AutomaticOn the App StoreWe never keep a copy of your journal on our servers. Your entries live on this device; when you use an AI feature, the opening lines of your four most recent entries travel with that one request so Halo can answer with your week in mind. If you add a profile photo, the small cropped version you confirm is stored with your backup so it comes back when you reinstall or change phones. Replace it any time by picking a different photo, or remove it entirely by deleting your account. Your habits, check-offs, routines and reminders are stored on your device too (and synced to your Apple Watch) — and if you sign in, a copy of your current goal is also saved to your account so you can get it back after a reinstall (see below). Reminders are scheduled locally by iOS — we do not send push notifications. If you turn on calendar mirroring, Automatic writes your habit to your own Calendar or Reminders through Apple's system frameworks, with the access you grant; those entries live in your Apple account, not ours, and are removed when you turn the mirror off or retire the habit.
Home Screen widgets and the Watch app read a small mirror of what is already on your device — your habit title, day, streak, the last seven days, what is playing, the day's quote, and small pre-drawn book covers — kept in a private app group container shared only between Automatic and its own extensions. Nothing in it leaves your device, and a check-off made from a widget is handed back to the app the same way.
If you sign in (with Apple, or with Google if you choose that instead): the identifier that provider gives us, your first name and email if you choose to share them, your referral code and free-week credits, and your subscription status.
Your saved goal (so you can resume it): while you are signed in, Automatic keeps one snapshot of your current goal on our servers — its title, cue and identity phrase, the goal text you typed, the routine steps you set, your reminder time, which days you completed (dates only), the lessons you have collected, your coach and appearance settings, a small cropped copy of your profile photo if you added one, your points total, your profile style, the line you wrote about yourself, which trophies you have earned and when, and any habit you have queued up next. This is what powers “Resume my goal” when you reinstall the app or move to a new phone. It is one snapshot, overwritten as you go, never a history of everything you have ever done. It does not include your journal entries or any other photos. It is deleted the moment you delete your account.
Whether or not you sign in: a random identifier we generate for your installation. We use it to apply your plan's daily limits on AI features, so that one installation cannot run up unlimited cost. It is not your device's advertising ID and it is not shared with anyone.
Automatic's AI features (your habit plan, Halo's replies, lesson narration and the day 7 / day 21 / halfway insights) are processed by our server and by Anthropic's Claude API, and lesson audio by ElevenLabs. To make the answers about you, these requests include your name, the goal text you typed, the reason you gave for starting and anything you told us you were afraid of, the line you wrote about yourself, your habit title, cue and identity phrase, the daily anchors you chose, your recent check-in history, and recent journal entries. If you would rather this did not happen, do not use the AI features — habit tracking works without them. Your content is not used to train AI models.
When iOS hands the app a crash, hang or launch report, Automatic sends it to our own server so we can fix what broke. Those reports contain the call stack, your device model, iOS version, the app version and the identifier we generate for your installation — never your goal, your journal or your photo. They are first-party only and are not shared with anyone.
If you are on the free tier, Automatic shows ads supplied by Google AdMob. We request non-personalized ads only, so Google is asked not to use your data to profile you, and Automatic does not ask for permission to track you across other companies' apps and websites. Google still processes limited data (such as your device's ad identifier, coarse location and the ad you saw) to deliver and measure ads — see Google's partner policy. Subscribing to Essentials or Gold removes ads entirely.
We record a small number of product events on our own servers — for example that a plan was created, a paywall was viewed, or an ad was shown — stored against your account or the random identifier we generate for your installation. We use that identifier to apply your plan's daily limits on the AI features, to attribute product events, and to group crash reports from the same install. This is first-party only: there is no third-party analytics SDK in the app, and we do not sell or share this data.
When you share a book or a quote, the link points at a page on our server that shows what you shared and then sends the visitor to the App Store or opens the app. Opening one of those links is counted the way every visit to our public link pages is, as described under “Our public link pages” below — no account and no installation identifier is stored with it, and no IP address, so it is not linked to you or to whoever you sent it to.
Our public link pages — the pages that shared links open, including the book pages, and the pages we link to from our social media profiles — count visits without cookies. For each visit they record the time, the page and its version, the button tapped, whether the audio clip was played and whether it was played to the end, whether the page was scrolled halfway and whether it was scrolled to the end, whether the 66-day animation finished, the kind of browser (for example Instagram’s in-app browser) and the country the visit came from. To count unique visitors they keep a one-way code made from your IP address and browser identification string together with a random secret that is generated each day and deleted after about two days. The IP address itself is never stored, and because each day’s secret is deleted, the codes cannot be matched across days or back to a person.
We do not sell or share your personal data. We do not track you across other companies' apps or websites. We do not look at your photos beyond storing the cropped profile picture you confirm.
You can delete your account and all of its server-side data at any time from inside the app: the You tab → Delete account. You may also request access, correction or deletion by emailing emmerichgage355@gmail.com from the address on your account. Deleting the app removes all on-device data immediately.
Automatic is not directed at children under 13, and we do not knowingly collect their data.
We'll post any changes here with a new effective date.