Privacy Policy

Last updated: September 3, 2026

This privacy policy applies to all apps published by OftenApps ("we", "our", "us"): Shielded Focus, Proof, Nightfast, Cashflow, Edgewise, Use It Up, Sunspot, Findable, Sendable, and Best Shot.

Data we collect

Our apps collect the minimum data necessary to function:

• Subscription status — managed by Apple (App Store) and Google (Play Store) via RevenueCat. We do not receive or store payment details or credit card information.
• Advertising identifiers — on the free tier only, and only by Google AdMob. See "Advertising" below.

Data we do NOT collect

• We do not collect names, email addresses, phone numbers, or any personally identifying information.
• We run no analytics and no crash reporting of our own — we receive no record of your screens, taps, or crashes.
• We do not require account creation to use any of our apps.
• We do not sell your personal data, and we do not transfer it to data brokers. The one third party that receives anything is Google AdMob, on the free tier only, and only the device identifier and limited usage data it needs to serve and measure a non-personalized ad — see "Advertising" below.
• We do not track your location in the background, and no app of ours follows you between places. One app takes a single location reading when you ask it to — see "Location" below.

Local storage

All app data — habits, timers, session history, bills, plant records, scanned documents, compression history — is stored locally on your device using on-device storage (MMKV). We do not have access to this data. Deleting the app permanently removes it.

Health data (Proof and Nightfast)

Two apps read health data, and both read it for the same reason: so that you do not have to tell the app something your phone already knows.

• Proof has no checkbox — every habit reads a number you already measure and completes itself when that number reaches your target.
• Nightfast proposes your fasting window from your own recorded sleep instead of a fixed preset, and can end a fast by itself when your food log shows you have eaten.

Both read from Apple Health on iOS and from Health Connect on Android. In both apps:

• Read only. The app asks for read access. It never writes to Apple Health or Health Connect, never edits them, and never deletes anything in them.
• Only what the feature needs. Proof can read step count, exercise minutes, mindful minutes, time asleep, stand hours and logged water — and of those, only the ones behind habits you created yourself, and only for the days it has to check. Fasting Tracker reads two things: time asleep, and calories from your food log. Nothing else in either app.
• It never leaves your device. Health data is not uploaded, not sent to us, and not sent to any third party — there is no account and no server to send it to. Only the outcome is kept — whether the day's target was reached, or the start and end time of a fast — in the same on-device storage as the rest of the app.
• Never used for advertising. Health data is never used for ads, ad targeting, profiling or any marketing purpose, and is never shared with an advertising network.
• You can revoke it at any time — iOS: Settings > Health > Data Access & Devices; Android: Health Connect > App permissions. Habits then show no value rather than an invented one, and Nightfast falls back to the standard windows you can pick by hand.

Deleting the app removes everything it stored. Your Apple Health and Health Connect records are untouched, because the app never wrote to them.

Location (Proof)

One app uses location, and only in one place. Proof lets you save a place — your gym, your studio — and mark a habit done by tapping "I'm here" while you are there.

• The reading is taken only at the moment you tap. There is no background location, no geofence, and no location permission beyond "while using the app". Proof cannot check your location when it is closed, which is why you have to open it while you are there.
• The place you saved is stored on your device with the rest of your habits. The reading itself is compared against it and then discarded — it is not kept as a history, not sent to us, and not sent to anyone else.
• No other app of ours requests location for any purpose.

Separately, and in every free-tier app that shows ads, Google AdMob derives an approximate location from your IP address in order to serve a region-appropriate ad. That is AdMob's collection, not ours; it is why our App Store privacy label lists coarse location, and it stops when you subscribe or when you delete your advertising ID. See "Advertising" below.

AI-powered apps

Two apps use AI features: Edgewise and Sunspot. In both, all AI processing happens entirely on your device:

• Edgewise: Background removal runs on-device using Apple Vision (iOS) or ML Kit Subject Segmentation (Android). Photos are never uploaded or sent to any server — processing happens fully offline.
• Sunspot: Plant diagnosis runs on-device using a bundled machine learning model (TensorFlow Lite). Photos are never uploaded or sent to any server — processing happens fully offline.

Use It Up is often mistaken for an AI app and is not one: its meal plans come from a fixed database and template set bundled in the app, combined by a plain algorithm. There is no model and no prompt, and nothing about your pantry is sent anywhere.

None of our apps send your photos, images, or personal data to any third-party AI service.

Advertising

Free-tier users may see ads served by Google AdMob. Every ad request our apps make is flagged non-personalized — AdMob is told not to use your data to personalise the ad, so what you see is based on context, not on a profile of you. AdMob still receives device identifiers and limited usage data to serve and measure the ad, and to limit repetition and fraud, in accordance with Google's privacy policy. Our apps do not ask to track you across other companies' apps and websites, so no App Tracking Transparency prompt appears. You can further limit ad tracking in your device settings:

• iPhone: Settings > Privacy & Security > Apple Advertising > turn off Personalized Ads.
• Android: Settings > Google > Ads > Delete advertising ID.

Pro subscribers do not see ads.

Camera and photo library permissions

Apps that require camera or photo access (Findable, Edgewise, Sunspot, Best Shot, Sendable) request permission only when you initiate an action that needs it. These permissions are used solely for the stated feature — we do not access your camera or photos in the background.

Children's privacy

Our apps are not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us and we will delete it promptly.

Data retention

All app data is on your device and deleted when you uninstall the app. We operate no server and keep no copy of it. Any data held by Apple, Google or RevenueCat is subject to their own retention policies.

Changes to this policy

We may update this policy as our apps evolve. Changes will be posted on this page with an updated date. Continued use of our apps after changes constitutes acceptance of the updated policy.

Contact

Privacy questions or data requests: privacy@oftenapps.com.
We respond within 72 hours.