of your data
Portability: receive data in a machine-readable format
Object: object to certain types of processing
Withdraw consent: withdraw consent at any time, without affecting the lawfulness of processing
based on consent before its withdrawal
To delete your account and its associated data, use Settings → Delete Account in the app; if you have already removed the app, email
support@iteratioapp.com. To adjust or withdraw ad-related
consent, open Settings → Legal → Privacy settings (in the free version this item
appears where Google requires consent) or email
support@iteratioapp.com, as described in
section 8. For other requests, contact
support@iteratioapp.com.
11. Account and Data Deletion
You can delete your account at any time:
In-app: Open the App → Settings → Delete Account → Confirm deletion. This deletes the account
and everything associated with it: your profile (name, email, subscription details and achievements), your
habits with all their completion marks and linked apps, any leftover reminder backup from earlier versions, and the internal records of your
subscription purchase and of any promo codes you redeemed. The App’s data on the device is wiped.
Without the App: If you have already uninstalled the App, send an email to
support@iteratioapp.com with the subject
"Delete My Account", including your account email address. We will delete the account and the
same associated data, and will process the request within 7 business days.
Deleting your account does not cancel your subscription: it is handled by Google Play or the
App Store, so you need to cancel it there — otherwise billing continues.
When your account is deleted:
Cloud data is deleted immediately; residual copies in backup storage and service logs are removed within 30 days
Analytics events are kept no longer than the period set out in section 6.3, and, after deletion, the account
identifier they carry no longer corresponds to any account
Data required by law will be stored according to requirements
12. Children
Our App is not intended for children under 13 and does not contain content designed to attract a
child audience. We do not knowingly collect personal data from children. If you are a parent or guardian and learn
that your child has provided us with personal data, contact us to have it deleted.
Why 13 years? This reflects legal requirements (COPPA in the USA, GDPR in the EU) that require
parental consent to process children's data. For safety and compliance we set the minimum age at 13. The App’s
target audience is users aged 13 and older.
13. Changes to This Policy
We may update this Privacy Policy. We will notify you of significant changes through the App or via email.
Continued use of the App after changes constitutes acceptance of the updated Policy.