Habit Pebble Privacy Policy

Effective October 10, 2026 · Applies to Habit Pebble: Habit Tracker Widget on Android and iPhone · Publisher: Cosmovex

1. Data stored only on your device

Habit Pebble stores the following locally on your phone:

• the habits you create (name, emoji, colour, type, schedule, target, order)
• your check-ins, skipped days, rest days (with the label you pick, such as sick, travel or rest) and edits to past days
• the notes, cues and notes to your future self that you write
• reminder times
• app settings (theme colour, language, first day of the week, widget choices)
• whether you have unlocked Habit Pebble Pro

This data is not sent to Cosmovex. Uninstalling the app deletes it from the device. It is not deleted from backup files you saved yourself, or from your phone's system backup.

Home-screen widgets (and, on iPhone, Lock Screen widgets) read the same local data to show your habits. On iPhone, the widget and the app share data through a storage area on the device that only Habit Pebble can access.

Tap-to-tick stickers (Android). A sticker is an NFC tag or a printed QR code that holds only a web address, https://tickrow-habit.web.app/t/ followed by a random code. The code does not contain your name, your habit or any other personal information; the list that connects codes to habits stays on your phone. Removing a sticker in the app makes its code stop working. Opening the address in a web browser (for example on a phone without Habit Pebble) loads a plain page with no scripts, cookies or analytics; like any web page, that request reaches Firebase Hosting (Google), and we do not add anything that records it.

Count it for me (optional). For a habit you choose to count with your phone, Habit Pebble can use the camera, the motion sensors, the proximity sensor or the light sensor while a counting session is open. Camera pictures are read on your phone by an on-device model while you move. They are not saved, not sent to Cosmovex, and not shared with anyone. Sensor readings are used the same way. Only the count you accept is stored, as part of that day's check-in, together with how much of it the phone counted. The camera permission is requested only the first time you choose camera counting. Every habit can still be ticked by hand.

2. Backups, exports and imports you create

• Backup file. When you tap Back up now, Habit Pebble writes one file with your habits and check-ins, and you choose where it goes (for example Google Drive, iCloud Drive, Files or a folder on your phone). Cosmovex never receives or sees that file. The service you save it to handles it under its own privacy policy.
• CSV export (Habit Pebble Pro) works the same way: the file goes only where you choose.
• Import. When you import a backup or a file from another habit tracker, Habit Pebble reads the one file you pick, on your phone.
• Share cards. Year and streak-milestone cards are drawn on your phone. A card is sent only when you tap Share, to the app or person you pick. A card can show a habit's name, so check it before you share. After you finish a comeback, Habit Pebble can offer a comeback card (for example, "Missed 5 days. Back on day 6."). It is optional, hides the habit name unless you switch it on, and on the free version carries a link or QR code to the Habit Pebble store listing with a campaign tag. That tag contains no personal information.

3. Your phone's own backup

Android's backup (Google) and iPhone's iCloud or computer backup can include Habit Pebble's habits and settings, so they can come back when you set up a new phone from that backup. This is controlled by your phone's settings and by Google's or Apple's policies, not by Cosmovex.

4. Usage statistics (Firebase Analytics)

We use Firebase Analytics, a Google service, to understand which features are used and where people get stuck, so we can fix problems and decide what to build.

What is collected:

• App interaction events, for example: the app was opened, a habit was created (with its type and schedule kind, such as "number" or "3 times a week"), a check-in was made, a widget was added, a tap-to-tick sticker was set up or used, a reminder was set, the Reminder check-up found a blocked setting, the Pro screen was viewed, or a purchase or restore succeeded or failed.
• A random app-instance identifier created by Firebase. It is not your name, email or phone number.
• The advertising ID (Android), because the app has the advertising ID permission. Firebase can use it for analytics. You can reset or delete it in your phone's settings.
• Device and app information: device model and maker, operating system version, app version, language, and approximate country, which Google derives from your IP address.
• Whether Pro is unlocked, and whether a purchase happened (with its currency).

What is not collected: the names or content of your habits, your check-in history, your contacts, photos, location or files.

Your choice: Settings has a Usage analytics switch. It is on by default outside the EEA, the UK and Switzerland, and off by default inside them. When it is off, Habit Pebble sends no usage events and tells Firebase to stop collecting analytics on your device. You can change it at any time.

Google processes analytics data under its own terms: policies.google.com/privacy and firebase.google.com/support/privacy.

5. Crash reports (Firebase Crashlytics)

If Habit Pebble crashes, Firebase Crashlytics (Google) can receive a report so we can find and fix the bug. A report contains the technical stack trace, your device model, operating system and app version, a few device-state details (such as free memory), and a random installation ID. It does not contain your habit names, notes or check-ins.

