Hopjar

Hopjar privacy policy

Effective 10 October 2026

Hopjar keeps everything you log on your phone. There are no ads, no analytics and no tracking, and you don’t need an account. If you choose to sign in to back up your jar, a copy of it is stored with your account so you can get it back on a new phone, and you can delete that account and its backup at any time, right in the app.

This policy covers Hopjar on iPhone and iPad and on Android phones and tablets; where the two platforms differ, it says which.

What Hopjar keeps on your phone

These live in the app’s own storage on your phone, which only Hopjar and its own widgets use. They are removed when you delete the app. Like any app’s data, they are part of your phone’s own backups if you use them (iCloud Backup or a backup on your computer on iPhone, which Apple handles under its own terms; the phone’s backup to your Google Account on Android, which Google handles under its own terms).

Widgets and shortcuts

Hopjar’s widgets show today’s jar from the same data on your phone. Tapping a habit on the medium widget (iPhone) or the wide one (Android) writes to that same data, and so do Android’s app shortcuts (touch and hold Hopjar’s icon) and its Quick Settings tile. Nothing leaves your phone.

Apple Health (iPhone)

Apple Health is off unless you switch on “Fill from Apple Health” for a habit (it’s offered for habits like running, walking, cycling, swimming, hiking, yoga, strength training, stretching and meditation). iOS then asks whether Hopjar may read your workouts or your mindful minutes; you can change your answer any time in Settings › Privacy & Security › Health › Hopjar.

When it’s on, each time you open Hopjar it reads, on your iPhone, only the kind of activity that habit stands for, for yesterday and today. When it finds one, it drops the habit into that day’s jar and, if the habit tracks a distance or minutes, fills that number in (unless you already did). Hopjar never writes to Apple Health, reads nothing else from it, and never uses health data for advertising or shares it with anyone. What it reads stays on your iPhone, except that the jar it fills is part of your backup if you turn the backup on.

Health Connect (Android)

Hopjar doesn’t use Health Connect unless you switch on “Fill from Health Connect” for a habit (it’s offered for habits like running, walking, cycling, swimming, hiking, yoga, strength training and stretching, and for meditation where your phone’s Health Connect supports it). Health Connect then asks whether Hopjar may read your exercise sessions (and their distance, for a habit that tracks one) or your mindfulness sessions; you can change your answer any time in Health Connect › App permissions › Hopjar.

When it’s on, each time you open Hopjar it reads, on your phone, only the kind of activity that habit stands for, for yesterday and today: exercise sessions of that kind with their distance, or mindfulness sessions. It doesn’t read in the background or anything older. When it finds one, it drops the habit into that day’s jar and, if the habit tracks a distance or minutes, fills that number in (unless you already did). Hopjar never writes to Health Connect, reads nothing else from it, and never uses health data for advertising or sells or shares it with anyone. What it reads stays on your phone, except that the jar it fills is part of your backup if you turn the backup on.

Hopjar’s use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

Exporting your data

Settings › Export my data puts everything above into one file on your phone and opens the share sheet. The file goes only where you send it.

The optional backup

The backup is off unless you sign in with Apple or Google in Settings › Back up your jar. Hopjar works fully without it, and unless you turn it on, Hopjar makes no network connections of its own.

What is backed up. Your habits, your jars with their details (including any done habit and distance or minutes that Apple Health or Health Connect filled in), your notes and your to-dos, each with the time it last changed so changes from two phones can be merged. With them, your account: an account ID, your email address (a private relay address if you use Apple’s Hide My Email) and the name Apple or Google shares with Hopjar, if any.

Signing in. Apple or Google handles the sign-in under its own privacy policy. Hopjar receives the account details above and never sees your password.

Where it is stored. With Supabase (supabase.com), the database and sign-in service the backup runs on, in the European Union (Frankfurt, Germany). Supabase processes it on my behalf. Everything travels over HTTPS and is encrypted at rest, and the database only lets each account read and change its own rows. Supabase also keeps standard service logs, such as IP addresses and the times of requests, for a limited time to run and secure the service.

Who can see it. The backup is not end-to-end encrypted. As the developer I have administrator access to the database; I don’t look at your entries unless you ask me to help with a problem, and I never sell or share them.

Signing out stops the backup on that phone. Your jars stay on the phone, and the backup stays with your account until you delete it.

Deleting your account. Settings › Back up your jar › Delete account deletes your account and everything backed up with it, straight away. No longer have Hopjar? Email me from the address you signed in with and I’ll delete the account and its backup for you. The copy on your phone stays until you delete the app. Deleted data can remain in Supabase’s routine database backups until those backups expire.

What Hopjar doesn’t do

Your rights

You can see, change and export everything you logged in the app itself, and delete your backup with Delete account. For anything else about your data, including a copy of what the backup holds, email me and I’ll answer within a month. If you’re in the EU, you can also complain to your data protection authority.

This website

This website uses no advertising trackers or cookies. It counts visits with Umami, a cookieless analytics tool hosted on danyzmaj’s own server in Germany: the page viewed, the site you came from, your browser, operating system, device type, screen size, language, and approximate location (country, region and city) derived from your IP address. Your IP address itself isn’t stored, nothing is saved on your device, and the data isn’t shared or sold. The site is hosted on GitHub Pages, which GitHub states logs and stores visitors’ IP addresses for security purposes; see GitHub’s Privacy Statement.

Support email

If you email me, I receive your email address, your message and anything you attach, and my email provider processes them. I use them to answer you and fix problems, and I don’t add you to any mailing list.

Changes

If Hopjar starts handling your data differently, this page changes first, with a new effective date.

Contact

Hopjar is made by Danijel Lovric. Questions about this policy: danijel@danyzmaj.com