Privacy Policy
Effective Date: January 31, 2026
Last Updated: September 24, 2026
AutoHabits (the "App") is provided by Pebbl ("we", "us", "our"). This Privacy Policy explains how we collect, use, and share information when you use the App on iPhone and Apple Watch.
Information We Collect
Information you provide
Account and profile information: If you sign in with Apple, we receive an Apple-provided user identifier and may receive your name and email address. The App stores your user identifier and display name on your device to manage your session and personalize the experience.
Age declaration: We store your adult-eligibility answer on your device. We do not collect your date of birth or identity documents for this check, and do not send this answer to our AI providers.
Habit content: Habits, recipes, triggers, notes, goals, and settings you create.
Chat content: Messages you send to the in-app AI assistant and related outputs.
Device and sensor data (with your permission)
Location data: Used to trigger location-based habits and send location-based reminders.
Health and activity data: Used for sedentary detection and activity-based triggers (e.g., steps, stand time, exercise time). When you record actions with Apple Watch, additional workout and sensor data may be captured.
Motion data: Used for activity detection and motion-based triggers.
Microphone data: Used for audio trigger detection on Apple Watch. If you record after a trigger, audio files may be saved to your device and shared to your iPhone via Apple Watch connectivity.
Screen Time data: Family Controls selections (apps, categories, or web domains) and usage thresholds you configure for Screen Time-based habits.
Notifications: We store notification settings and schedule reminders locally on your device.
App data and diagnostics
Local logs: The App writes diagnostics and telemetry logs to the device for debugging and reliability.
Files and evidence: When enabled, recordings and sensor files (e.g., audio or CSV sensor exports) may be stored locally to support action recording.
How We Use Information
We use information to:
Provide core habit tracking, reminders, and automation features.
Trigger habits based on time, location, motion, audio, or Screen Time events.
Personalize suggestions and generate habit recipes via the AI assistant.
Sync between iPhone and Apple Watch.
Improve reliability, debug issues, and maintain security.
Sharing of Information
We do not sell your personal information. We share information only as described below:
Service providers: The App sends your chat content and a user identifier through our Cloudflare API to our AI service provider (Dify) to generate responses. Dify Cloud sends the conversation to Microsoft Azure OpenAI to generate responses. Dify and Microsoft process these requests under their applicable terms and privacy practices.
AI habit suggestions: If you separately allow AI habit suggestions, the App sends Dify, through our Cloudflare API, the habit action text and, for sedentary and app-use habits, the configured trigger description. Requests include your Apple sign-in identifier or a random identifier stored on this device if you are not signed in. Dify sends these requests to Microsoft Azure OpenAI. Suggestions may refresh when you save a habit or open its AI Insights tab. Completion history, Health readings, location readings, recordings, and actual Screen Time usage are not included. You can revoke permission in Settings → AI & Privacy; this stops future requests but does not delete previously shared data.
AI badge generation: When you generate a badge, the App sends Google Gemini, through our Cloudflare API, a prompt containing the habit title, selected artwork style, and color. Our API does not include your Apple sign-in identifier in the request it forwards to Google. Google may retain prompts and outputs under the applicable Gemini API terms; data use depends on the service tier and settings. Do not include confidential or sensitive information in AI prompts.
Sensor data and AI: The App does not automatically attach Health, location, microphone recordings, or Screen Time datasets to chat or badge requests. Information you type into messages or habit titles can still be included in these requests.
Apple services: We rely on Apple frameworks (e.g., Sign in with Apple, HealthKit, DeviceActivity, Notifications, Watch Connectivity). Data processed through these services is handled under Apple's policies and your device settings.
Legal and safety: We may disclose information if required by law or to protect the rights, safety, and security of users and the App.
Account and deletion service: Our backend hosted on Cloudflare verifies Apple sign-in tokens and authorization codes and stores encrypted credentials for revoking Apple access. It authenticates AI requests and forwards the approved prompts to the providers described above; our gateway does not store prompt or response content. It stores hashed access credentials with account/device identifiers: AI access sessions expire after one hour and device-bound account authorizations expire after 30 days. Expired authorizations are removed by scheduled cleanup. For deletion, it records your account or device identifier, request dates, cleanup status, and confirmation, and revokes AI authorizations. It does not receive your full habit database or Health readings. A device-held signing key verifies guest requests. Cloudflare uses the incoming IP address to determine an approximate country for feature availability; AI badge generation is unavailable in mainland China and other regions unsupported by the image provider. This check does not use your device location permission.
Data Storage and Retention
On-device storage: Most data is stored locally on your device using Apple system storage (SwiftData, UserDefaults, and App Group storage).
Apple Watch files: Action recordings (audio and sensor files) are stored locally on the watch and transferred to your iPhone when you choose to upload them.
Retention: You can delete habits, recipes, or files in the App, or remove local app data by uninstalling the App. Uninstalling does not erase copies held by AI providers. AI service data retention is controlled by the providers and may include logs or backups. Contact us for a request concerning provider-held data.
Your Choices and Controls
Permissions: You can enable or disable Location, Health, Motion, Microphone, and Screen Time permissions in iOS Settings at any time.
Delete data: You can delete specific habits, recipes, and recordings in the App. Uninstalling the App removes local data.
Sign out: You can sign out of Sign in with Apple in the App.
Delete account and app data: Use Settings → Delete Account and Data. After confirmation and identity verification, an accepted request signs you out, pauses AI features, removes this iPhone's app data, and queues cleanup on your paired Apple Watch. Provider cleanup is tracked separately, with a target of 30 days; the app shows your request status, any delay, and the final confirmation. Any applicable retention exception is disclosed in that confirmation. Older Apple sign-ins may require you to disconnect AutoHabits in your Apple Account settings. Health records held by Apple's Health app are managed separately in Health.
Deletion records: Once cleanup is confirmed, we remove direct account/device identifiers and revocation credentials from our operational deletion service. A minimal receipt containing a random request ID, dates, status and any retention notice remains available for 90 days. Provider and infrastructure backups follow their applicable retention schedules; completion notices identify applicable exceptions.
Security
We use reasonable safeguards to protect your information. However, no security measures are perfect, and we cannot guarantee absolute security.
International Users
If you use the App outside the United States, your information may be processed in countries where our service providers operate.
Children's Privacy
AutoHabits is restricted to adults aged 18 and over. People under 18 may not use the App. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided personal information, contact us so we can investigate and arrange appropriate action.
Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last Updated" date above and, when appropriate, provide additional notice in the App.
Contact Us
If you have questions about this Privacy Policy, contact us at: derrick@pibbl.co