Your choice: crash reports follow the same Settings → Usage analytics switch as section 4. It is off by default in the EEA, the UK and Switzerland, and nothing is sent while it is off. Crash reports are kept for 90 days.

6. Settings from Firebase Remote Config

Habit Pebble fetches a few settings, such as how often ads may appear, from Firebase Remote Config (Google). To do this the app sends a Firebase installation ID and basic device and app information (app version, operating system, language and country). The settings do not depend on your habits and contain no personal information about you.

7. Ads in the free version

The free version of Habit Pebble shows occasional full-screen ads from Google AdMob. Pro removes them, and once you own Pro, Habit Pebble makes no ad requests at all.

• What AdMob uses: your device's advertising ID, IP address, and device and app information, to choose, show and measure ads. Habit Pebble does not send AdMob your habits, notes, check-ins or counts.
• Advertising ID (Android). Habit Pebble declares the advertising ID permission (AD_ID) and AdMob uses the ID to serve ads. You can reset it, or delete it, in your phone's settings (Settings → Privacy → Ads, the exact path varies by phone). When you own Pro, Habit Pebble makes no ad requests.
• Your choice: in the EEA, the UK and Switzerland, Google's consent message asks before any ad is requested, and never on your first launch. Settings → Ad privacy choices reopens it where it is required. You can also reset or delete the advertising ID in your phone's own settings.
• When ads can appear: only at a pause, after you switch tabs, and not in the first days after install. Never during a counting session or while you edit a habit.

Google's terms for ads: policies.google.com/technologies/ads.

8. Purchases

Habit Pebble Pro is a one-time purchase handled entirely by Google Play (Android) or the App Store (iPhone). Cosmovex never receives your card or payment details. The store tells the app only whether Pro is unlocked. Restore purchases asks the store again, for example on a new phone.

9. Notifications and permissions

• Camera (optional): only if you choose camera counting for a habit (push-ups, squats, jumping jacks, plank). It is used live on your phone and nothing is recorded. Counting also works with the phone's sensors, and every habit can be ticked by hand.
• Notifications: to show habit reminders. Habit Pebble schedules them on your phone; no server sends them. On the lock screen they show a neutral title unless you choose to show habit names.
• Alarms & reminders (Android): so reminders arrive at the time you set.
• Run at start-up (Android): so reminders are scheduled again after your phone restarts.
• Battery settings (Android, optional): the Reminder check-up can open your phone's battery settings. Nothing changes unless you allow it.
• Files, through the system picker: only the file you choose when you save, restore or import.

Habit Pebble does not request location, contacts, microphone or photo library access. The camera is requested only if you choose camera counting.

10. Children

Habit Pebble is not directed at children under 13, and we do not knowingly collect personal information from children under 13. The ads are requested for a general audience of age 13 and over. If you believe a child under 13 has used Habit Pebble, email us and we will help.

11. Health information

Habit Pebble is a general habit tracker. It is not a medical or health app, it does not connect to health services, and it does not send health or fitness data anywhere. Whatever you choose to track, including counts from optional rep counting, stays on your device.

12. How long data is kept

Data on your device stays until you delete it or uninstall the app. Event-level analytics data is kept for the retention period set in our Google Analytics property (between 2 and 14 months). Crash reports are kept by Firebase Crashlytics for 90 days. Remote Config keeps no per-user history that we can see. Ad data held by Google AdMob follows Google's own retention policy.

13. Your choices and rights

• Delete your data: delete habits in the app or uninstall it, and delete any backup files you saved.
• Analytics, crash and ad data: because Habit Pebble has no account, we cannot link this data to your name. To limit it, turn off Usage analytics, reset your advertising ID in your phone's settings, or buy Pro to stop ads. Email trionapps@gmail.com with any access or deletion request and we will help as far as we can; to find data we need the Firebase installation ID that you can copy from Settings, if your build shows it. We answer within 30 days.
• Wherever you live, including the EEA, the UK and US states with privacy laws, you have the rights those laws give you, including access, correction, deletion and objection. We will not treat you differently for using them.

14. Security

Data sent to Firebase, AdMob and the app stores is encrypted in transit (HTTPS). Data on your phone is protected by your phone's own security, such as its screen lock and device encryption.

15. Services and SDKs the app uses

• Firebase Analytics (Google): usage statistics, section 4.
• Firebase Crashlytics (Google): crash reports, section 5.
• Firebase Remote Config (Google): settings, section 6.
• Google AdMob and the Google User Messaging Platform (consent message): ads, section 7.
• Google Play Billing or the App Store: purchases, section 8.
• An on-device pose model for optional camera counting: runs on your phone and sends nothing.

These services are provided by Google and Apple under their own privacy policies. We do not use any other advertising or analytics service.

16. Changes

If this policy changes, for example because a feature such as cloud sync is added, we will update this page and the effective date above before the change ships.

17. Contact

Cosmovex · trionapps@gmail.com