Privacy Policy
This privacy policy applies to the Control app for mobile devices, together with any related services operated by Marat Kairbekov (collectively, the “Application”). Marat Kairbekov is hereby referred to as the “Service Provider”.
Effective date: 2026-09-03
Information Collection and Use
The Application has no registration and no user accounts. You do not need to create an account, provide an email address, or sign in through any third-party service to use all of the Application’s features.
Your habit data exists only on your device. The Service Provider does not keep a copy of it, has no access to it, and cannot view, modify, or restore it.
The Application may automatically collect limited technical information necessary for its operation and for processing purchases, such as:
- Your device’s Internet Protocol address
- Your mobile operating system and device type
- App usage events required for purchase and subscription management (for example, which in-app purchase was initiated)
The Application does not display advertising, does not build advertising profiles, and does not collect device push notification tokens — reminders are scheduled locally on your device.
Data on Your Device
The Application stores the following data on your device, in its own protected storage:
- Your habits and negative habits, including their names, icons, colours, schedules, and order
- Your completion records and day overrides
- Your reminder times
- Your records of negative-habit incidents, including any amount of money or time you entered and any free-text comment you wrote
- Your custom colour palettes
- Your app settings (language, theme, which habit types are enabled, first launch date, and app version)
This data is not transmitted to the Service Provider and does not leave your device — except where you yourself use the export feature and choose to share the resulting file.
Because these records are created by you, they may contain any information you choose to enter, including free-text notes.
Purchases and Subscriptions (RevenueCat)
The Application uses RevenueCat, Inc. to manage in-app purchases and subscriptions. RevenueCat receives an anonymous, device-generated identifier that is created locally by the Application. Your email address and name are not sent to RevenueCat.
RevenueCat receives the following information on our behalf:
- The anonymous device-generated identifier
- Purchase transaction history (for example, which subscription or lifetime purchase was made)
- Locale and currency
This data is used to validate purchases, unlock the features you have paid for, and provide us with aggregate analytics (such as subscription conversion and retention charts) about how the Application’s purchases are performing. RevenueCat does not receive your payment card details; these are handled directly by Apple or Google.
RevenueCat acts as our data processor. More information is available in RevenueCat’s own privacy policy:
Other Third-Party Services
The Application is built using Expo. Expo’s SDK may process limited technical data as part of the Application’s core functionality (such as crash reporting or build infrastructure). More information is available at:
The Application uses Aptabase, a privacy-focused, open-source analytics service, to understand how the Application’s features are used (for example, which screens or actions are used most). Aptabase does not use device identifiers, cookies, or fingerprinting, and does not link the data it collects to you individually. Some events may include your habit names and the comment text you entered. More information is available at:
The Application does not include advertising SDKs or any social sharing integrations.
Cookies and Tracking Technologies
The Application itself does not use cookies. Third-party SDKs described above may use similar identifiers strictly to support purchase functionality and analytics. Where required by applicable law, the Service Provider will obtain consent before using any non-essential tracking technology.
Your Rights
You may request access to, correction of, or deletion of any personal data held about you by the Service Provider. You may also object to or request restriction of processing, and withdraw consent where processing is based on consent, without affecting processing carried out before withdrawal.
Your habit data is entirely under your control and is not accessible to the Service Provider. For that reason, the Service Provider cannot act on an access, correction, or deletion request in respect of that data — instead:
- Exporting your data. In Settings, you can export all of your habit data to a JSON file and save or share it wherever you choose. The exported file leaves your device only if you share it.
- Deleting your data. To permanently delete all Application data, uninstall the Application from your device or clear its data in your operating system settings. There are no backups on the Service Provider’s side, so this data cannot be restored once deleted.
To exercise your rights in respect of purchase and analytics data, contact the Service Provider at control@kannoapps.com.
If you are located in the European Economic Area (EEA), you also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully.
Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. The Service Provider does not sell or share personal information with third parties for cross-context behavioral advertising. To exercise your CCPA/CPRA rights, contact the Service Provider at control@kannoapps.com.
Third-Party Disclosure
The Service Provider may disclose the information described above:
- as required by law, such as to comply with a subpoena or similar legal process;
- when necessary in good faith to protect the rights, safety, or property of the Service Provider or others, or to investigate fraud;
- with trusted service providers (such as RevenueCat, Expo, and Aptabase) who process this information on our behalf, have no independent use of it, and are contractually bound to protect it.
The Service Provider does not sell your personal data and does not use your habit data to train machine-learning models.
International Data Transfers
The Service Provider or its third-party service providers (including RevenueCat, Expo, and Aptabase) may transfer data to countries outside your country of residence, including outside the EEA. Where applicable law requires safeguards for such transfers, the Service Provider relies on appropriate mechanisms, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- Adequacy decisions or other legally recognized transfer mechanisms;
- Your consent, where required and legally permitted.
Opt-Out Rights
You can stop all further collection of information by uninstalling the Application. Uninstalling stops the Application from collecting data from your device going forward and, at the same time, permanently erases all of the habit data stored on the device, so if you wish to keep it, use the export feature first.
Uninstalling the Application does not delete data already transmitted to the Service Provider’s third-party processors, nor the records of your purchases held by Apple, Google, and RevenueCat. For questions about that data, write to control@kannoapps.com.
Data Retention
- Habit data on your device: retained for as long as the Application is installed, and deleted together with it or when its data is cleared. No copies exist on the Service Provider’s side.
- Purchase and subscription data: retained for the duration of your use of the Application plus 12 months thereafter, unless a longer period is required by law.
- Automatically collected technical data (e.g. IP address, OS version): retained for up to 24 months from collection, unless longer retention is required for legal compliance.
- Aggregated and anonymized analytics: retained indefinitely, as it no longer identifies you.
- Data required for legal compliance: retained as long as required by applicable law.
Children
The Application is not intended for children under 13 years of age, or such higher age as required by applicable law (for example, 16 in some EEA member states). The Service Provider does not knowingly collect personal data from children. In the event the Service Provider becomes aware that a child has provided personal information, that information will be deleted promptly. If you are a parent or guardian and believe your child has provided personal information to the Service Provider, please contact control@kannoapps.com.
Security
The Service Provider takes reasonable physical, electronic, and procedural safeguards to protect the information it processes. In particular: the Service Provider operates no servers holding users’ habit data — that data remains on your device and is protected by the operating system’s application sandbox; and communication with third-party processors such as RevenueCat and Aptabase is encrypted in transit using TLS. The security of the data on your device also depends on the passcode or biometric protection you have set up. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.
Data Breach Notification
If a data breach occurs that affects your personal data, the Service Provider will notify affected users and relevant authorities in accordance with applicable legal requirements, including information about the nature of the breach and remediation steps.
Changes to This Policy
The Service Provider may update this Privacy Policy from time to time. Material changes will be posted with an updated effective date, and, where required by law, consent will be sought before such changes take effect. Previous versions are available upon request at control@kannoapps.com.
Your Consent
Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action — for example, by making an in-app purchase. You may withdraw consent at any time without affecting processing carried out before withdrawal.
Contact Us
If you have questions about this Privacy Policy or the Service Provider’s practices, contact control@kannoapps.com.