Privacy Policy
Last Updated: October 29, 2026
1. Introduction
Iteratio ("we", "our", "us", "App") is a habit tracking mobile application designed for users aged 13 and older. This Privacy Policy describes how we collect, use, store, and protect your personal information in accordance with Google Play requirements, the General Data Protection Regulation (GDPR), and other applicable data protection laws.
By using our App, you agree to the terms of this Privacy Policy.
2. Data Controller
The controller of your personal data is:
- Name: Unfoco
- Email: support@unfoco.org
- Address: Pivovarnická 1023/5, 18000, Prague 8, Czech Republic
3. Data We Collect
3.1 Data you provide voluntarily
- Registration data: email address, username, password (encrypted)
- Profile data: name (if signing in via Google — also profile picture)
- Habit data: habit names, icons, colors, completion history, as well as your experience points (XP), level, and earned achievements. Without Premium all of this is stored only on your device, even when you are signed in; with Premium it syncs between your devices through the cloud (section 6.1)
- Linked app (Premium): if you attach an app or a link to a habit, the habit stores the app's name and identifier (the Android package name or an entry of the built-in catalog) or the link you entered. To let you choose, the App reads the list of installed apps on your device (Android) or checks which apps from its built-in catalog are installed (iPhone); this list and the check results stay on your device and are never sent to us. The chosen app or link syncs to the cloud with the rest of the habit only if you have Premium. Analytics records only whether the linked app opened or could not be opened, and the link type (app or link), without app names or link addresses.
3.2 Automatically collected data
- Device information: device model, operating system version, unique device identifier
- Google Advertising ID (AAID): used only by Google’s ad system (Google AdMob) to show non-personalised ads and to prevent ad fraud, and only where ads are shown, that is, for users without a subscription; Google’s analytics service (Firebase Analytics) does not collect it
- Usage data: app usage frequency, feature interactions, session duration
- Analytics events: which screens you opened and which actions you took — creating, completing and deleting a habit, completing every habit for the day and how many there were, achievements and levels earned, the subscription screen and the place it was opened from, a subscription purchase and the plan chosen, redeeming a promo code, exporting your data, changing the language, signing in and the sign-in method, deleting your account, opening a linked app or failing to open it and the link type. If you are signed in, these events are tied to your account identifier; your interface language and whether a subscription is active are stored alongside them. Habit names and link addresses are never sent to analytics.
3.3 Data from third parties
- Google Sign-In: if you sign in via Google, we receive your email, name, and profile photo
- Sign in with Apple (iPhone): your Apple account identifier and an email address — either your real one or Apple’s forwarding address if you chose to hide your email; your name arrives only at the very first sign-in and only if you allowed it
- Google Play and the App Store: the state of your subscription — whether it is active, its type and its expiry date (see section 7.1)
4. Legal Basis for Processing (GDPR)
We process your data on the following legal grounds:
- Contract performance: to provide App services
- Consent: for direct marketing communications where applicable (you may withdraw at any time)
- Consent (where required by law): for the use of the advertising identifier when ads are shown in connection with Google AdMob, managed through Google’s User Messaging Platform (UMP) / a Google-certified consent management platform — see Advertising & consent below for how to change or withdraw those choices
- Legitimate interest: to improve the App and prevent fraud
- Legal obligations: to comply with legal requirements
5. How We Use Your Data
We use collected data to:
- Provide and maintain App functionality
- Sync habits between your devices (for Premium users)
- Show habit notifications and reminders (they are created and fire on your device itself)
- Improve and personalise user experience
- Analyse App usage; if you are signed in, analytics events are tied to your account identifier
- Process payments and subscriptions, check the state of a subscription, and prevent one purchase from being reused
- Provide technical support
- Ensure security and prevent fraud
- Serve non-personalised ads in the free version via Google AdMob, subject to your choices and applicable law
6. Data Storage and Security
6.1 Where data is stored
- Local storage: primary data is stored on your device — your habits, completion history, experience points, level, and earned achievements
