Privacy Policy

Who we are & what this policy covers

To The Moon is a personal habit tracking app operated by Jesus Legardi ("we", "us", "the To The Moon team"). This policy covers the To The Moon iOS app, its widgets, and its notifications.

Our principle is simple: To The Moon is a private discipline system. Your habits, points, fuel, records, notes, and Journey exist for you. When friends and competitions arrive in a future update, you will be in full control of the information you choose to make public. We collect the data needed to run the app, sync it across your devices, and nothing beyond what is listed in this document. We do not sell your data, and we do not show you ads.

The short version

• Your habit data is private. Your habits, marks, points, fuel, weekly records, notes, photos, and Journey are tied to your account and are never shown to other users without your consent.
• Only your username is always public. Every other profile detail, like your name, profile picture, bio, and whether you can receive friend requests, is controlled by you in the app's privacy settings, and you can go fully private. (Privacy settings will be made available when the competitions and friends update is delivered; until then, no other user of the app can possibly see any of your personal information.)
• Three companies process data for us: Apple (sign-in and payments), Google (Firebase — our database, file storage, authentication, and push notifications, plus Google Sign-In), and RevenueCat (subscription management). No one else receives your data.
• Payments never touch our servers. Purchases are handled by Apple end to end. We never see your card or banking details and we cannot issue refunds for mistaken purchases.
• You can delete your account anytime. Account deletion is built into the Profile screen, runs automatically on our servers, and is permanent and unrecoverable.
• Competitions are an upcoming update. The Compete feature is not yet released. Until it launches, no competition data is collected from you, and any competition infrastructure that exists is accessible and visible only to the To The Moon team — not to other users.

Data we collect

Account & identity

• Sign-in credentials are handled by Firebase Authentication, including Sign in with Apple or Google Sign-In, and the email address associated with your chosen sign-in method.
• Username — your public handle inside the app. This is the only piece of profile information that is always visible to other users.
• Other profile details — display name, profile picture, and bio.

Habit & progress data

• Your habit lists — Build and Break habits, including their names, colors, priorities, schedules, and times.
• Your marks and scores — done, missed, and pending statuses, points earned or lost, rocket fuel level, and Goal of the Week selections.
• Weekly records — archived week history including totals, done/missed counts, and end-of-week fuel.
• Notes — written and rich-text notes you attach to habits, including notes you choose to keep in the Notebook after a habit is deleted.
• Journey data — your Journey progress, goals, vision board notes and images, and milestone notes and images.

Photos

• Album photos are always taken with the in-app camera and attach to completed habits. Vision board images and milestone images are selected from your photo library (features available on paid tiers). We only ever receive the individual photos you take or select — the app never scans, indexes, or bulk-uploads your photo library.

Preferences & device data

• App settings — your theme, colors, shapes, background mode, sorting, launch page, language, date format, app icon mode, and similar customization choices, synced so your setup follows your account.
• Widget data — a copy of your current habits and stats is stored on your device in a protected container shared only with the To The Moon widgets. It never leaves your device through the widget.
• Push notification tokens — a device token that lets us deliver reminders and app-update notices to your device. The token identifies your device for delivery; it contains no message content.

Purchases

• Subscription status — whether your account has Free, Comfort, or Pro access, processed through Apple's StoreKit and RevenueCat. We receive entitlement and receipt information, never your payment details.
• What each tier changes about your data. Free includes the complete habit tracking system with up to 3 album photos. Comfort raises the album cap to 365 photos and unlocks vision board and milestone photos, which use photo library selection. Pro removes photo limits and unlocks social features — including friends and competitions, which are part of an upcoming update; until that update is released, Pro is not available as a product plan, and any competition data is accessible and visible only to the To The Moon team. Free trials are managed entirely by Apple and can be cancelled anytime; current prices and billing periods are always shown in the app's subscription screen and on the App Store.

How we use your data

Every piece of data above maps to a function you can see in the app:

• Running your tracker — storing your habits, calculating points and fuel, building weekly records and your Journey progression.
• Syncing across your devices — your account data lives in our cloud database so your habits, settings, and history follow you when you sign in elsewhere.
• Keeping your proof and memories — storing the photos and notes you attach so your Album, Notebook, and Journey persist.
• Reminders — scheduling notifications for habit times, unchecked days, and end-of-week warnings, according to your notification settings.
• Widgets — showing today's habits and weekly stats on your home screen.
• Purchase information — verifying your subscription tier and unlocking the features it includes.
• Support & integrity — resolving issues you report and protecting the service against abuse.

We do not use your data for advertising, we do not sell it, and we do not use the content of your habits, notes, or photos for any purpose other than showing it back to you.

Why we're allowed to do this (the "legal basis", for readers in the EU, UK, and similar regions): we process your data because it's necessary to provide the service you signed up for — your tracker, sync, and purchases; because you've actively chosen features that need it — like notifications and the photos you attach; or because we have a legitimate interest in keeping the service safe and free of abuse. We never process your data for purposes beyond the ones written in this section.

What others can see — and your choices

Always public: your username. It is how other users can find you, and it is the only profile field that cannot be hidden.

Always private: your habits, marks, points, fuel, weekly records, notes, evidence photos, Album, Notebook, and Journey. No other user is shown this content anywhere in the app.

