Privacy policy

Last updated: October 13, 2026

The Amsterdam Tech Company ("we," "us," or "our"), based in the Netherlands, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application Simply Habits (the "App") or visit our website simplyhabits.app (the "Website").

We collect minimal personal data—only what is necessary. We do not use analytics, advertising, or tracking in the App or on the Website. If you are located in the European Union (EU) or European Economic Area (EEA), we act as the data controller for your personal data.

1. Data Controller Information

Company Name: The Amsterdam Tech Company
Address: Korte Lijnbaanssteeg 1, Office number: 4468, 1012SL Amsterdam
Email: info@amsterdamtechcompany.com

2. What Personal Data Do We Collect?

We only collect the following personal data:

Idea Submissions and Email Address (Optional): If you choose to submit ideas or feature requests through the App's submission feature, we receive the text you submit, and you may optionally provide your email address for follow-ups. The email address is not required, and you can submit ideas without it.
Server Requests: When the App loads the Privacy Policy, Terms of Service, and support email from our server, or when you visit the Website, our server receives your IP address and basic technical information (such as the App or browser version). We use this only to deliver the content and keep our server secure.
Emails to Us: If you email us, we receive your email address and message.
Cloud Sync Data: We collect and sync your habit tracking data (such as habits and related events) using Apple's CloudKit service. This data may qualify as personal data if it includes information that identifies you or relates to your personal habits (e.g., health or routine-related entries). The sync occurs directly between your device and your iCloud account; we do not store this data on our own servers.

We do not collect any other personal data, such as names, location data, device identifiers, or sensitive information. No data is collected from children, and the App is not intended for users under 16 years of age.

In-app purchases are handled entirely by Apple through the App Store. We do not collect or have access to any payment information, financial details, or purchase history. Apple's privacy practices apply to such transactions (see Apple's Privacy Policy at https://www.apple.com/legal/privacy/).

3. Purposes and Legal Basis for Processing Your Personal Data

We process your personal data only for the following purpose:

To contact you for follow-ups regarding your submitted ideas or feature requests (e.g., to provide updates or seek clarification).
To synchronize your habit data across your devices signed in to the same iCloud account, enabling seamless access and updates.
To deliver the App's content and the Website, and keep our server secure.
To review your submitted ideas and respond to your emails.

The legal bases for this processing under the GDPR are:

Consent (Article 6(1)(a)) for your optional email address, which you provide by voluntarily entering it and submitting the form. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
Performance of our agreement with you (Article 6(1)(b)) for syncing your habit data, which is part of the service the App provides.
Our legitimate interests (Article 6(1)(f)) in delivering and securing the App and Website, improving the App based on your ideas, and responding to your emails.

We do not use your data for marketing, profiling, automated decision-making, or any other purposes.

4. Sharing and Disclosure of Information

We do not sell or rent your personal information. We share it only with the following service providers, and as required by law:

Your habit data is stored in Apple's CloudKit private database, which is part of your iCloud account. Apple acts as a data processor in this context, handling storage and synchronization on our behalf. Your data is subject to Apple's privacy practices and is encrypted in transit and on Apple's servers. For more details, refer to Apple's Privacy Policy (https://www.apple.com/legal/privacy/) and iCloud data security overview (https://support.apple.com/en-us/102651).
Our server and database are hosted by DigitalOcean in Amsterdam, the Netherlands.
Our email is hosted by Google Workspace.

All data remains within the EU where possible, or is transferred in compliance with GDPR requirements (e.g., via our providers' data processing agreements, the EU Standard Contractual Clauses, or the EU-U.S. Data Privacy Framework). No data is transferred outside the EU/EEA without appropriate safeguards.

5. Data Retention

We retain your email address only for as long as necessary to fulfill the purpose for which it was collected (e.g., to provide follow-ups on your submission). Typically, this is no longer than 12 months after the last interaction, unless you request deletion earlier.
Server logs, including IP addresses, are deleted after at most 14 days.
For cloud sync data: Your habit data is retained in CloudKit as long as you remain opted in and maintain your iCloud account. We do not retain copies on our systems. Upon disabling sync or requesting deletion, the data is removed from CloudKit in accordance with Apple's processes (typically immediately, but may take up to a few days for full propagation).

Once no longer needed, we securely delete any data we control.

6. Data Security

We take reasonable measures to protect your personal information from unauthorized access, loss, misuse, or alteration. Your email is stored securely on servers located in the EU.

For cloud sync data, security is handled by Apple's CloudKit, which encrypts your data in transit and on Apple's servers. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security. For more on CloudKit security, see Apple's documentation.

7. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

Right to Access: Request a copy of your personal data.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure ("Right to Be Forgotten"): Request deletion of your data, subject to legal obligations.
Right to Restriction of Processing: Limit how we process your data.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing based on our legitimate interests.
Right to Withdraw Consent: Withdraw consent at any time.
Right to Lodge a Complaint: Complain to a supervisory authority, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at https://www.autoriteitpersoonsgegevens.nl/.

To exercise these rights, contact us at info@amsterdamtechcompany.com

8. Children's Privacy

The App is not intended for children under 16. We do not knowingly collect data from children. If we learn we have collected such data, we will delete it immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the App, legal requirements, or our practices. We will notify you of material changes by posting the updated Privacy Policy in the App and updating the "Last updated" date above. Your continued use of the App after that date constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, you must stop using the App.

Change history

October 13, 2026

To make the App more private, we removed usage statistics entirely. Versions 1.3.4 and earlier sent usage statistics to our server; we have deleted all of this data. If you are still on an older version, it may keep sending them until you update, but our server discards them without storing them.

10. Contact Us

For questions about this Privacy Policy, contact us at info@amsterdamtechcompany.com