Pumpkin41
Hire us

Pumpkin Habits · Privacy policy

Privacy Policy — Pumpkin Habits

Last updated: 13 October 2026

Pumpkin Habits ("the app") is a mobile app for building habits: you create your own tasks, earn points by completing them, and spend those points on rewards you define. It is published by Pumpkin41 ("we", "us"), the trade name of M HENRIQUE MENEGALE TEODORO DESENVOLVIMENTO DE SOFTWARE LTDA, a company based in Curitiba, Paraná, Brazil, registered under CNPJ 44.896.901/0001-89. Pumpkin41 is the controller of the limited personal data described in this policy.

This policy explains what information the app handles, where it goes, and the choices you have. It applies to Pumpkin Habits on iOS and Android.

In short

  • No accounts. You never sign up or log in to use the app.
  • No servers of our own. We do not receive, store or see your profile, your tasks, your rewards or your history.
  • No advertising, no tracking, no analytics of ours. The app contains no advertising, we run no analytics, and it does not track you across apps or websites. The few third-party components it relies on are listed in section 5.
  • Your data lives on your device. It leaves the device only to validate a purchase of the full version, to sync with your own iCloud on iPhone and iPad, and, on Android, through your phone's own backup if it is turned on or in a backup file you choose to export.
  • We do not sell or share personal data.

1. Information stored on your device

Everything you create in the app is kept in the app's private storage on your device:

  • your profile: the name or nickname and the birthday you enter during setup;
  • the tasks, rewards and promises you create, with their names and descriptions;
  • your history: check-ins, points earned and spent, rewards claimed and birthday gifts;
  • your preferences (language, first day of the week, PIN lock and sync settings).

We have no access to any of this, and we cannot recover it for you.

The app does not ask for your email address, phone number, location, contacts, photos, camera or microphone, and it does not read any device or advertising identifier.

2. PIN lock and biometrics

You can protect the app with a 4-digit PIN. This is optional.

  • The PIN and its recovery code are stored only as salted hashes in your device's secure storage (iOS Keychain or Android Keystore). They are bound to that device, are never synced, and are not included in backups.
  • If you turn on Face ID / Fingerprint Unlock, the check is performed by your device. The app only learns whether it succeeded and never receives biometric data.

We cannot see or reset your PIN. If you forget both the PIN and the recovery code, the only way back in is to erase the app's data on that device.

3. Purchases

The app is free to use with a limited number of tasks and rewards. The full version is a one-time purchase.

  • Payment is handled entirely by the Apple App Store or Google Play. We never receive your name, email address, card or billing details.
  • Purchase validation is handled by RevenueCat, Inc., which tells the app whether the full version has been bought, restored or refunded. Because the app has no accounts, RevenueCat identifies the installation by a random, anonymous ID. RevenueCat receives that ID, the purchase receipt and transaction details from the store, and technical information such as app version, operating system, device model, country/storefront and IP address. See https://www.revenuecat.com/privacy.

We can see anonymous purchase records (for example, that a purchase happened in a given country), but cannot link them to a person. On a platform or version where purchases are not yet available, nothing is sent to RevenueCat.

4. Backup and sync

Backup and sync go to your own cloud account, never to us. Sync between devices is available on iPhone and iPad only.

iCloud sync (iOS, full version)

iCloud sync is part of the full version. Once the full version is unlocked and you are signed in to iCloud on the device, sync is on by default. Your data is stored in the private CloudKit database of your Apple Account and kept in step across your iPhone and iPad. It contains your profile (name and birthday), tasks, rewards, points history and promises. The PIN is never included.

Data in your private iCloud database is governed by Apple's privacy policy (https://www.apple.com/legal/privacy/). We cannot read it. You can turn sync off at any time in Settings → iCloud Sync; from then on your data stays on that device. Settings → iCloud Sync → Delete iCloud Data permanently removes the copy stored in iCloud, without touching the data on your devices.

Turning sync off, or erasing the app's data on a device, does not by itself delete the copy already stored in iCloud.

Backup file (Android)

The Android version has no sync feature and no cloud backup of its own. Instead, Settings → Backup File lets you export your data to a file and import it again, for example when you change phones. It is available in the free version too.

