Privacy Policy

Last updated: March 18, 2026

Your habit data stays on your device. Hazlo stores all your habits locally using SwiftData. Only pseudonymous leaderboard scores are shared via CloudKit if you opt in. There are no analytics, no advertising, and no third-party tracking.

1. Introduction

Hazlo is a habit tracking app for iOS designed with privacy as a core principle. The app works 100% offline, stores your data locally on your device, and only shares minimal, pseudonymous data if you explicitly opt into social features. This privacy policy explains what data the app stores, how it is stored, and your rights regarding that data.

2. What Data We Store

Hazlo stores the following data that you create and generate through normal use of the app:

  • Habits: Name, icon, color, frequency, schedule, goal type, goal value, category, creation date.
  • Completions: Completion timestamps, values (for quantitative habits), optional notes.
  • Categories: Name, icon, color, sort order.
  • User Profile: Display name, avatar emoji, friend code, level, XP.
  • Badges: Badge identifier, unlock date, category.
  • Weekly Scores: Week date, completion rate, streak count, perfect days (used for leaderboards if you opt in).
  • Streak Freezes: Activation date, associated habit.
  • Reminders: Per-habit reminder times and days.

All of this data is created by you through your use of the app. Hazlo does not collect data from external sources or third parties.

3. How Data Is Stored

Your habit data is stored in two places:

  • Locally on your device using Apple's SwiftData framework. This data is available even when you have no internet connection.
  • In your private iCloud account via Apple's CloudKit service, enabling sync across all your Apple devices signed into the same Apple ID.

4. CloudKit and iCloud

When iCloud is enabled on your device, your data is synced to Apple's CloudKit servers. Important details:

  • Private Database: All your habit data, completions, categories, badges, and profile are stored in your private CloudKit database. Only you can access it.
  • Public Database: If you opt into leaderboards (Settings > Leaderboard), only the following pseudonymous data is published: display name, avatar emoji, friend code, weekly completion rate, streak count, and perfect days. Your habit names, details, and completion data are never shared.
  • Data is encrypted in transit and at rest by Apple.
  • The developers of Hazlo cannot read, access, or view your private habit data.
  • Apple's infrastructure handles all data storage and encryption. Apple's own privacy policy applies: apple.com/privacy

If you disable iCloud for Hazlo or do not opt into leaderboards, no data leaves your device.

5. Apple Health Integration

Hazlo can optionally read data from Apple Health to auto-complete habits linked to health metrics (steps, exercise minutes, water intake, sleep, etc.). Important details:

  • Hazlo requests read-only access to Health data. It never writes to Apple Health.
  • Health permissions are requested only for the specific metrics you choose to link.
  • Raw health values are never stored in Hazlo's database. Only a boolean flag ("habit was auto-completed") and a timestamp are recorded.
  • Health data never leaves your device — it is not synced to iCloud, CloudKit, or any server.
  • Health data never appears in logs, analytics, or crash reports.
  • Health integration is entirely optional. The app works fully without it.

6. Local-Only Settings

The following preferences are stored locally on your device using UserDefaults and are not synced via CloudKit:

  • Streak freeze count
  • Daily reminder time
  • Weekly report enabled/disabled
  • Leaderboard opt-in
  • HealthKit enabled/disabled
  • App theme and color scheme
  • Week start day preference
  • Notification preferences

These settings remain on the device where they were configured.

7. What We Do Not Collect

Hazlo does not use or include:

  • Analytics SDKs (no Firebase, no Mixpanel, no Google Analytics)
  • Crash reporting SDKs (no Crashlytics, no Sentry)
  • Advertising frameworks or identifiers
  • Location services
  • Access to contacts or photos
  • Third-party data sharing of any kind
  • Cross-app or cross-site tracking

No data is sent to any server other than Apple's iCloud infrastructure for the sole purpose of syncing your data across your devices (and publishing pseudonymous leaderboard scores if you opt in).

8. Data Deletion

You have full control over your data:

  • Delete All Data in Settings > Data Management removes all habits, completions, categories, badges, profile data, and resets all preferences. This also removes your data from CloudKit.
  • Delete individual habits directly within the app. Deletions sync across all your devices.
  • Uninstalling the app removes all local data from that device. iCloud data persists in your iCloud account until you manually delete it through iCloud settings.

9. Children's Privacy

Hazlo is rated 4+ and is suitable for users of all ages. The app does not require accounts or registration. Social features (leaderboards, friend codes) are optional and pseudonymous — no real names or personal information are required. There is no special data collection for children.

10. Health Disclaimer

Hazlo is not a medical device. Habit tracking is for informational and motivational purposes only. Consult a healthcare professional for medical advice.

11. Your Rights by Jurisdiction

European Union / EEA (GDPR): Your data is processed on-device and synced through Apple's CloudKit to your private iCloud container. The developer does not have server-side access to your data. Data controller: Mike Pulgar Olguin, individual developer, Spain. Legal basis: legitimate interest (app functionality). To exercise your GDPR rights (access, rectification, erasure, portability, objection), contact: mpulgar.olguin@gmail.com. Supervisory authority: AEPD, C/ Jorge Juan 6, 28001 Madrid, Spain.

United Kingdom (UK GDPR): UK residents have the same rights as under GDPR. Supervisory authority: ICO, Wycliffe House, Water Lane, Wilmslow, SK9 5AF, United Kingdom.

California, USA (CCPA/CPRA): We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use sensitive personal information for unauthorized purposes.

Brazil (LGPD), Canada (PIPEDA), South Africa (POPIA), Japan (APPI): Your data rights are respected under all applicable jurisdictions. Since the developer cannot access your CloudKit data, your rights to access, correction, deletion, and portability are exercised directly through the app and your iCloud settings.

12. Changes to This Policy

If we make changes to this privacy policy, we will communicate them through an app update. The effective date at the top of this policy will be updated accordingly. Continued use of the app after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions about this privacy policy or your data:

Developer: Mike Pulgar Olguin (individual developer), Spain.