Last updated 11 October 2026

Privacy Policy

Who we are

Stapa is made by Thijs Lowette, based in Belgium. That makes us the data controller for the little data described here. Questions or requests go to support@stapa.app.

What stays on your iPhone

Your habits, goals, check-ins, logged progress, settings and reminder times are stored on your iPhone, in a container shared by the app and its widgets so you can check in from the Home Screen, Lock Screen and Control Center. Reminders are scheduled on your iPhone as local notifications, so they don’t go through any server.

iCloud sync

If you’re signed in to iCloud, Stapa copies your habits and goals to your private iCloud database, so they survive a reinstall or a new iPhone. Apple stores that data under your Apple Account and its privacy policy. We have no access to it.

To stop syncing, turn off iCloud for Stapa in the Settings app. To delete the copy in iCloud, go to Settings → your name → iCloud → Manage Account Storage → Stapa.

Challenges

When you start or join a challenge, the people in it can see the name you enter, the days you checked in on that challenge’s habit over the last 35 days, and whether you locked it in for today. They can’t see your other habits through the challenge. Challenge data is stored in the iCloud of the person who started it and shared through iCloud sharing. Joining requires an invite link from someone in the challenge.

When you leave a challenge, you stop sharing new check-ins. What you already shared stays visible to the remaining members until the person who started the challenge ends it.

Friends

When you make a friend invite link, Stapa creates a read-only shared profile in your own private iCloud database. People who accept your link can read it; we can’t. It contains your name and summaries of the habits you make visible: each habit’s name, emoji, current run, whether it’s weekly, and whether it’s due, locked in or done today. It doesn’t contain your check-in history.

For goals you make visible, friends see the title, emoji, days until the deadline, consistency and whether you marked the goal achieved. They never see the numbers you log. Your profile also holds your cheers: which friend’s habit or goal you cheered and on which day.

If you ask friends to support a hidden habit or goal, its summary and the selected supporters are still stored in that shared profile. Stapa shows it only to those supporters, but anyone with access to your shared profile can read the underlying iCloud records. To keep an item entirely private, don’t assign supporters.

In Settings → Data & privacy, Hide everything from friends hides your habits and goals and clears supporters. Stop sharing with friends deletes your profile share, so friends lose access to your name, habits, goals and cheers. You can still see theirs. To remove a friend from your list, swipe their name in the Friends tab. That removes their profile from your iPhone; it does not revoke their access to yours. Use Stop sharing with friends to end that access.

Feedback you post

The in-app feedback board is public to other Stapa users. A post stores the text, the name you type, the app version and an anonymous ID that iCloud assigns to you. It does not include your Apple Account email. Posts, approvals, replies and marks that feedback was addressed are kept in Stapa’s public iCloud database, which Apple hosts for us. We can read them to decide what to build next.

A reply stores the post it belongs to, its text, the name entered and a recipient for notifications: the author’s anonymous iCloud ID or the Stapa admins. The board shows the reply to everyone. An approval or addressed mark stores the post ID; an addressed mark can also include the app version. To remove your own posts and replies, use Settings → Data & privacy → Delete my feedback, or email us for help.

If you dictate feedback, Stapa uses Apple’s speech recognition and only listens while you’re dictating. Where your iPhone supports it, recognition happens on the device. Otherwise Apple processes the audio under its own privacy policy. We never receive the audio.

AI suggestions

When you describe a habit or tap Inspire me, the suggestions come from Apple’s on-device model (Apple Intelligence) if your iPhone has it, and otherwise from a template catalog built into the app. Either way, what you type stays on your iPhone. We don’t send it to us or to any AI provider.

What we don’t do

• No analytics, crash-reporting or advertising SDKs.
• No tracking across apps or websites, and no selling or sharing of data.
• No access to your contacts, location, photos or Health data.

This website

stapa.app sets no cookies and runs no analytics. Like any web host, our hosting provider may briefly log IP addresses to keep the site secure and running.

Your rights

Under the GDPR you can ask for access to, correction of, or deletion of your personal data, and you can object to how it’s used. Because we hold almost nothing, most of this is in your hands: delete a habit in the app, leave a challenge, stop sharing with friends, or delete Stapa’s iCloud data as described above. For feedback posts or anything else, email us and we’ll answer within 30 days. You can also complain to your data protection authority. In Belgium, that’s the Data Protection Authority.

Children

Stapa is not meant for children under 13.

Changes

If this policy changes, we’ll update the date at the top. If a change affects how your data is used, we will also mention it in the app’s release notes. See also our Terms of Use.