Privacy Policy
Last updated: 20 July 2026
Keel Habit ("Keel", "we") is built privacy-first. Your habit data lives on your device. We designed Keel so the most personal parts of your recovery never leave your phone unless you explicitly choose otherwise. This policy explains exactly what stays local, the few things that are sent, and what we never do.
What Keel is — and isn't
Keel Habit is a general wellness and self-tracking tool. It is not intended to diagnose, treat, cure, mitigate or prevent any disease or medical condition, and is not a medical device. Recovery information in the app is general education, not medical advice.
What stays on your device
Your habits, streaks, money and units saved, craving logs, check-ins, XP/levels, achievements, and your recorded "Anchor" (a photo, voice note or video reason) are stored only on your device using on-device storage. There is no account to create, and we cannot see this data.
Health data and your explicit consent
Information about the habit you are quitting is health data under GDPR Article 9. We process it only with your explicit consent. The same information is sensitive personal data under India's Digital Personal Data Protection Act and comparable laws elsewhere, and we treat it that way: it stays on your device unless you use a feature that necessarily sends it (the AI coach, or the opt-in leaderboard), and you can withdraw consent at any time in Settings.
If you join the optional leaderboard, be aware that doing so reveals a recovery status to other users: your chosen handle appears alongside a streak for a named habit, so anyone viewing that board can infer that you are quitting it. Joining is entirely your choice and you can leave at any time.
The AI plan & coach (Mira)
When you ask Mira for a plan or chat with her, the following is sent to Cloudflare Workers AI (via our own Cloudflare Worker) to generate a response, which is then returned to your device: your chat messages, your questionnaire answers, the habit you're quitting, your current streak length and your money-saved figure. Cloudflare acts as our processor. We do not send your recorded Anchor, your contacts, or your location. These messages are used only to produce your reply — they are not stored by us and not sold. Cloudflare processes them under their own terms as our provider.
Community leaderboard (opt-in)
If — and only if — you choose to join a leaderboard, Keel sends a display handle you pick, a per-install identifier, and the streak length for that habit so we can rank it. No email, no contacts, no location, no other data. You can leave anytime in Settings, which removes your entry.
Pseudonymous usage analytics (opt-in)
Only if you opt in — you choose on the first-launch consent screen (it's off unless you tick it, and you can change it anytime in Settings) — we collect usage data: which screens are opened, how long they're viewed, and where people get stuck. It's tied only to a random, resettable install id that is separate from your leaderboard identity — never your name, email, contacts, location or any advertising identifier, and never used to track you across other apps.
We call this pseudonymous, not anonymous, and the distinction matters. Keel uses persistent per-install identifiers, so in principle events from one install can be linked together even though they are not linked to your real identity. Under the GDPR, pseudonymous data is still personal data and you keep all your rights over it. You can reset the identifier at any time in Settings.
Crash and error diagnostics
When something in the app breaks, Keel sends a small error signal so we can find and fix it: the screen you were on and the type of exception that occurred. It does not include your habit data, your notes, your Anchor, or the contents of your chats with Mira.
IP addresses
Our three Cloudflare Workers (AI coach, leaderboard, analytics) read the connecting IP address (cf-connecting-ip) transiently, to rate-limit abuse. It is used for that check and not stored alongside your app data, and we do not use it to identify you or build a profile. Cloudflare processes IP addresses in the ordinary course of serving and protecting the requests, under its own terms.
Your consent
On first launch we show a clear notice and ask you to tap "I agree" before anything leaves your device. Nothing is collected or sent until you do. You can withdraw consent or change the analytics choice anytime in Settings.
Purchases
Subscriptions and the lifetime purchase are handled entirely by Apple and Google. We never see your card details. Purchase and receipt data is processed by Apple/Google (and our billing processor, RevenueCat) under their own privacy policies, solely to unlock and restore your premium access. Cancellations and refunds are covered in our Refund & Cancellation Policy.
Permissions
Microphone, photos and camera are requested only if you choose to record your Anchor. Notifications are used for your craving-time reminder and nightly check-in. Keel does not connect to Apple Health or Health Connect, and requests no health permissions.
What we don't do
No ads. No third-party ad trackers. We do not sell or share your personal data with anyone. There's no behavioural profiling across other apps and no data brokers. (The only usage data we collect is the first-party, pseudonymous, opt-in analytics described above, plus the error diagnostics.)
Data retention
Local data stays until you delete it (in-app reset, "Delete my account", or uninstall). Analytics events are kept for at most 18 months and then automatically deleted. Error diagnostics are ordinary analytics events and are kept on the same 18-month clock. Leaderboard entries are kept while you're a member and removed when you leave.
Age — adults only
Keel is for adults (18+). We don't knowingly collect data from anyone under 18, and the app asks you to confirm you are 18 or older at first launch.
Your rights
You can see your data (most of it is on your device; export it as CSV from Settings), correct it (edit anything in the app), withdraw consent or change the analytics setting anytime in Settings, and erase everything via Settings → "Delete my account and all data". That deletes the data on your device and the limited data that reaches our servers — your leaderboard entry and your analytics events. Under India's Digital Personal Data Protection Act you also have the right to grievance redressal and to nominate another person to exercise your rights.
US state privacy rights
Information about the habit you are quitting is consumer health data under Washington's My Health My Data Act, Nevada's SB370 and the Connecticut Data Privacy Act. Those laws require a separate policy, so we publish one: see our Consumer Health Data Privacy Policy. It sets out the categories we collect, where they come from, who we share them with, and how to exercise your rights to confirm, access, withdraw consent, delete and appeal.
California. We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined in the CCPA/CPRA. There are no advertising SDKs in the app and no data brokers involved. (Keel is a one-person operation and does not currently meet the CCPA's revenue or volume thresholds, so most of the statute's obligations do not apply to us — but the no-sale, no-sharing statement above is true regardless of thresholds, and it is the part that matters to you.)
EU and UK representatives
We are established in India and offer Keel to people in the EU and the UK. Article 27 of the GDPR requires us to designate a representative in the EU, and Article 27 of the UK GDPR requires a separate representative in the UK.
EU representative (GDPR Art. 27): [OWNER: EU representative — name, address, email required]
UK representative (UK GDPR Art. 27): [OWNER: UK representative — name, address, email required]
Appointment of both representatives is pending. Until they are in place you can reach us directly at [email protected], and EU and UK users keep every right described in this policy. You may also lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office.
Grievance Redressal (India)
In line with India's Consumer Protection (E-Commerce) Rules, 2020 and section 8(9) of the Digital Personal Data Protection Act, 2023, our Grievance Officer is:
Grievance Officer: Swapnil Prakash Chaudhari
Designation: Proprietor, Keel Habit
Email: [email protected]
Phone: [OWNER: phone number required]
Postal address: [OWNER: postal address required]
We acknowledge every grievance within 48 hours of receipt and resolve it within one month. If you are not satisfied, you can contact the National Consumer Helpline on 1915 or at consumerhelpline.gov.in, and users in India may escalate a data-protection complaint to the Data Protection Board of India. Users elsewhere may contact their local data-protection authority.
Contact
Questions about privacy? Email [email protected]. We aim to respond within 30 days.
The data controller is Swapnil Prakash Chaudhari, a sole proprietor based in India, trading as "Keel Habit".