Up to you: everything else about your profile is governed by your in-app privacy settings:

• Profile picture visibility — Everyone, Friends, or No One.
• Name visibility — Everyone, Friends, or No One.
• Bio visibility — Everyone, Friends, or No One.
• Friend requests — you choose whether you can receive friend requests at all. You can also block specific users; your blocked list is visible only to you.

If privacy is a priority, set everything to "No One" and disable friend requests, and your presence in To The Moon is reduced to a username. That is your right, and the app is fully usable that way. (Privacy settings will be made available when the competitions and friends update is delivered; until then, no other user of the app can possibly see any of your personal information.)

Services we rely on

To The Moon shares data with exactly three companies, each for a specific job. No other third party receives your data.

• Apple — Sign in with Apple, and all payment processing through StoreKit. Apple handles your payment information under its own terms; we never receive your card or banking details.
• Google (Firebase) — our core infrastructure: Firebase Authentication (including Google Sign-In), the Firestore database that stores your account data, Firebase Storage for your photos, and Firebase Cloud Messaging for push notifications. Your data is stored on Google's cloud infrastructure under Google's security and compliance terms.
• RevenueCat — subscription management. RevenueCat receives purchase receipts and an app user identifier to determine your subscription tier. RevenueCat is the only company outside Apple and Google that receives any data about your use of the app.

When the upcoming competitions update is released, no additional third-party companies are planned — competitions will run on the same infrastructure listed above. Until that release, all competition data is accessible and visible only to the To The Moon team.

Where your data physically lives: our providers store data on their own infrastructure, which can include servers outside your country, including in the United States. When your data crosses borders this way, it is covered by recognized legal safeguards: Google is certified under the EU–U.S. Data Privacy Framework, and transfers to RevenueCat are covered by its data processing agreement incorporating Standard Contractual Clauses.

We may also disclose data if we are legally required to do so, or as part of a business transfer — in which case this policy would continue to apply to your data and you would be notified of any change.

Photos & file storage

Your evidence photos, vision board images, and milestone photos are stored in access-controlled cloud storage (Firebase Storage) under a path tied to your account.

• Only you can add, change, or delete your files. Write access to your storage path is restricted to your signed-in account.
• All access requires authentication. Stored files cannot be accessed without a signed-in To The Moon session.
• The app never displays your photos to other users. Your Album, evidence photos, and Journey images appear only in your own account's app experience.

Photo capacity depends on your subscription tier, and deleting a photo in the app removes it from storage. If your subscription tier is downgraded and your current number of pictures exceeds the free/comfort cap, your photos will be safely archived, never deleted.

Notifications & reminders

Notifications exist to support your habit loop, not to spam you. Depending on your settings, the app can remind you at a habit's scheduled time, fifteen minutes before it, when previous days have unchecked habits, and near the end of the week before unresolved habits cost points. We may also notify you about app updates.

Reminders are scheduled on your device and, for some notices, delivered through Firebase Cloud Messaging using your device's push token. You can disable notifications at any time in the app's settings or in iOS Settings, and the app remains fully functional without them.

Retention & deletion

Your data is retained for as long as your account exists, because the product's purpose is to preserve your history — your records, proof, and Journey are meant to last.

• In-app deletions are permanent. When you delete content inside the app such as photos, notes, habits, milestones — it is deleted from our servers. Once deleted, it cannot be accessed by us or anyone, and it cannot be recovered.
• Notebook choice. When you delete a habit, you choose whether its notes are kept in your Notebook or deleted with it.
• Account deletion — in the app. You can permanently delete your account from the Profile screen. When you confirm, a secure server process tied to your signed-in account removes your data from our database and file storage, then deletes your authentication account. For Sign in with Apple accounts, the app attempts Apple token revocation as part of this process. When deletion completes, the app signs you out.
• What deletion removes. Everything stored under your account plus related references outside it where applicable, such as reciprocal friend and block records, and all files in your storage folder.
• Deletion is final. A deleted account cannot be recovered — not by you, and not by us. Signing up again with the same email and sign-in method creates a brand-new account with no connection to the old one; data from a deleted account is impossible to recover.
• Legal retention. If specific records must be kept for accounting, fraud prevention, or legal compliance, we retain only what the law requires, for as long as it requires.
• Prefer to ask us? You can also request account deletion by contacting tothemoonhabits@gmail.com from the email associated with your account.

Competitions are an upcoming update; retention rules for competition data will be added to this policy when the feature is released. Until then, any competition-related data is accessible and visible only to the To The Moon team, and deleting your account also removes any competition-related references tied to it.

Children

To The Moon is not directed to children under 13 (or the minimum age required in your region), and we do not knowingly collect personal data from children. If you believe a child has created an account, contact us at tothemoonhabits@gmail.com and we will delete it.

Security

Your data is protected by authentication on every request, server-side access rules that scope your private data to your account, and the transport and storage security of the infrastructure providers listed in Section 07. On your device, widget data lives in a protected container available only to To The Moon and its widgets.

No system can be guaranteed absolutely secure, but access to your private data is restricted by design, and we limit what we collect so there is less information at risk in the first place.

Changes to this policy

When the app gains new capabilities — including the release of upcoming features — this policy will be updated before those capabilities affect your data, and the policy effective date will change.

Contact

Questions, requests, or concerns about your data: tothemoonhabits@gmail.com.

You may also have rights under the privacy laws of your region — such as the right to access, correct, export, or delete your data. Contact us and we will honor them. If you're in the EU, UK, or another region with a data protection authority, you also have the right to raise a complaint with that authority — though we'd appreciate the chance to make things right first.