Last updated: 11 June 2026
Hoshy ("we", "us", "the app") is a habit-tracking app operated by Soda Interactive Limited, a company registered in the United Kingdom. We are the data controller for the personal data described in this policy. It explains what we collect, why, who can see what, and your rights.
The short version:
Account: Your email address and a password (stored hashed by our authentication provider), or — with Sign in with Apple — the email you choose to share, which may be Apple's private relay address. We do not store your name.
Profile: A username (required), and optionally a profile photo and bio. Cosmetic choices like your sky theme and card style are also saved.
Habits and progress: The habits you create (names and icons), daily completions and rest days, optional photos you attach to completions, streaks, stars, streak freezes, and your computed Consistency Rank.
Wellbeing check-ins: If you use the daily check-in, your self-reported mood, sleep, and energy. These are private to you and are never shown to other users or sent to analytics.
Journal: Your journal entries are private and only visible to you. We never read, share, or analyse their content.
Social: Friend and buddy connections and requests, likes, comments, kudos, and nudges (including any message text you write), notification subscriptions to friends, users you block, and buddy-matching history.
Notifications: If you enable push notifications, a device token so Apple can deliver them, plus your in-app notification inbox. Daily reminders are scheduled locally on your device and never leave it.
Feedback: If you send feedback, we receive your message together with your user ID, app version, and iOS version, and we look up your username and email address so we can reply.
Subscription: Your subscription status, the product purchased, and Apple's original transaction identifier. Payments are processed entirely by Apple — we never see your payment details.
Usage analytics: Pseudonymous usage data described in section 5.
Local data: Copies of your habits, photos, and preferences are cached on your device so the app works offline.
We do not use your data for advertising, and we do not sell it to anyone.
Only you: Journal entries, check-ins, streak freezes, feedback, settings, and your notification inbox.
Friends and buddies: Your profile (username, photo, bio), streak, Consistency Rank, First 100 badge, and daily habit card — habit names, completion status, and photos, subject to your Friends privacy settings — plus like and comment counts and roughly when you were last active.
League members: People in your league tier — who may be strangers — see your profile basics (username, photo, bio), streak, rank, and daily completion progress. Your Leagues privacy settings control whether they see habit names, photos, and like/comment counts, and "Show me in leagues" removes you from leagues entirely.
Anyone signed in: If buddy discovery is on (you can turn it off in your profile), other users can find you in search and buddy matching, which shows your username, photo, habit list, total stars, and when you joined. Basic profile details (username, photo, bio) are part of the app's shared social layer and may be visible to signed-in users.
Photo links: Profile and habit photos are served via unguessable links that don't require a login. Hiding a photo removes it from feeds, but anyone who already has the exact link could still open it until the photo or your account is deleted.
We use TelemetryDeck, an EU-based analytics service, to understand how the app is used. It receives pseudonymous events — a hashed device identifier (not your account), device model, OS version, language, session information, screens visited, and feature events such as "habit completed" or "subscription purchased".
Analytics never include the content you create: no habit names, no journal text, no check-in answers, no usernames, and no email addresses. We do not use Apple's advertising identifier and we do not track you across other companies' apps or websites. The app uses no cookies.
Your data is primarily stored in the EU (Frankfurt). Where a provider processes data outside the UK or EEA — such as Apple or Resend in the United States — we rely on appropriate safeguards, including the UK's International Data Transfer Agreement, standard contractual clauses, or the UK Extension to the EU-US Data Privacy Framework where the provider is certified.
We keep your data while your account is active. Deleting your account from within the app permanently removes your profile, habits, completions, photos, check-ins, journal, social connections, feedback records, device tokens, and subscription records from our systems. If any uploaded photo fails to be removed automatically, contact us and we will delete it.
A few things may persist after deletion: notifications already delivered to other users that mention your username, feedback emails in our support inbox (deleted on request), and pseudonymous analytics events that cannot be linked back to you.
"Reset All Data" clears your content but keeps your account, username, subscription, and journal entries.
Under UK and EU data protection law, you have the right to access your data, correct it, delete it, restrict or object to our processing (including analytics), receive a copy in a portable format, and withdraw consent at any time without affecting earlier processing.
You can edit your profile and settings and delete your account directly in the app. For anything else — including a full copy of your data — email us and we will respond within one month.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk) or, if you are in the EU, your local supervisory authority.
All data is encrypted in transit (TLS) and at rest by our hosting providers. Access to your data is enforced with row-level security rules so other users can only ever see what sections 3 and 4 describe. No system is perfectly secure — keep your password safe and contact us immediately about any concern.
Hoshy is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
We don't make decisions with legal or similarly significant effects about you by automated means. The app does compute things automatically — your Consistency Rank from your completion history, buddy-match suggestions, and First 100 membership for early accounts.
We may update this policy from time to time. Changes appear here with an updated date, and we will let you know in the app if they are significant.
Questions or requests:
hello@sodainteractive.co.uk
Soda Interactive Limited
United Kingdom