Privacy policy

Information we collect

• Account information. Acorn creates a randomly generated account identifier so you can use the app without registering an email address or password. We store authentication records to recognize your account and protect access to it. Your account can still be linked to the information you enter in Acorn.
• Information you enter. This includes your chosen name, your acorn’s name, habits, to-dos, and their settings. You can use a nickname. Habit names and to-dos may reveal personal information depending on what you choose to write.
• Progress and preferences. We store habit completion dates, completed focus sessions, reminder schedules, timer settings, and profile preferences. We use these records to calculate your streaks, statistics, XP, and companion level. Onboarding choices help set up your profile and habits.
• Purchase information. If you use Acorn Plus, Apple and RevenueCat process subscription and transaction information, such as the product purchased, transaction identifiers, purchase and expiration dates, renewals, and refunds. We link subscription access to your Acorn account. We do not receive your full payment card details.
• Technical information. When the app connects to our services, we and our providers process information such as IP addresses, request times, app or operating-system versions, and error information. We use this to operate the service, troubleshoot problems, and prevent abuse.
• Support messages. Messages sent through Acorn's Contact form are stored with your account's Support ID and the time you sent them. If you email us, we also receive your email address and whatever information or attachments you send.

How we use information

We use your information to save and sync your habits and progress, personalize your companion, provide reminders you enable, verify and restore purchases, respond to support requests, and keep Acorn secure and reliable. We also use subscription reports to understand purchases, renewals, and cancellations.

Where data-protection law requires a legal basis, we process information as needed to provide the service you request, for our legitimate interests in maintaining and protecting the service, to meet legal obligations, or with your consent where required. You can withdraw consent for optional permissions through your device settings.

Service providers

We share information with providers that help us run Acorn:

• Cloudflare hosts our backend and database and helps protect the service. It processes synced account and app data, along with network and operational information. Cloudflare privacy policy.
• RevenueCat helps verify purchases, restore subscriptions, manage Acorn Plus access, and report on subscriptions. We give RevenueCat your Acorn account identifier; our integration does not send it your habit names, to-dos, or chosen profile name. RevenueCat privacy policy.
• Apple handles App Store payments and subscription management. Apple also provides device services such as Keychain and, when enabled, iCloud Keychain. Apple privacy policy.

Our email provider processes support correspondence. We may also disclose information when required by law, to protect people or the service, or as part of a merger, acquisition, or transfer of the business, subject to applicable privacy protections.

Your device and permissions

Acorn keeps a local copy of app data on your device and syncs supported records with our backend. Your account credential is stored in Apple Keychain and may sync through iCloud Keychain according to your Apple settings. We do not receive your Apple Account password.

Habit reminders and timer alerts use device notifications. You choose whether to allow them and can turn them off in Acorn or in iOS Settings. Acorn does not read your browsing history or measure how long you use other apps; the time calculations shown during onboarding are based on the durations stated on screen.

Retention and deletion

We retain synced account and app information to provide your history, progress, and access to the service. We do not currently delete accounts automatically because they are inactive.

You can edit or delete individual habits and to-dos in the app. These changes sync with our services when your device is connected. Removing Acorn from your phone does not by itself delete information stored by our services.

You can delete your account in Acorn by opening Settings, choosing Delete account, and confirming. This removes your account and its associated habits, history, to-dos, reminders, focus records, support messages, and synchronization records from our active database. It also clears Acorn's local records on that device and requests deletion of your RevenueCat customer record, which RevenueCat processes asynchronously. An internet connection is required; interrupted deletion can be retried in the app.

We retain a one-way fingerprint of the revoked account credential to prevent an old device from recreating the deleted account. This record contains no habit content, profile, or account ID.

For help with deletion, email [email protected] and include the copyable Support ID at the bottom of Settings. A Support ID identifies your account but does not prove ownership; we may need to verify that the account belongs to you. Please do not send passwords, payment card details, or account credentials.

Some information may need to be retained to meet legal or accounting obligations, handle disputes, or prevent fraud. Copies in backups and service logs may remain until their normal retention periods expire. Apple may retain its own purchase records under its policies and legal obligations.

Deleting data or the app does not cancel an Apple subscription. Manage or cancel Acorn Plus through your Apple subscription settings.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, restrict or object to certain processing, or withdraw consent. You may also have the right to complain to your local data-protection authority.

Contact us using the details below to exercise these rights. We will review your request and respond as required by applicable law. Because Acorn does not require an email address to create an account, we may need additional information to locate your account and verify your request. We will not discriminate against you for exercising applicable privacy rights.

Security and storage

We use encrypted network connections, account authentication, and access controls to help protect your information. No method of transmission or storage can be guaranteed completely secure.

Our providers may process information in the United States and other countries outside your country of residence. The privacy laws in those countries may differ from those where you live. Where applicable law requires safeguards for international transfers, those requirements apply to our handling of your information.

Children’s privacy

Acorn is intended for people ages 13 and up. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe a child under 13 has provided personal information to Acorn, please contact us at [email protected]. If we learn that we have collected personal information from a child under 13, we will take steps to delete it.

Changes to this policy

We may update this policy as Acorn or our data practices change. We will post the updated policy here and change the date above. Where required, we will provide additional notice or request consent before a material change takes effect.