Effective 20 September 2026 · HabitWall is operated by ProductShake LLC ("we", "us")
The short version
HabitWall is local-first: the mobile apps work fully offline without an account, and your habit data stays on your device unless you sign in to enable sync. We show no ads, use no advertising trackers, and never sell or share your personal data. You can export or delete everything at any time.
What we collect, and why
Account details — when you sign in with Apple or Google we receive your name and email address (or a private relay address if you choose to hide it). We use them to identify your account and to contact you about it.
Habit data — the habits you create, completions, freezes and notes are synced to our servers only when you are signed in, so they can follow you across devices and the web dashboard.
Device basics — platform (iOS/Android/web), device name, timezone and app language, used to run sync, show which devices are connected, and localize emails.
Usage analytics — the mobile apps record how they are used so we can fix the places where people get stuck: that the app was opened, which setup step or screen was reached, that the Pro screen was shown or closed, and whether a purchase was started, completed or cancelled, together with device model, OS and app version, language, timezone and a randomly generated installation identifier (plus your account id when signed in). These events go only to our own servers, never include your habits, notes or health data, are not shared with anyone, and are not used for advertising. We do not store your IP address with them, and you can switch this off in the app under Settings → Share usage data.
Billing status — whether your account has an active Pro plan and which platform it was purchased on. Payments are handled by Apple, Google, or Stripe; we never see or store your card number.
We do not collect your location, contacts, photos, or browsing history, and the marketing site sets no advertising cookies.
Health data (Apple Health & Health Connect)
Connecting a habit to health data is optional and off by default. If you link a habit to Apple Health (iOS) or Health Connect (Android) and grant read permission, the app reads daily totals only for the type that habit tracks: steps, sleep duration, exercise minutes, or mindful minutes.
Processed on your device. The daily total is compared with your goal to lay that day's tile automatically. The underlying measurements are not stored and never leave your device.
What syncs. If you are signed in, our servers store only the habit's chosen data type and goal (for example "steps · 10,000") and the resulting daily completions — never the health measurements themselves.
Never misused. Health data is never used for advertising, analytics unrelated to the feature, or eligibility decisions of any kind, and is never sold or shared with third parties.
Revocable. Withdraw access at any time in iOS Settings › Privacy › Health or in the Health Connect app; removing the habit or its health link stops all reads immediately.
How long we keep data
Without an account — none of your habit data reaches our servers. It lives only on your device and is removed when you delete the app.
Usage analytics — events are kept for up to 12 months and then deleted; only aggregate counts are kept longer.
With an account — synced data is kept for as long as your account exists, so it can follow you across devices.
When you delete your account — your account and all synced data are removed from our live systems immediately, and from encrypted server backups within 7 days when those backups expire.
Payment records — invoices and transaction records required for accounting are kept by our payment processors (Apple, Google, Stripe) under their own retention rules; we keep only your plan status.
Where your data lives
Synced data is stored on servers we operate in the European Union (Hetzner, Germany), behind Cloudflare's network. Data is encrypted in transit (TLS) and at rest.
Emails
With an account you may receive service emails (for example a weekly recap or account notices). Every non-essential email contains a working unsubscribe link, and you can switch marketing emails off in Settings.
Your rights
Export — download a complete copy of your data from the dashboard or app at any time.
Deletion — deleting your account (in the app or dashboard) removes your account and all synced data from our servers. Data on your own device stays with you.
EU/GDPR — we process account and habit data to provide the service you signed up for (contract), and service communications on legitimate interest. You may access, correct, export, delete, or object by contacting us; you may also complain to your local data-protection authority (in Denmark: Datatilsynet).
Children
HabitWall is not directed at children under 13, and we do not knowingly collect their data.
Changes & contact
We will update this page when our practices change and adjust the date above. Questions or requests: hi@productshake.com.