Privacy policy

What you enter yourself: names of habits and categories, goals, recorded time, daily yes/no marks and counted numbers with their unit, the weekly schedule, rewards and penalties, the name in your profile and, if you add it, your date of birth. The date of birth is used only to show how old you were when your statistics began.

Settings: language, theme, sound, vibration and reminders stay on this device only. The profile name, the date of birth and the week settings (the bar and the flexible week) are part of your data and travel with sync.

All of it is kept in the app’s private storage on your device. Other apps cannot read it. Android’s own automatic backup is turned off for Kraplya, so Android does not copy the app’s data to Google by itself.

If you choose to sign in with Google, the app gets access only to its own hidden folder in your Google Drive (the drive.appdata permission). It cannot see, open or change any of your other files. Sign-in goes through Google Play services on your phone.

A copy of your data is written to that folder so that your phone and tablet show the same. Each device writes its own file and reads the others’. A file holds all your habits, recorded time, daily marks and counts, schedule, rewards and penalties, the profile name, the date of birth, a running timer and the blank marks of deleted items (see Deleting your data). The app also reads the email address of your account, only to show which account is connected.

The name of each file contains an Android identifier of the device (a-…, then .kraplya.json.gz). It stays the same after a reinstall, so the phone finds its own file again. It goes only to Google Drive, as part of the file name.

Sync runs when you open the app and, while it is on, about every few hours in the background when the phone is online. The data travels only between your device and Google over an encrypted connection; the developer has no access to it. You can turn sync off in Profile at any time. That stops new copies but does not delete the files already in your Drive.

The app’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If you choose to show calendar events in the schedule and allow calendar access, the app reads events from the calendars on your phone (including Google Calendar, if it is set up there): the title, time and colour of each event.

They are used only to show them in the weekly schedule. Events are read on the device only: they are not stored in the app, not included in backups or Google Drive, and not sent anywhere. The app never changes your calendar.

An event enters Kraplya only when you add it to the schedule yourself; then only the title and time you confirmed are kept. You can revoke access in phone settings or turn events off in the schedule.

Notifications show the running timer and your reminders. They are created on the device; nothing is sent anywhere.

On by default, once you allow notifications: the Monday summary (Monday, 10:00, only if last week is waiting for its summary) and reminders for blocks in your schedule. Off until you turn it on: the evening reminder. You can also add reminders of your own. Each one can be turned off in Profile.

After the phone restarts, the app schedules its reminders again. This is why it asks to start at boot.

The version of Kraplya shared outside Google Play looks for a new version when you open the app, at most every 30 minutes, and when you tap Check for updates. It reads a small file from the Kraplya website (pegasohlib.github.io, hosted on GitHub Pages) and, when you tap Update, downloads the new APK from GitHub and checks its SHA-256 before installing. Like any website, they see the IP address of your device; nothing else is sent, and no data from the app. There is no check in the background.

Automatic checks are on by default. You can turn them off in Profile and still check by hand. When the app comes from Google Play, Google Play updates it instead.

GitHub also counts how many times each file has been downloaded. It is only a number, with nothing about who downloaded it; the website shows it as an approximate number of downloads.

Notifications

the timer and your reminders.

Calendar (optional, read only)

to show your phone’s events in the schedule.

Internet

only for Google sign-in, Drive sync and checking for and downloading updates.

Foreground service

so the timer keeps counting with the screen off. It runs only while a timer you started is running.

Start at boot

to bring your reminders back after a restart or an update.

Install apps

to install updates of the app itself (only in the version shared outside Google Play).

Vibration

for the timer and reached goals.

A backup file is created only when you save one yourself, in the place you choose. Import reads only the file you pick.

The file is plain text and is not encrypted: whoever has it can read everything in it, including the blank marks of deleted items. Android’s automatic backup is off, so these files are the only backups there are.

Delete a habit, a recorded session, a category, a reward or penalty or a schedule block, and its content is removed from the device at once. Only a blank mark stays: the item’s id and the time of the change. Deleting a habit also deletes its schedule blocks.

The blank marks go to your Google Drive copy and into new backup files, so your other devices delete the item too. Data that older versions left behind is blanked when the app first starts after the update to 0.9.17. Backup files saved earlier, and another device’s Drive file until that device updates, still hold what they held.

Uninstalling the app removes its data from the device. It does not remove anything from Google Drive or from backup files you saved. If you reinstall and turn sync on again, your data comes back from the Drive copy.

To remove the copy from Google Drive, tap “Delete my copy from Google Drive” in Profile. It deletes this app’s files in Drive for all your devices and turns sync off on this one. A device that still has sync on uploads its data again unless you turn sync off there too. You can also do this in Google Drive → Settings → Manage apps → Kraplya → Delete hidden app data. Turning sync off alone stops new copies and leaves the existing ones in Drive.

If this policy changes, the new version will appear on this page with a new date.

Who is responsible. PegasoHlib, a private individual who develops these apps, is responsible for the data described here. Contact: support@pegasohlib.com.

Why data is used, and on what legal basis.

Running the app, and the backup or sync you turn on

Contract: needed to provide what you asked for (GDPR Art. 6(1)(b))

Update checks and safety

Legitimate interest: keeping the app safe and up to date (Art. 6(1)(f))

An e-mail you send

Legitimate interest: answering you (Art. 6(1)(f))

Who receives it, and transfers outside the EU. Google (your Drive and sign-in, if you turn sync on) and GitHub (update checks and downloads). E-mail you send passes through Cloudflare and is kept in a Gmail mailbox by Google, and Anthropic may process it when an AI assistant helps read it. Some of these companies are based in the United States or other countries outside the EU. Those transfers rely on the EU–US Data Privacy Framework where the company takes part in it, or on the company’s standard contractual clauses.

How long it is kept. Data in the app stays until you delete it or remove the app. Copies in your own cloud storage stay until you delete them. E-mails you send are kept until the matter is closed, and for no more than 2 years.

Your rights. You can ask for access to your data, correction, deletion, restriction, a copy to take elsewhere (portability), and you can object to processing or withdraw consent at any time. Write to the address above. You’ll get an answer within one month. Most of the data is only on your device, so you can usually do this yourself in the app.

Complaints. You can complain to the data protection authority of your country.

Age. You need to be at least 15 to use the app on your own. If you are younger, ask a parent or guardian to agree first.

Language. Translations of this policy are made with the help of AI. If a translation differs from the English text, the version more favourable to you applies.

Questions about privacy: support@pegasohlib.com