Privacy Policy
Habit Comp is a habit tracker that keeps score in money you already have. This page says exactly what it collects, why, where it goes, and how to get rid of it. It describes the app as it is built, not what it might do one day.
Last updated 28 September 2026 · Soto Programing · hello@sotoprograming.com
The short version
- We sell nothing and advertise nothing. There are no ads, no advertising SDKs, no data brokers, and no tracking of you across other apps or websites.
- We never see your bank. No bank, card, routing or account number is ever collected. The app records payments you make yourself; it does not move money.
- Apple Health is optional, value by value. The app only asks iOS for the values you switch on, and health data is used for one thing: checking your own habits off.
- You can take it all back. Export your data, or delete your account and everything in it, from inside the app.
Who we are
Habit Comp is made by Soto Programing. Write to hello@sotoprograming.com about anything on this page — including a request to see or delete your data. We are the controller of the data described here.
What the app collects
| What | Why | Where it is kept |
|---|---|---|
| Email address | It is your account. Signing in is required, and your email is the key every row of your data belongs to. | Google Firebase Authentication, and as the owner of your rows in our database. |
| What you put in the app | Habits, check-ins, notes and comments, amounts you log, the prices and points you set, your ledger of earnings and payments, penalties you owe yourself, competition entries, friends and your username. This is the app working. | Our database (Neon PostgreSQL, hosted in the United States), reached through our API. |
| Health & fitness data (iPhone and Apple Watch only, and only what you switch on) | Steps, exercise minutes, workouts, distance, active energy, water, protein, sleep and mindful minutes — read from Apple Health so habits like “sleep 7 hours” check themselves off instead of you logging them by hand. | The reading for each day is saved with your account so your other devices can show it. It is never used for anything else. |
| Amounts of money you assign | What a habit pays, what a slip costs, what you have earned and what you have recorded paying yourself. | Your ledger, in our database. These are numbers you typed. No bank or card details are collected anywhere in the app. |
| A notification id | Only if you allow notifications: an anonymous push subscription id for that device, so a friend request or a competition notice can reach you. | Our database and OneSignal, who deliver the notification. |
| Your device's time zone | The time zone your phone or browser reports about itself (for example “America/Chicago”), and the language and currency you use in the app. It shows us roughly which part of the world people use Habit Comp from. It is not your location: no GPS, no location permission, and no looking you up by your internet address. | Your account settings, in our database. |
| Nothing else | No location. No contacts. No photos. No microphone. No analytics and no crash reporting SDK. No advertising identifiers. | — |
Totals we look at
To see how the app is being used, we count things in totals: how many accounts there are, how many check-ins were made, which habit names and categories are common, and which colour theme people pick. A habit name or a category appears in those totals only when two or more people have it. A habit only you have is counted and never named. No Apple Health reading is part of any of it.
A note about location
The app never asks for your location and never records it — the time zone your device reports about itself is the only hint of where you are, and it is kept for the reason given above. iOS requires a location purpose string to be present when any included component links Apple's location APIs, and the notification SDK does — so the string exists in the app while nothing in the app uses it. If a location prompt ever appears, you can say no and lose nothing.
Apple Health, specifically
Health data gets its own rules, and these are ours:
- The app asks iOS only for the values switched on in Settings → Apple Health. Everything else is never requested.
- Health data is used for one purpose: checking off, scoring and showing your own habits.
- It is never used for advertising or marketing, never sold, and never shared with a data broker, an advertiser, or anyone else — by us or by anybody we use.
- It is not used to make decisions about you, and it is not mined for anything beyond the habit it belongs to.
- If a habit is one you have chosen to share with a friend, they see its progress and only the parts you switched on — never the underlying Apple Health records.
- If you ask Habit Comp to save an entry back to Apple Health (water, protein, a meditation, a night's sleep), that write happens on your phone, into your own Health store, and nowhere else.
- Switching a value off in Settings, or revoking permission in the Health app, stops any further reading immediately.
What other people can see
Nothing about you is public by default, and nothing is shared by accident:
- Nobody can find you until you claim a username. Until then you do not appear in any search.
- A friend sees only what you switched on, habit by habit. Fields you have not shared are never sent to their device at all. Habits are private unless you make them otherwise.
- In a competition, the organiser sees your scores for that competition's habits inside its dates, and other people see published results. Competitions score points; points are never money and nothing in the app pays a prize.
- Blocking is silent. Somebody you have blocked is told nothing and simply cannot find you.
Who we use, and what they get
- Google Firebase — authentication (your email and password) and hosting for the website and the API.
- Neon — the PostgreSQL database that holds your account, hosted in the United States.
- OneSignal — delivers push notifications, and receives only the device's push subscription id and the text of the notice.
- Apple — the App Store, and Apple Health on your own device. Health data is read on your device; Apple does not receive it from us.
- An email sender, for the mail the app sends you: a friend request, a competition notice, a password reset.
That is the whole list. We do not sell or rent data to anyone, and we have no arrangement under which anybody uses it for their own purposes.
How long it is kept
Your account is kept while you have one — a habit tracker whose history goes missing is not a habit tracker. When you delete your account, the data described above is deleted from the database in the same moment, and your sign-in is removed with it. Our database provider keeps a short rolling window of point-in-time history for recovery (six hours at the time of writing); after that window passes, nothing of it remains there either.
Getting your data, and deleting it
- Export: Settings → Your data → export your habits, your check-ins and your ledger as files you keep.
- Delete your account: Settings → Start over → Delete my account. It deletes your habits, check-ins, ledger, notes, health readings, penalties, friendships, competition entries, username and notification registrations, then removes your sign-in. It cannot be undone, and there is no “restore” we can perform afterwards.
- If you cannot reach the app, write to hello@sotoprograming.com from the address you signed up with and we will delete it for you.
- You can also ask us for a copy of what we hold, ask us to correct it, or object to how it is used. Wherever the GDPR, the UK GDPR or a US state privacy law gives you a right, you have it here, and exercising it costs you nothing.
One thing a deletion cannot reach back into: rows that are part of somebody else's record — a competition you took part in keeps its own history of what was scored. Your name, username, email and content are removed from it; what stays is anonymous.
Security
Everything travels over HTTPS. Every request to our API carries a verified sign-in token, and the database is reached only through functions that check who is asking before they read a row. Passwords are held by Firebase Authentication and never by us. No system is perfect, and we will tell you if something happens that affects your data.
Children
Habit Comp is not directed at children under 13, and we do not knowingly collect anything from them. If you believe a child has an account, write to us and we will remove it.
Changes
If this policy changes, the date at the top changes with it, and a change that affects what is collected or who sees it will be said in the app as well.