Privacy Policy
The short version: Stoke is offline-first. Your habits, completions, and notes live on your device (and in your own private iCloud account if you turn sync on). We don't run accounts, we don't sell your data, and we don't track you across other apps or websites.
1 Introduction
This Privacy Policy explains how Stoke — Habit Tracker ("Stoke", "the app", "we", "us", or "our") handles information when you use our iOS, iPadOS, and watchOS application. We've written it to comply with Apple's App Store guidelines, the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA).
By downloading or using Stoke, you agree to the practices described in this policy. If you do not agree, please do not use the app.
2 Who we are
Stoke is developed and published by Xboost ("the developer"). For any privacy questions or requests, contact us at victor@xboostapp.io. We are the data controller for any personal data processed in connection with the app.
3 Data we collect
Stoke is designed to collect as little as possible. We do not require an account, email, name, or login to use the app.
Data you create (stored on your device)
- Habit content: habit names, descriptions, emoji, colors, schedules, categories, and reminder times.
- Completion records: the days you mark a habit complete, along with optional notes or memos and timestamps.
- Preferences: your chosen theme, accent color, app icon, and notification settings.
This data is stored locally using Apple's SwiftData framework. It never leaves your device unless you enable iCloud sync (see Section 5).
Data processed automatically
| Category | What it is | Why |
|---|---|---|
| Purchase status | Whether you hold an active subscription or lifetime purchase (an entitlement flag — never your payment card) | Unlock Premium features |
| Local notifications | Reminder schedules stored on-device by iOS | Send the reminders you set up |
| Anonymous app events | Non-identifying onboarding/funnel events used to improve first-run flow; processed on-device | Improve the app experience |
We do not collect your location, contacts, photos, microphone, health data, advertising identifiers (IDFA), or browsing history. Stoke contains no third-party advertising or cross-app tracking SDKs.
4 How we use data
- To provide core functionality — tracking habits, calculating streaks, and showing your stats.
- To deliver local reminder notifications that you configure.
- To verify your Premium entitlement and unlock paid features.
- To diagnose problems and improve the app's reliability and onboarding.
We do not use your data for advertising, profiling, or automated decision-making that produces legal effects.
5 iCloud sync (optional)
If you enable iCloud sync in Settings, your habits and completions are synchronized across your Apple devices using Apple CloudKit within your own private iCloud account. This data is stored by Apple under your Apple ID — we cannot read it, and it is not sent to our servers. Sync is governed by Apple's Privacy Policy. You can turn sync off at any time.
6 Third-party services
Stoke relies on a small number of trusted providers strictly to operate the app:
- Apple, Inc. — App Store distribution, in-app purchase processing, and (if enabled) iCloud/CloudKit storage. See Apple's Privacy Policy.
- RevenueCat, Inc. — manages and validates your subscription receipts. RevenueCat receives a pseudonymous app-generated identifier and your purchase/transaction status; it does not receive your name, email, or payment details. See RevenueCat's Privacy Policy.
Actual payment is handled entirely by Apple through your Apple ID. We never see or store your credit card or billing information.
8 Data retention & deletion
Your habit data is retained on your device for as long as you keep the app installed. Because the data is stored locally:
- Delete a habit or use "Delete All Data" in Settings to remove records from the app.
- Delete the app to remove all on-device data. If iCloud sync was enabled, you can also remove the data from iCloud via your device's iCloud settings.
- Purchase/entitlement records held by Apple and RevenueCat are retained per their respective policies and as required for accounting and refund handling.
9 Your rights
Depending on where you live (e.g., EEA, UK, California), you may have the right to access, correct, delete, or export your personal data, and to object to or restrict its processing. Because Stoke stores your data on your own device, you can exercise most of these rights directly:
- Access & portability: export your data as JSON from Settings → Data.
- Correction: edit any habit or completion in the app.
- Erasure: delete habits, use "Delete All Data", or remove the app.
For any request we can help with, email victor@xboostapp.io. You also have the right to lodge a complaint with your local data protection authority.
10 Security
Your data is protected by your device's built-in security, including hardware encryption and your passcode/Face ID/Touch ID. Stoke also offers optional Face ID / passcode lock for the app. iCloud data is encrypted in transit and at rest by Apple. No method of storage or transmission is 100% secure, but we apply reasonable safeguards appropriate to the limited data we handle.
11 Children's privacy
Stoke is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.
12 International users
Stoke is available worldwide. Where data is processed by our service providers (Apple, RevenueCat), it may be processed in countries other than your own, including the United States. These providers maintain appropriate safeguards (such as Standard Contractual Clauses) for international transfers.
13 Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date above and, for material changes, provide notice within the app or on this page. Your continued use of Stoke after an update constitutes acceptance of the revised policy.
14 Contact us
Questions, requests, or concerns about this Privacy Policy or your data:
Xboost
Email: victor@xboostapp.io