- Cloud storage without Premium: if you are signed in, the cloud (Firebase, Google servers in EU/US) keeps only your sign-in details — email address, name, profile picture, sign-in method, interface language, and the time of your last sign-in — and your subscription and promo code details (see section 7.1). Your habits, completion history, experience points, and achievements are neither sent to the cloud nor downloaded from it: they stay on your device only (exceptions below)
- Interface language is saved in your profile, but the App takes it from your device, not from the cloud. On a new device a Premium subscriber gets the language from the profile once the subscription is confirmed; without Premium the language is not carried over to a new device, so choose it again in the settings
- With Premium: full habit sync between your devices — all habits, completion history, experience points, achievements, and linked apps
- Reminders and the reminder backup: habit reminders are created and fire on the device itself, for everyone, with or without Premium. There is no server-side reminder backup on any platform or plan: the App sends nothing to the cloud for reminders — no device identifier, no reminder profile, no habit names, reminder times, or dates — and our server no longer sends reminders at all. Leftovers from earlier versions: earlier versions of the App could upload a reminder backup to the cloud (habit names, reminder times and days, the daily goal, the dates on which you marked a habit done, the device identifier used to deliver notifications — on iPhone, an Apple notification token in its place — and your time zone offset), and the updated App deletes that leftover reminder backup the next time you open it while signed in and online, on Android and on iPhone, for every account, with or without Premium
- When Premium ends: the copy of your data in the cloud (habits, completion history, experience points, and achievements) is frozen — the App neither reads nor changes it, the copy itself is not deleted, and everything keeps working on your device. The same applies to whatever earlier versions of the App uploaded to the cloud without a subscription. If you subscribe to Premium again and the data on your device and in the cloud differ, the App asks you to choose Merge, Device Data, or Cloud Data. The frozen copy is deleted together with your account (section 11)
6.2 Security measures
- Data encryption in transit (TLS/SSL)
- Password encryption (Firebase Authentication)
- Regular security audits
- Limited employee access to data
6.3 Retention periods
- Account data, habit data in the cloud, and the internal records tied to the account: until account deletion by user (section 11)
- Usage data: 24 months
- Payment data: as required by law (up to 7 years)
7. Data Sharing
We do not sell your personal data.
We may share data with the following categories of recipients:
- Firebase (Google LLC): hosting, authentication, database — Privacy Policy
- Google Play Billing: payment processing — Privacy Policy
- Apple (App Store): subscription purchase and renewal on iPhone — Privacy Policy
- Google AdMob: ad serving — Privacy Policy
- Firebase Analytics (Google LLC): App usage events; if you are signed in, together with your account identifier
- Law enforcement: upon lawful request
7.1 Subscription verification and promo codes
When you buy a subscription in Google Play, a label identifying your App account is attached to the purchase: on Android this is the account identifier itself, and it goes to Google Play together with the purchase. The App sends the purchase confirmation to our cloud service — not only at the moment of purchase, but also every time you sign in and every time your Premium status is checked. The service asks Google for the state of the subscription, and its status, type and expiry date, along with the purchase confirmation itself, are stored next to your account, so that the check can be repeated from any of your devices. Google sends us notifications when a subscription changes (renewal, cancellation, refund). We also keep an internal record of which account a purchase confirmation belongs to: this is how we try to keep the same purchase from being turned into Premium on several accounts. Purchases made before such a label existed do not carry one; for them we rely on the internal record alone, which assigns the purchase to the first account that presents it to our service.
On iPhone the subscription is handled by the App Store, and a label identifying your App account is attached to the purchase: not the account identifier itself, but a value irreversibly derived from it. It serves the same purpose — it helps the subscription go to the account that paid for it. The App sends the App Store purchase confirmation to our cloud service and stores it next to your account in the same way as on Android. Our service does not ask Apple for the state of the subscription: it passes the confirmation to Google for the same check as on Android, and Google does not recognise App Store purchases.