  • Export Data creates a file with your profile (name and birthday), tasks, rewards, points history and promises, and hands it to the app you pick in the system share sheet, such as your cloud storage or email app. The PIN is never included.
  • The file is not encrypted: anyone who has it can read it. After you share it, what happens to it is governed by the privacy policy of the app or service you sent it to. We never receive it.
  • The most recent export also stays in the app's private temporary storage on your device, until the next export replaces it or the system clears it.
  • Import Data reads a file you choose with the system file picker and replaces the data on the device with it. The app receives only the file you select.

Device backup (Android)

Separately, if backup is turned on in your device's settings, Android may include the app's data (the same profile, tasks, rewards and history) in the backup of your Google Account, so it can be restored on a new device. That backup is created by Android, stored under Google's privacy policy (https://policies.google.com/privacy), and controlled in your device's settings. We cannot read it.

5. Software components from third parties

The app includes no advertising and no analytics of ours. It relies on a few third-party components that process information as described above:

  • RevenueCat — purchase validation (section 3).
  • Apple CloudKit (iOS) — iCloud sync (section 4).
  • Android backup service (Android, if enabled on your device) — device backup (section 4).

Separately, Apple and Google may provide us with aggregated, anonymous statistics about installs and crashes if you have agreed to share diagnostics with developers in your device's settings. This is controlled by your device, not by the app.

6. How the information is used and legal bases

The limited information described above is used only to make the app's features work: validating your purchase and keeping your data in sync or backed up. Where data-protection laws such as the EU/UK GDPR or Brazil's LGPD apply, the processing is based on:

  • performance of a contract — providing the features you use, including iCloud sync in the full version, and validating your purchase;
  • legitimate interests — keeping the app working, keeping sales records and answering the messages you send us.

iCloud sync, device backup and biometric unlock are under your control and can be turned off at any time, and a backup file exists only if you export one.

We do not use your data for profiling, automated decisions, advertising or resale.

7. Retention and deletion

  • On your device: data stays until you delete it. Settings → Reset App Data → Delete All Data & Reset erases your profile, tasks, rewards, points history, promises and PIN from that device. Uninstalling the app removes everything it stored on the device.
  • In iCloud: until you use Delete iCloud Data in the app or remove it in your iCloud settings (Settings app → your name → iCloud → Storage → Pumpkin Habits). Erasing the app's data on a device does not erase the iCloud copy.
  • In a backup file you exported: until you delete the file, wherever you saved or sent it.
  • In your Android device backup: until you delete the backup or turn backup off in your Google Account or device settings.
  • Third parties (RevenueCat, Apple, Google) keep the information they receive according to their own policies.
  • Emails you send us are kept only for as long as needed to answer you and keep a record of the conversation.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to its use, to withdraw consent, and to complain to your data-protection authority (for example the ANPD in Brazil, or your national authority in the EU/UK).

Because your data never reaches us, you exercise most of these rights directly in the app and in your iCloud or Google account, as described in sections 4 and 7. We hold no data that would allow us to identify you. For anything else, including requests concerning the anonymous purchase records, write to [email protected] and we will help.

We do not sell personal information and do not share it for cross-context behavioural advertising.

9. International transfers

The third-party services mentioned in this policy may process information on servers outside your country, including in the United States. Each applies its own safeguards for such transfers, described in its privacy policy.

10. Security

Your data is stored in the app's private storage, protected by your device's operating system and its lock, and by the app's PIN lock if you turn it on. All network requests made by the app use encrypted connections (HTTPS). Sync and backups are protected by the security of your Apple or Google account. No method of storage or transmission is completely secure, and you are responsible for keeping your device and cloud accounts protected.

11. Children

The app is intended for a general audience aged 13 and over and is not directed at children under 13. It does not knowingly collect personal information from anyone, including children.

12. Contacting us

If you write to [email protected], we receive your email address and whatever you include in your message, and use them only to reply to you.

13. Changes to this policy

If the app changes in a way that affects this policy, we will update this page and its date. Significant changes will also be mentioned in the app's release notes.

Pumpkin41 · M HENRIQUE MENEGALE TEODORO DESENVOLVIMENTO DE SOFTWARE LTDA · CNPJ 44.896.901/0001-89 · Curitiba, Paraná, Brazil https://pumpkin41.com · [email protected]

Back to pumpkin41.com