Privacy Policy — Awakened: Habit RPG

Last updated: May 13, 2026

Overview

Awakened: Habit RPG ("the app") is built on a privacy-first foundation. The vast majority of your data — your habits, completion history, character progress, XP, souls, inventory, class, equipped gear, and every HealthKit value the app reads — stays exclusively on your device and is never transmitted.

A small amount of data is sent to our backend ONLY to power the global leaderboard feature. This is described in detail below.

What Stays On Your Device (Never Transmitted)

The following data lives only on your device and is never sent anywhere:

• All habit tracking data and completion history
• XP, souls, character level, and stat progression
• Class, rank, and equipped items
• Card inventory and Pokédex discovery state
• Raw HealthKit values (your step counts, sleep duration, bedtime, and other Apple Health data)
• All app settings and preferences

If you delete the app, this on-device data is permanently removed.

What Is Sent to Our Backend (Leaderboard Feature)

To enable the global leaderboard, the app sends a minimal set of data to our backend (hosted on Cloudflare Workers):

• Your Apple Sign In identifier (an anonymous "sub" claim provided by Apple — this is NOT your name, email, or any other Apple ID detail)
• Your chosen leaderboard alias (a display name you set when you first sign in)
• Three derived metric values used for ranking:
  • Lifetime step total
  • Current sleep streak (consecutive nights of 7+ hour sleep)
  • Current bedtime streak (consecutive nights of bedtime before midnight)

These values are computed on your device from your Apple Health data, then submitted to the backend. Raw HealthKit data is never transmitted — only the three aggregated metric values above.

Authentication

Sign in with Apple is used to identify your account on the backend. We receive an opaque user identifier from Apple. We do not receive your name, email address, or any other Apple ID information unless you explicitly choose to share it.

Account Deletion

You can permanently delete your backend account at any time from Settings → Account → Delete my account. This removes your user record, alias, and all leaderboard data from our backend immediately. Local on-device data is also wiped when you sign out.

Data Backup and Restore

The app includes an optional Backup feature that exports your local data as a JSON file you can save to your device or share. This file contains only your local data, and is never sent to our backend. Restoring from a backup is also entirely local.

Third-Party Services

Awakened uses the following third-party infrastructure:

• Cloudflare Workers + Cloudflare D1: the backend infrastructure that powers Sign in with Apple authentication, the leaderboard, and account deletion. Cloudflare processes the request data described above on our behalf.
• Apple Sign In: identity provider used for authentication.
• Apple HealthKit: read-only access to your health data for computing metrics. HealthKit data stays on your device.

Awakened does not use third-party analytics, advertising networks, tracking SDKs, or any other external services that would collect data about you.

Data Security

All data transmitted to our backend uses HTTPS encryption. Session tokens use industry-standard JWT signing.

Children's Privacy

Awakened is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

If this policy changes, the updated date at the top of this page will reflect the change.