Duse Habit Tracker Privacy Policy

This Privacy Policy describes how Duse ("we," "us," or "our") handles information in connection with your use of the Duse habit tracker mobile application (the "App"). Duse is built to keep your habit data private and mostly on your device. This policy explains exactly what leaves your device and who processes it. You do not need an account to use Duse.

1. Your habit data stays on your device

The habits you create, your completions, streaks, notes, reminders, and settings are stored on your device, in an on-device database. If you enable iCloud sync, that data is synced through your own private Apple iCloud account (the CloudKit private database) so it is available on your other devices. It syncs device-to-device through Apple; we cannot read your iCloud data, and it is governed by Apple's Privacy Policy. We never receive the names, notes, or contents of your habits.

2. Apple Health (optional, on-device only)

If you choose to connect Apple Health, Duse reads only the specific metrics you allow (for example steps or mindfulness minutes), only on your device, to automatically complete matching habits. Your Health data never leaves your device and is never sent to us or to any third party. You can revoke this access at any time in the Health app.

3. What we collect, and who processes it

To keep the App working and to understand how it is used in aggregate, Duse uses two third-party services. Neither of them receives your habit names, notes, or Apple Health values.

• Analytics — TelemetryDeck. We collect anonymous, aggregate usage events (for example: a habit was completed, a screen was viewed, a sync succeeded) to understand which features are used and to find problems. These events are tied to a salted, one-way hashed device identifier — not your name, email, or Apple ID — and cannot be used to identify you. We deliberately do not send the text of your habits or notes. See TelemetryDeck's privacy policy.

• Subscriptions & offers — Superwall. We use Superwall to display and manage Duse Premium subscription offers and to reflect your purchase status. Superwall receives your purchase status and basic device attributes tied to an anonymous identifier — no name or email. Your actual payment is processed by Apple through your Apple ID; we never receive your payment details. See Superwall's privacy policy.

4. What we do not do

• We do not collect your name, email address, phone number, postal address, or precise location.

• We do not sell your data or share it with advertisers.

• We do not track you across other companies' apps or websites. Duse uses no advertising identifier (no IDFA) and does not show the App Tracking Transparency prompt, because it performs no such tracking.

• We do not send your habit content or Apple Health data off your device to any analytics service.

5. Purpose and legal basis for processing

We process the anonymous, aggregate usage data described above on the basis of our legitimate interest in understanding how the App is used, improving it, developing new features, and fixing bugs. We process purchase status to provide and restore the Premium features you have paid for (performance of our agreement with you).

6. Data retention and your rights

Analytics events are anonymous and aggregate and cannot be traced to you individually. Your habit data lives on your device and in your own iCloud account — deleting the App (and, if you wish, its iCloud data from Settings › Apple ID › iCloud) removes it. You can also reset local data from within the App's Settings.

To the extent any data we process is considered personal data under the GDPR or similar laws, you have the rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing. To exercise these rights, contact us using the details below.

7. International data transfers

The anonymous usage data we process may be stored and processed outside your country of residence. TelemetryDeck processes analytics data in the European Union. Superwall processes purchase-status data in the United States. Where data is transferred internationally, we rely on our providers' applicable safeguards; please review their privacy policies, linked above, for details.

8. Children

Duse is not directed at children under 13 and does not knowingly collect data from them.

9. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, or to exercise any of your rights, please contact us at:

[email protected]

We will respond within a reasonable timeframe and in accordance with applicable law.