Privacy Policy
Last updated: August 2026
1. Overview
DopaLoop is an iOS habit tracking app built on the "Privacy-First" principle. This means: All your data stays on your device.
2. What data is collected?
The DopaLoop app collects and stores the following data locally on your device:
- Goals you create (name, symbol, color)
- Habits you create (title, description, frequency)
- Entries for your habits (date, intensity, notes)
- App settings (e.g., notification preferences)
This data is never transmitted to servers. It only exists on your iPhone or iPad.
3. Data Transmission
DopaLoop does not transmit any of your personal habit data to external servers. The app itself works offline. The exceptions are buying a subscription, optionally downloading larger speech models, and the route through Siri; all three are described below.
DopaLoop uses:
- No third-party analytics SDKs
- No crash reporting services
- No advertising SDKs
- No cloud synchronization
- No profiling, no cross-device recognition
Anonymous usage counters
So I can tell whether the app works, DopaLoop counts a few things — for example how many devices complete a setup step, how the intensity values from 0 to 5 are distributed, and which route a check-in comes from. That is usage data, and I call it that rather than hiding it behind "purely technical".
What gets transmitted is only the name of the event, the app version, and whether this is a test or the store build. No device identifier, no ID, no session, no timestamp, no content from your habits. The server increments a number and forgets the rest; two reports from the same device are indistinguishable to it. This makes profiling impossible and cannot reveal what any individual did.
To keep the numbers meaningful anyway, your app remembers locally which steps it has already reported and reports each one only once. That note stays on your device and is deleted with the app. The counters run on a server I operate myself — no third party is involved.
Voice recordings and Siri
If you speak inside DopaLoop itself, the recording stays on your device. A speech model on the device turns it into text. Neither the recording nor the resulting text is transmitted to any server, not even to Apple.
A small speech model is included in the app. If you want a larger, more accurate one, you download it yourself in Settings. That downloads the model from a server; none of your recordings are transmitted, the traffic only goes the other way.
Siri works differently. If you start a check-in through Siri, Apple performs the speech recognition and hands DopaLoop only the finished text. Apple's privacy policy governs that step, not this one. Apple does not get to see your goals, habits, or entries.
If you'd rather not, turn off Siri Shortcuts in the app settings under "AI helpers". The app remains fully usable, including speaking inside the app; only the route through Siri is gone.
These are deliberately the only ones left: everything describing the setup flow itself is now counted anonymously only and no longer written to the customer record. What stays attached to the subscription is what would carry no meaning without the link to purchase status.
Apple: Ask Siri, Dictation and Privacy
4. Payment Services
For in-app purchases and subscriptions, DopaLoop uses the following services:
Apple App Store
All payments are processed through the Apple App Store. Apple processes your payment data according to their privacy policies. DopaLoop does not receive any payment information such as credit card numbers.
RevenueCat
For subscription management, DopaLoop uses RevenueCat. RevenueCat receives:
- An anonymous user ID (no personal data)
- Purchase information (product ID, purchase date, expiration date)
- Device type and operating system version
- A few markers around the subscription — whether the purchase screen was seen or skipped, whether a trial was running, how a purchase attempt ended, and whether setup was completed
That last point is the only place where such markers are attached to an identifier rather than merely counted. They are tied to the same anonymous user ID as the purchase status and contain no name, email address or device identifier — but unlike the counters above, they do belong to a record. I state this explicitly, because otherwise "anonymous" would be stretched too far.
RevenueCat does not have access to your habit data, goals, or other personal content in the app.
5. Data Storage
All data is stored using SwiftData (Apple's local database) on your device. The data is automatically included in your iPhone/iPad backup when you create backups with iCloud or iTunes/Finder.
Voice notes are excluded from iCloud backup by default (privacy-first). You can opt in to backup in the app settings under "Data & Privacy". We recommend enabling "Advanced Data Protection" in your iCloud settings for end-to-end encrypted backups.
6. Data Deletion
You can delete all your local data at any time by uninstalling the app from your device. Subscription data at RevenueCat is automatically anonymized after the subscription expires.
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: Since all data is on your device, you have full access at all times.
- Right to erasure: Uninstall the app to delete all data.
- Right to data portability: Your data is included in your device backup.
8. Contact
For questions about privacy, you can reach me at:
E-Mail: info@dopaloop.app
9. Changes
Should I make changes to this privacy policy in the future (e.g., when introducing optional cloud synchronization), you will be notified within the app.