Privacy Policy

This is a translation for your convenience. The German version is legally binding.

for the “Habit Swap” app and this website. Last updated: October 2026

1. Controller

Andreas Fleps, Schwärzweg 60, 74219 Möckmühl, Germany
Email: kontakt@habitswap.de

2. The essentials

• The app works without an account. Your goals, progress, check-ins, slips, notes, and conversations with the coach are stored only on your device.
• There are no ads, no tracking, and no analytics tools.
• Only if you sign up for “Together” (accountability partners, prayer groups) is data stored on our server – and only the data that is needed for it or that you explicitly share.
• You can delete your account in the app at any time. This deletes all your data on the server.
• You subscribe through Apple. We receive no payment or account data.

3. Data on your device

Everything you enter in the app stays in your device’s storage. We have no access to it. If you delete the app or choose “Reset everything” in the app, this data is gone. Whether it is included in your device backup (e.g. iCloud) depends on your device settings.

Reminders are scheduled as local notifications on your device and are not sent through our server.

4. “Together”: sign-in and server

Sign-in

For “Together”, you sign in with “Sign in with Apple” or “Sign in with Google”. We receive an identifier for your account and – depending on your choice – your email address (with Apple, an anonymous relay address if you wish). You choose your display name yourself; it is visible to your partners and group members.

What is stored on the server

• Profile: display name, time of your consent, whether you are walking with God (to show prayer features)
• Connections: your partners, invitation codes (partner codes are valid for 7 days), your groups and their members
• Shared values – only what you turn on under “What I share”: days free and streak (on by default), camps reached, date of your last slip, and your check-in mood (off by default)
• Posts: prayer requests, posts in groups, and replies to them
• Reports and blocks made by you or others (when content is reported, a copy of the reported content is stored)
• Device identifier for push notifications (push token), the platform (iOS/Android), and the language of the app (so that notifications arrive in your language)

Who can see the data

Your shared values and prayer requests are only visible to the partners you have connected with. Group posts are only visible to the members of that group. Access is enforced on the server by access rules.

Special categories of data

Information about your faith, prayer requests, and information about habits, relapses, and mood can be data about religious beliefs and health (Art. 9 GDPR). We only process it on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give when signing up for “Together”. You can withdraw it at any time by deleting your account.

Legal basis and storage period

We process the remaining data to provide “Together” (Art. 6(1)(b) GDPR) and reports to protect users from abuse (Art. 6(1)(f) GDPR). The data is stored until you delete it, leave a connection or group, or delete your account. When your account is deleted, all data stored about you is deleted and the link with “Sign in with Apple” is revoked.

5. Service providers

Supabase

Server, database, and sign-in are operated by Supabase Inc. (USA). The data is stored in a data center in Frankfurt am Main, Germany. A data processing agreement with EU Standard Contractual Clauses is in place with Supabase.

Firebase Cloud Messaging (Google)

For push notifications we use Firebase Cloud Messaging by Google Ireland Ltd. and Google LLC (USA). The push token of your device and the content of the notification are transmitted. The notifications are deliberately worded discreetly (e.g. “New post in your group”) and contain no prayer requests or faith content. Google is certified under the EU-U.S. Data Privacy Framework.

Apple and Google (sign-in)

When you sign in, the privacy policies of Apple or Google also apply. The Apple Push Notification service is also involved in delivering push notifications to iPhones.

Apple (subscription and payment)

You buy Habit Swap Premium through the App Store. Apple processes your payment and account data as an independent controller under its own privacy policy. We receive none of it. The app only checks on your device via StoreKit whether a subscription is active, and stores the last confirmed status (product and expiry date) on your device so that it also works without internet. Nothing about this is transmitted to our server.

6. Links

You can read Bible passages via a link to bibleserver.com (German) or ebible.org (all other languages). When you open them, the privacy policy of the respective provider applies.

7. This website

When you visit this website, the hosting provider processes technically necessary data (e.g. IP address, time, page visited) in server logs in order to deliver and secure the site (Art. 6(1)(f) GDPR). We use no cookies and no tracking.

8. Children

The app is intended for people aged 16 and over.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to withdraw consent at any time with effect for the future. To do so, contact the email address above. You can also lodge a complaint with a data protection supervisory authority.