Privacy Policy
This policy explains what second habit ("the app", "we", "us") collects, why, and what control you have. It's written to be read, not to hide behind jargon.
Data controller: Guilherme Duro, Portugal. Contact: guilherme.duro@icloud.com
What stays on your device
Everything you create in the app: your habits, completion history, graduation records, private notes, settings, and preferences. None of it is transmitted to us or to anyone else. If you delete the app, this data is deleted with it — there is no copy anywhere.
Private notes are additionally protected by Face ID or your device passcode. They are stored only on your phone and are not included in any backup we control.
What we receive, and why
Only two things ever leave your device, and neither is your habit data.
- Purchase status. If you buy Full Access, the purchase is processed by Apple. Its status (whether the purchase is active) is managed by RevenueCat using an anonymous, app-specific identifier so the app can unlock the features you paid for and restore them on a new phone. No payment card details ever reach us or RevenueCat — Apple handles payment.
- Crash reports. If the app crashes, we may receive anonymous crash reports (stack traces and device model) through Apple's standard crash-reporting system, subject to your iOS sharing settings. These help us fix bugs and are not linked to you.
Whenever the app contacts Apple or RevenueCat for the purchase status, those providers necessarily receive technical data such as your IP address and request timestamps in order to route and secure the request. We don't use this to profile you or track you across apps.
What we do not do
- We do not ask for, or collect, your email address, name, or any account information.
- We do not show ads, use advertising or tracking SDKs, or collect an advertising identifier.
- We do not sell or share your data. There is nothing to sell.
- We do not use analytics that identify you. We see only aggregate purchase counts from RevenueCat to understand how the app is doing.
Legal bases (GDPR)
- Performance of a contract — providing the app and the Full Access purchase.
- Legitimate interests — security, preventing abuse, and fixing crashes.
Who processes data
- Apple — App Store distribution, purchases, and crash reporting.
- RevenueCat — purchase-status management, using an anonymous identifier.
These are processors acting on our instructions. RevenueCat's servers are in the United States; the only data it holds about you is the anonymous identifier and purchase status described above. We rely on Standard Contractual Clauses and/or the EU–US Data Privacy Framework for this transfer.
Security
Traffic between the app and its providers is encrypted in transit (HTTPS/TLS). Your habit data never travels at all. Private notes are gated by Face ID or your passcode. We deliberately keep what we collect minimal, which is the best protection of all.
How long we keep it
- On-device data stays until you delete the app or the item.
- Purchase status is kept by RevenueCat for as long as the purchase exists, so it can be restored.
- Crash reports are retained by Apple according to Apple's own policies.
Your rights
Because we hold no personal data about you, there is nothing for us to access, correct, or delete — your data is on your device and under your control. If you have questions or want to exercise any right regarding the anonymous purchase identifier, contact guilherme.duro@icloud.com. If you're in the EU/UK you may also complain to your local data-protection authority (in Portugal, the CNPD).
Children
second habit is intended for users aged 16 and over. It is not directed to children, and because the app collects no personal data, we cannot and do not knowingly collect any from anyone under 16. Where your country sets a higher age of digital consent, that higher age applies.
Changes
If this policy changes materially — for example if we add an optional sync feature in a future version — we'll update the effective date and, where appropriate, notify you in the app. Any such feature will be opt-in and described here before it ships.
Contact
Guilherme Duro — guilherme.duro@icloud.com