Privacy

Loma stores your habits on your device. It has no account system and sends nothing to a server. This page is the long version of that sentence, including the two places where the website behaves differently from the app.

The app

Loma has no accounts, no sign-up and no login. It never asks for your name, your email address or your phone number, because there is nothing it could do with them.

Your habits, your completions, your skips and your settings are written to storage on your iPhone and stay there. They are covered by your device passcode and by the device backup you already run, and by nothing else, because nothing else is involved.

The app contains no analytics, no crash reporting, no advertising identifiers and no third-party software of any kind. There is no code in it that could report your behaviour back to me, so there is no setting to turn that off.

You can export everything you have recorded to a CSV file at any time, in the free version as much as the paid one.

iCloud sync

iCloud sync is off when you install Loma and stays off until you turn it on. It is part of Loma Plus.

With it off, your habits never leave the iPhone they were recorded on.

With it on, your habits are copied into your own iCloud account so that your Apple devices can show the same list. They go to Apple, into the private part of your account that you can reach and I cannot. I have no access to it, no way to request it and no copy of it, because I run no server for this. Apple handles that data under Apple's privacy policy.

Turning sync off stops the copying. Everything already on your device stays on it.

Notifications

If you turn on reminders, iOS schedules them on the device. The text and timing are worked out on your iPhone, and no reminder passes through a server of mine.

Buying Loma Plus

The one-time purchase is handled entirely by Apple through the App Store. Your payment details go to Apple and are never visible to me. What I receive from Apple is a sales report with no identifying information in it.

This website

lomahabits.com sets no cookies, so there is no cookie banner to dismiss.

Traffic is measured with Cloudflare Web Analytics, which is cookieless and records no personal data. It counts page views, referrers and rough locations in aggregate. It cannot identify you and it does not follow you to other sites. Being honest about the mechanics: this is the one piece of the site that loads a file from a domain other than lomahabits.com, a small measurement script served by Cloudflare. The measurements themselves are sent back to lomahabits.com.

The site is hosted on Cloudflare Pages. Like every web host, Cloudflare processes the requests your browser makes, including your IP address, in order to serve the page and to block abuse.

The waitlist

If you choose to leave your email address to hear when Loma reaches the App Store, that address goes to EmailOctopus, who run the mailing list. They send you a confirmation email first, and you are only on the list once you click the link in it. Every email includes an unsubscribe link, and unsubscribing removes you.

I keep no copy of your address. There is no database on my side to keep it in. The address is used for one thing, which is telling you the app has launched.

To keep automated submissions off the list, the form checks the request rate for the network address it arrived from. That check happens as the request passes through and is not written down.

Things that never happen

• Your habit data is never sent to me. With iCloud sync off it does not leave your device at all, and with it on it goes to your iCloud account and nowhere else.
• Nothing is sold, rented or shared with anyone.
• There is no profiling, no behavioural advertising and no cross-site tracking.
• No data is collected from anyone under 13.

Your rights

Because the app holds your data on your own device, you already have it. Deleting the app deletes it, and exporting to CSV takes a copy with you. If you turned on iCloud sync, the copy in your iCloud account is yours to delete from your Apple ID settings.

For the mailing list, you can unsubscribe from any email, and you can write to me to ask what is held and to have it deleted. Under UK and EU data protection law you have the right to access, correct, erase and port that data, and to complain to the Information Commissioner's Office.

Changes

If this policy changes in a way that affects what is collected, the date below changes with it and the previous version stays available on request.

Contact

Yalin Solmaz, London, United Kingdom. yalin@lomahabits.com

Last updated 19 August 2026.