Repti Habits

Privacy Policy

Effective September 14, 2026

Repti Habits is operated by Kaila Canas (“Repti Habits,” “we,” “us,” or “our”). This policy explains how the current version of the Repti Habits mobile application handles information.

Summary

The app is local-first and offers optional iCloud synchronization. It does not include advertising, Google Analytics, Firebase Analytics, or another behavioral analytics SDK. It does not sell personal information or track people across apps or websites. You can use every feature of the app without creating a Repti Habits account or enabling iCloud sync. If you do create one, the only personal information we hold is an email address.

Your husbandry records are never sent to a Repti Habits server. Animal profiles, feeding and weight records, care events, notes and photos stay on your device and, if you enable iCloud sync, in the private iCloud database on your own Apple account. That is true whether or not you create a Repti Habits account.

Information handled by the app

You may enter animal profiles, care schedules, feeding and weight records, feeder inventory, notes, camera names and endpoints, preferences, and similar husbandry information. You may also choose animal profile photos from your photo library.

This information is stored on your device using app storage. If you choose to enable iCloud sync, animal profiles, care tasks, feeding and weight records, and feeder inventory records are stored in the private CloudKit database associated with the iCloud account on your device so they can be kept consistent across your devices.

Your keeper name, app preferences, care-guide library, profile photos, and camera connection details stay on the device and are not uploaded by the sync feature. Profile photos are also not included in the app’s JSON backup. When you open a camera, your device connects directly to the endpoint you configured; the operator of that endpoint or network may receive ordinary connection information such as your IP address.

Repti Habits account (optional)

You may optionally create a Repti Habits account using Sign in with Apple. An account is not required, nothing in the app is withheld without one, and iCloud sync works without one. It exists so that features we are still building — sharing an animal with another keeper, and a planned mode for professional sitters — have an identity to attach to.

You can sign in with Apple, or with an email address and a six-digit code we send you. If you create an account, we store on our own server only:

  • your email address;
  • the stable identifier Apple gives us for your Apple Account and this app, if you signed in with Apple, which identifies you to us and to nobody else;
  • an internal account identifier we generate;
  • the dates your account was created and last used;
  • a hashed session token so the app can stay signed in, and a credential from Apple kept solely so we can disconnect Sign in with Apple if you delete your account;
  • while a sign-in code is outstanding, a one-way hash of that code, which is deleted as soon as it is used or expires. The code itself is never stored.

We do not receive or store your name. The app does not ask Apple for it. If you use Sign in with Apple and choose to hide your address, Apple gives us a private relay address instead of your real one, and that relay address is all we ever see.

Your address is stored for one reason: it is what lets you reach the same account from a device that does not have your Apple ID. It is not used for marketing, and Repti Habits does not send newsletters or promotional email. The only messages we send are sign-in codes you asked for.

We store no husbandry data of any kind: no animals, no logs, no photos, no notes.

This service runs at account.reptihabits.com on Cloudflare, which hosts it and stores the account database on our behalf as our processor under its own terms. Sign-in codes are delivered by Resend, which processes your address and the message on our behalf in order to send it. Those emails contain no tracking pixel and no tracked links.

Permissions

  • Photos: requested only when you choose an existing image for an animal profile.
  • Notifications: requested only when you enable care reminders or the daily digest.
  • Local network: may be used when you open a camera endpoint on your local network.

The app does not request camera or microphone access.

Sharing and third parties

The app does not send your keeper records to any account or database operated by us; the optional account service described above holds identity only. If you use Sign in with Apple, Apple processes that sign-in under its own terms, and Cloudflare hosts the account service as our processor. If you enable iCloud sync, Apple processes the synced records in your private iCloud database under Apple’s terms and privacy policy. If you export a JSON backup, iOS shows its share sheet and you choose the recipient or destination. That recipient’s privacy practices then apply.

Care guides may contain links that open in your browser. Websites you visit have their own privacy practices. Apple may process App Store, purchase, crash, or device information under Apple’s own terms and privacy policy; Repti Habits does not receive all information Apple holds.

Retention, deletion, and control

Keeper records remain on your device until you edit them, remove them through available app controls, clear the app’s data, or uninstall the app. Removing the app may delete local data but does not necessarily delete an iCloud copy. Turning off sync keeps the iCloud copy available for reconnection. The app’s Remove iCloud copy control removes the synced Repti Habits content from the currently connected iCloud account. Backups you exported are controlled by you and must be deleted separately from their destination.

If you created a Repti Habits account, you can delete it from inside the app under Settings, and doing so removes your account record, your email address and its sessions from our server and disconnects Sign in with Apple. Deleting your Repti Habits account does not delete your animals, logs or photos, because we never held them: they remain on your device and in your own iCloud exactly as they were. Signing out has no effect on them either.

If you never created an account, we hold no server copy of anything to delete. Contact us if you believe we hold personal information about you.

Children

Repti Habits is a general husbandry tool and is not directed to children under 13. We do not knowingly collect children’s personal information. If we learn that an account was created by a child under 13, we will delete it. A parent or guardian may contact us with a concern.

Security

We use reasonable safeguards appropriate to the app’s local-first design. Synced records use Apple’s private CloudKit database for the iCloud account on your device. The account service is reachable only over HTTPS; session tokens are stored on your device in the iOS Keychain and on our server only as a hash, so our copy cannot be used to sign in as you. Sign-in codes are also stored only as a hash, expire after ten minutes, can be used once, and are invalidated after a small number of wrong attempts. Requests for codes are rate limited. No method of storage or transmission is completely secure. Protect your device, iCloud account, camera credentials, exported backups, and any destination where you save them.

Future analytics, ads, or purchases

If we add analytics, advertising, purchases, accounts, or other data processing, we will update this policy and the App Store privacy disclosures before collecting new categories of data. Where required, the app will ask for consent before enabling nonessential analytics or advertising storage. Cross-app or cross-website tracking will not occur without Apple’s required permission.

Changes

We may update this policy as the app changes. We will change the effective date and provide any notice or consent required by law for material changes.

Contact

Email privacy questions to [email protected].