Privacy Policy

Who this is for

Devotion is a private habit tracker for two consenting adults (17+). This page describes what the current iOS app stores and what it does not. Nofftech does not run user accounts. There is no stranger discovery and no public feed.

Where your data lives

• On this iPhone or iPad: profile, habits, rewards, rules, consequences, chat, and optional photos. That local JSON and those JPEGs are not encrypted on disk.
• In iCloud / CloudKit when you pair: Apple stores shared records so both phones can sync. Chat bodies, structure, habit completions, and proof/chat photos live on a private iCloud share after you join. The public CloudKit room is a handshake (invite identity, and a share URL until the intended guest accepts). This is not end-to-end encrypted. Apple can read CloudKit records in the app’s container.
• On your other devices signed into the same Apple ID: personal state can restore across iPhone and iPad.
• A random device identifier is created on the phone for pairing. We do not run our own login.

What your partner can see

When you are paired, your partner can see habits, chat, photo proofs, rewards, rules, and consequences you share through the app. Do not pair with someone you do not trust with that content. Nearby pairing (when you are together) is encrypted between your two phones. iCloud pairing is not end-to-end encrypted.

Invite codes

• The 6-character invite code is a secret. Anyone who has it can try to join until a guest is bound.
• The first guest who joins is bound as the partner. A later guest is rejected.
• After you join, intimate media and chat live on the private share, not in the public handshake room.

App Lock and Face ID

Face ID, Touch ID, Optic ID, or your device passcode can lock the app on this device. Hide in App Switcher covers content when you leave Devotion. That is local UI. It is not encryption of local files or iCloud data. Biometric data stays on the device and is not sent to Nofftech.

Camera, photos, and notifications

• Camera and photo library are used only when you add habit proof or send a chat image.
• Local network is used only for nearby pairing while you are together.
• Notifications are optional: habit reminders, a daily summary, proof and review alerts, consequence alerts, and chat. Banners do not include chat text, consequence copy, or photo captions. You can turn each category off in More → Notifications, or disable them in iOS Settings.

What we do not do

• No third-party ads, analytics, or tracking SDKs in the current binary.
• We do not sell your data.
• We do not have a public social graph. There is no matching or discovery.
• In-app Report opens Mail to [email protected] and does not attach the photo or message text.

How to delete

• Unpair (More → Partner) stops sync and clears chat on this device. Habits, points, and rules stay on this phone. If you created the invite (the host), unpair also removes the CloudKit room. Unpair is how you block the other person on this phone.
• Reset all data in More permanently clears habits, rewards, rules, chat, photos, and points on this device and in iCloud for your Apple ID, then returns you to onboarding.
• Delete the app to remove local files on this device.

Children

Devotion is not directed at anyone under 17.

Changes

We will update this page if data practices change.

Contact

Questions or reports: [email protected].