Contents
- Who we are
- The short version
- Using Orken without an account
- What we collect with an account
- Apple Health
- Screen Time
- Challenges and user content
- Subscriptions
- Diagnostics and analytics
- Legal bases (GDPR)
- Who we share data with
- Where your data lives
- How long we keep it
- Your rights
- Children
- Security
- Changes
- Contact
1. Who we are
Orken ("Orken", "we", "us") is a habit-tracking app for iPhone. This policy explains what the app and this website do with your information, and what they deliberately do not do.
The data controller is Orken, contactable at support@orken.app. This policy covers the Orken iOS app and the orken.app website.
2. The short version
Orken is designed to work entirely on your device. You can install it, track habits for years, and never send us a single byte. An account is optional and only needed for syncing between devices and joining challenges.
We do not sell your data. We do not share it with advertisers. We do not track you across other apps or websites. There are no advertising SDKs in the app.
| Data | Where it goes |
|---|---|
| Your habits and check-ins | On your device. Copied to our server only if you turn on cloud sync. |
| Apple Health readings | Raw samples stay on your device and are never uploaded. The daily total a linked habit is completed with becomes an ordinary check-in, and is copied to our server only if you turn on cloud sync. See section 5. |
| Screen Time | Not collected. The app has no Screen Time features and requests no such permission. |
| Email address | Our server, only if you create an account. |
| Payment details | Apple only. We never see your card. |
| Crash and usage diagnostics | Not collected in the current release. See section 9. |
3. Using Orken without an account
Orken opens in local guest mode. In this mode your habits, check-ins, notes, streaks, statistics, reminders and settings are stored only in the app's local database on your iPhone, protected by iOS app sandboxing and device encryption.
In guest mode we receive no habit data at all. It lives only on your device, so if you delete the app that data is gone and we cannot restore it. Sign in if you want it kept on our servers.
4. What we collect with an account
If you choose to create an account — with Sign in with Apple or an email address — we process:
- Account identifiers: a user ID, and your email address if you sign in by email. If you use Sign in with Apple and choose to hide your address, we only ever receive Apple's private relay address.
- Habit data you sync: habit names, types, schedules, goals, notes, check-ins and archive state. This is the content you created; it is stored so it can appear on your other devices.
- Your profile: a display name, and optionally a profile photo, your age and your gender. Your age and gender are never shown to anyone; your gender is used only to decide whether you can join a challenge limited to women or to men. We also store your level and current streak (worked out on your device), the people you follow, and any reports or blocks you make.
- Reactions and comments: the reactions and comments you leave on the days of people you follow, and the date each one is about. They are shown to other people as described in section 7, and are deleted with your account.
- Device identifiers: a per-installation identifier used to reconcile sync between your devices and to deliver notifications.
- Technical records: server logs containing IP address, timestamp and request type, kept briefly for security and abuse prevention.
We use this only to run the service: authenticating you, syncing your data, and keeping the service secure. We do not profile you and we do not use your habit content for advertising.
5. Apple Health
Apple Health access is read-only, optional, and granted one metric at a time. Orken can read up to six metrics: steps, walking and running distance, active energy, exercise minutes, workouts, and sleep.
Orken reads daily totals to automatically complete the habits you have linked to a metric. Specifically:
- Orken never writes anything to Apple Health.
- Raw Health samples are never stored in our database and never synced to our servers or to any third party.
- Health data is never used for advertising or marketing, and is never sold or shared with data brokers.
- You can withdraw access at any time in the iOS Health app under Sharing → Apps, or in Orken's settings.
If you set a personal daily goal on a Health metric, that goal is local metadata stored by Orken. It never modifies your Health data.
6. Screen Time
Orken does not currently offer Screen Time features and requests no Screen Time or Device Activity permissions. If they are introduced, reports would be rendered inside a sandboxed Apple Device Activity report extension, where by Apple's design the underlying usage data is not readable by Orken and never leaves your device. This section will be updated before any such feature ships.
7. Challenges and user content
If you join or create a Marketplace challenge, some information necessarily becomes visible to other people:
- To other participants: your display name and photo, your rank and weighted completion percentage, and sanitised daily challenge values, completion state, streak and rank movement.
- To any signed-in Orken user who opens a public challenge, before joining it: your display name, your rank and weighted completion percentage, and your completion state. Not your photo, your daily values or your streak. For a challenge limited to women or to men, only to signed-in users of that gender. A private challenge is never shown this way: if you want only its members to see who is in, create a private challenge.
- To any signed-in Orken user who opens your profile (profiles are reached from a challenge leaderboard or from somebody’s follower list): your display name and photo, your level and current streak, whether you have Premium (unless you hide the badge in your profile settings), who follows you and whom you follow, the public challenges you are in with your progress in each, and which days in the last 12 weeks you completed a habit in a public challenge. A private challenge is shown on your profile only to a person who is in that same private challenge, with your progress in it and the days you completed a habit there; to everyone else it is never shown. Personal habits are never shown on a profile, and nor are your age or gender.