If you redeem a promo code in the App on Android, we store which code was redeemed, the date it was redeemed, and the date until which it grants Premium, and we mark on the code itself that you have redeemed it, so that it cannot be redeemed again from the same account. On iPhone promo codes are handled by the App Store in its own window: no record of the code appears on our side, and Premium arrives through the ordinary subscription check. The internal records — the one for the purchase and the one for a redeemed promo code — are deleted together with your account.
8. Advertising & consent (AdMob / Google UMP)
If you use the free version of the App with advertising, we use Google AdMob. Depending on your region, Google’s User Messaging Platform (UMP) and our settings in the AdMob Privacy & messaging console may present a consent or options screen when you first open the App or when the law requires an update.
How to change or withdraw choices related to ads and the advertising ID:
- On launch: where the law requires it, Google’s consent form (UMP) appears automatically on first launch, depending on your region and settings.
- In the App: the Settings → Legal → Privacy settings item opens Google’s privacy options form (UMP), where you can change or withdraw your consent. This item appears only where Google requires consent.
- Android system settings: you can reset or limit your advertising ID in your device settings (e.g. Google / Ads, or the equivalent path on your device); these settings do not change the consent you gave in Google’s form.
- Contact us: email support@unfoco.org.
Withdrawing ad-related consent may result in different types of ads or limited ad delivery; the free App may still show ads where permitted. The App does not request personalised advertising: it asks Google’s ad system for non-personalised ads only.
On iPhone we do not track you across other apps and websites: the App does not ask for that tracking permission and does not use the advertising identifier for it.
Premium: subscribers use the App without third-party ad banners; this section applies only to the free tier.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the USA. We ensure appropriate data protection safeguards in accordance with GDPR (Standard Contractual Clauses).
10. Your Rights
Depending on your location, you have the right to:
- Access: obtain a copy of your personal data
- Rectification: correct inaccurate data
- Erasure: delete your account and all associated data
- Restriction: restrict processing of your data
- Portability: receive data in a machine-readable format
- Object: object to certain types of processing
- Withdraw consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
To delete your account and its associated data, use Settings → Delete Account in the app; if you have already removed the app, email support@unfoco.org. To adjust or withdraw ad-related consent, open Settings → Legal → Privacy settings (in the free version this item appears where Google requires consent) or email support@unfoco.org, as described in section 8. For other requests, contact support@unfoco.org.
11. Account and Data Deletion
You can delete your account at any time:
- In-app: Open the App → Settings → Delete Account → Confirm deletion. This deletes the account and everything associated with it: your profile (name, email, subscription details and achievements), your habits with all their completion marks and linked apps, any leftover reminder backup from earlier versions, and the internal records of your subscription purchase and of any promo codes you redeemed. The App’s data on the device is wiped.
- Without the App: If you have already uninstalled the App, send an email to support@unfoco.org with the subject "Delete My Account", including your account email address. We will delete the account and the same associated data, and will process the request within 7 business days.
Deleting your account does not cancel your subscription: it is handled by Google Play or the App Store, so you need to cancel it there — otherwise billing continues.
When your account is deleted:
- Cloud data is deleted immediately; residual copies in backup storage and service logs are removed within 30 days
- Analytics events are kept no longer than the period set out in section 6.3, and, after deletion, the account identifier they carry no longer corresponds to any account
- Data required by law will be stored according to requirements
12. Children
Our App is not intended for children under 13 and does not contain content designed to attract a child audience. We do not knowingly collect personal data from children. If you are a parent or guardian and learn that your child has provided us with personal data, contact us to have it deleted.
Why 13 years? This reflects legal requirements (COPPA in the USA, GDPR in the EU) that require parental consent to process children's data. For safety and compliance we set the minimum age at 13. The App’s target audience is users aged 13 and older.
13. Changes to This Policy
We may update this Privacy Policy. We will notify you of significant changes through the App or via email. Continued use of the App after changes constitutes acceptance of the updated Policy.
14. Contact Us
For privacy questions, contact us:
- Email: support@unfoco.org
- In-app: Settings → Contact Us
Page address: https://unfoco.org/iteratio/privacy