Heartwood

Privacy policy

Effective 7 October 2026

Heartwood does not collect any data. There is no account, no backend, no analytics, no ads and no third-party SDKs. Everything Heartwood knows is stored on your iPhone and stays there.

This policy covers the iOS app "Heartwood: 75 Day Challenge", made by Idan Rokach.

What Heartwood stores, and where

Your challenges, each day's record (which rules were done and when, and what you entered by hand) and your settings are stored on your iPhone, in the app's own storage. Your progress photos are stored there too. We have no server, so we never receive any of it.

If you back up your iPhone to iCloud or to a computer, the app's data may be part of that backup. Backups are between you and Apple. We cannot see them.

Apple Health (HealthKit)

If you allow it, Heartwood reads four things from Apple Health: your workouts, your steps, the water you logged and your mindful minutes. It uses them for one job: to mark the matching rule of your challenge as done, and to show you the proof in plain words, such as "Outdoor run · 47 min · 7:12 · Apple Watch".

Heartwood writes one thing to Apple Health: the water you log in Heartwood. If you remove such an entry, Heartwood removes the sample it wrote.

• Health data is read on your iPhone only and stays on your iPhone.
• It is never sent anywhere. Heartwood has no server and no networking code.
• It is never used for advertising, never shared and never sold.
• It is not stored in iCloud. The details behind a proof line (a workout's kind, length, time and source, and your step and water totals) are kept in a cache on your iPhone that is left out of backups, and rebuilt from Apple Health when needed. What your challenge keeps is only that the rule was done, when, and whether by hand or by Apple Health.
• Exported backups and challenge files never contain Health samples.

Apple Health is optional. If you say no, everything works by hand. You can change what Heartwood may read at any time in the Health app: tap your picture, then Apps, then Heartwood.

Permissions, and why Heartwood asks

Each permission is for a single job, and Heartwood works without any of them.

• Apple Health. Described above.
• Camera. Your daily progress photo, if your challenge has that rule.
• Notifications. A morning line with the day number, an evening word about what is still open, and a "finish yesterday?" nudge. They are scheduled on your iPhone. Heartwood has no notification server.
• Face ID. The optional lock on your progress photos. Face ID is handled by iOS; Heartwood only learns whether it succeeded.
• Photo library (adding only). When you choose to save a share card or your timelapse to your photos. Heartwood cannot read your library. A photo you pick with "Choose from library" is handed to Heartwood by iOS, one photo at a time.

Your progress photos

Progress photos are kept inside Heartwood on your iPhone. They are not added to your photo library, not uploaded and not analysed. They leave your iPhone only if you share a card or a timelapse yourself. With the photo lock on, they stay covered until you unlock them.

What you share

Share cards, the timelapse, a challenge file ("Send these rules to a friend") and an exported backup are made on your iPhone. They leave it only when you choose to share them, and go only where you send them. A challenge file holds the rules only: no days, no photos, no Health data.

Purchases

Heartwood Plus is sold through Apple's In-App Purchase system. Apple handles the payment. We never see your name, your card or your Apple Account details. The app checks with Apple, on your device, whether you own Heartwood Plus.

Third parties

There are none. Heartwood has no third-party SDKs, no trackers and no advertising. We do not sell or share data, because we do not have any.

Deleting your data

Delete the app and its data is deleted from your iPhone. Water that Heartwood saved to Apple Health stays in Apple Health, where you can delete it in the Health app. There is nothing to delete anywhere else.

Children

Heartwood is a general-audience app. It does not collect information from anyone, children included.

Changes and contact

If this policy changes, the new version will be posted on this page with a new date. Questions: idanr391@gmail.com.

Made by Idan Rokach.