- To the people who can see a day in the Friends feed (the person whose day it is, and everyone their feed shows it to): the reactions and comments you leave on it, with your display name and photo. You can delete your own comments, and the person whose day it is can delete any comment on it.
Challenge creators see aggregate progress and leaderboards. They never see your email address, your notes, your exact check-in times, or any Apple Health samples.
Challenge titles, descriptions and habit templates you publish, the comments you write, and your display name and profile photo, are user-generated content. We provide reporting and blocking tools — you can report a comment, or block the person who wrote it, from the comment itself; blocking hides you and the other person from each other — and we may remove a photo, name or comment, remove content, or suspend accounts (including stopping an account from commenting) that breach our Terms of Service.
8. Subscriptions
Optional Premium subscriptions are sold through Apple's App Store using StoreKit. We never receive or store your payment card details. Apple handles the transaction and sends us a verified server notification confirming the subscription's status, which we use to unlock Premium features on your account. Billing questions are handled by Apple.
9. Diagnostics and analytics
Neither service is active in the current release. The app is built without their credentials, so nothing is sent to either one and the diagnostics switch in Settings has nothing to send. They are described here because the app is built to use them and this section will apply the moment they are switched on:
- Sentry — crash reports and performance data. Personally identifying information is explicitly disabled in our configuration.
- PostHog — aggregate product-interaction events, such as which screens are opened. This is not linked to your identity and is not used for advertising.
Neither service is used for cross-app or cross-site tracking. Orken does not request App Tracking Transparency permission because it does not track you in Apple's sense of the word.
10. Legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Providing the app and syncing your account | Performance of a contract (Art. 6(1)(b)) |
| Apple Health integration | Your explicit consent (Art. 9(2)(a)), withdrawable at any time |
| Security, abuse prevention, crash diagnostics | Legitimate interests (Art. 6(1)(f)) |
| Aggregate product analytics | Legitimate interests (Art. 6(1)(f)) |
| Processing subscriptions | Performance of a contract (Art. 6(1)(b)) |
11. Who we share data with
We do not sell personal data, and we do not share it for advertising. We use a small number of processors purely to run the service:
| Processor | Purpose | Location |
|---|---|---|
| Oracle Cloud Infrastructure | Hosting our application server and database | Frankfurt, Germany (EU) |
| Apple | Sign in with Apple, App Store purchases, push notifications | Global |
| Sentry | Crash and performance diagnostics | EU / US |
| PostHog | Aggregate product analytics | EU / US |
We may also disclose information where we are legally required to, or to protect the rights and safety of our users.
12. Where your data lives
Habit data you choose to sync is stored on servers located in Frankfurt, Germany, within the European Union. Where a processor transfers data outside the EU, that transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision.
13. How long we keep it
- Synced habit data: until you delete it, or until you delete your account.
- Account records: deleted when you delete your account.
- Profile photo: deleted with your account. A photo you replace, or one we remove for breaking our rules, is deleted within a day.
- Reactions and comments: until you delete them (a comment can also be deleted by the person whose day it is on), or until you delete your account, which deletes all of them.
- Server logs: a short retention window for security purposes, typically no more than 30 days.
- Diagnostics: retained according to each provider's default retention, then deleted.
- Purchase records: retained where tax or accounting law requires it.
Local data on your device is kept until you delete it or uninstall the app.
14. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, object to, or port your personal data, and to withdraw consent.
Orken is built so you can exercise most of these yourself, immediately:
- Access and portability: write to support@orken.app and we will send you the personal data we hold, in a structured, machine-readable format, within 30 days.
- Deletion: Settings → Account → Delete account. This removes your account and your synced data. See the account deletion page for the web route.
- Withdraw Health consent: the iOS Health app → Sharing → Apps → Orken.
- Withdraw diagnostics consent: Settings → Share diagnostics. Turning it off stops crash and product-interaction reporting.
For anything else, write to support@orken.app. We answer within 30 days. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.
15. Children
Orken is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.
16. Security
Data in transit is encrypted with TLS. Data on your iPhone is protected by iOS sandboxing and device encryption, and you can add a Face ID, Touch ID or passcode lock to the app itself. On the server, database row-level security restricts every record to the account that owns it. No system is perfectly secure, but we take these measures seriously and fix problems promptly when they are reported.
17. Changes to this policy
If we change this policy we will update the date at the top of the page, and for material changes we will notify you in the app or by email before the change takes effect.
18. Contact
Questions, requests or complaints: support@orken.app.