1.About this policy
This policy explains what happens to your information when you use the Hoptick app ("Hoptick: To-Do List & Habits" on Google Play) and the Hoptick pages of this website. Hoptick is made by OXCRED (PTY) LTD, a company registered in South Africa ("we", "us" or "our"). Under South Africa's Protection of Personal Information Act (POPIA), we are the responsible party for the personal information we handle.
This policy is part of our terms and conditions.
2.The short version
- No account, no ads, no tracking. Hoptick never asks you to sign up, shows no ads, and has no analytics or tracking tools in it.
- Your things stay on your phone. Your tasks, habits, notes, progress and rabbit are stored on your device, not on our servers. We can't see them.
- We never sell your data.
- Only a few things ever leave your phone, and section 6 lists every one: checking a purchase, getting your country's public holidays (only the country and year are sent), a few small files from our website, and voice tasks when your phone can't turn speech into text by itself. If you put your tasks in an online calendar, your phone's calendar sync sends them there.
3.What stays on your phone
Everything you put into Hoptick is stored only on your device:
- your tasks, sub-tasks, habits, check-ins, notes and categories;
- your reminders and settings, including the country you pick for public holidays;
- your rabbit's name, level, XP, clovers, skip tokens, awards, scenes and frames, and the rewards you set up;
- your stats, streaks, weekly recaps and timer history.
We don't receive a copy of any of it. You can erase all of it at any time with Delete all data in Hoptick's settings, or by uninstalling the app.
Reminders are scheduled by your phone itself, so they don't pass through any server.
Your calendar (Premium). If you turn on the calendar features, Hoptick reads your phone's calendar to show the day's events on Today, and adds your tasks to the calendar you pick. Your events are read on your phone only: Hoptick never sends them to us or anyone else, and never puts them in backups or exports. You can turn this off at any time in Hoptick's settings, or take away calendar access in your phone's settings. When you turn off Add my tasks, you can delete the events Hoptick added. Delete all data and uninstalling Hoptick leave your calendar as it is.
App lock (Premium). If you set a Hoptick PIN, it's kept on your phone only as a scrambled code in Android's secure storage, and never goes into backups. Unlocking with your fingerprint or face is done by Android itself: Hoptick never sees or keeps them, and only learns whether the unlock worked.
4.Permissions Hoptick asks for
| Permission | What it's for | When it's asked |
|---|---|---|
| Notifications | Reminders for tasks and habits, holiday notices and the weekly recap | The first time a reminder needs it |
| Alarms & reminders | Making reminders arrive on time | Only if your phone needs it for exact reminders |
| Microphone | Voice tasks (Premium): speaking a task instead of typing it | The first time you tap the mic button |
| Calendar | Calendar (Premium): showing the day's events on Today, and adding your tasks to the calendar you pick | When you turn on a calendar feature |
| Fingerprint or face | App lock (Premium): unlocking Hoptick with your fingerprint or face. Android checks it and only tells Hoptick whether it worked | Not asked; Android allows it when you install |
| Run at startup | Putting your reminders back after the phone restarts | Not asked; Android allows it when you install |
| Internet | The few downloads and checks in section 6 | Not asked; Android allows it when you install |
Hoptick doesn't ask for your location, contacts, camera, photos or files. You can turn any permission off in your phone's settings; the features that need it stop, and everything else keeps working.
5.Backups, exports and pictures you share
- Backup files are made only when you ask, or automatically with Premium, and saved where you choose. They hold your Hoptick data, so keep them somewhere safe and private. We never receive them.
- CSV exports (Premium) are files you make and share yourself.
- Share pictures of your rabbit, your week or a streak are made on your phone. Task names are never on them, and habit names only if you switch them on. The picture is saved briefly in the app's own storage and deleted after you share it. Once shared, the app you share it to handles it under its own policy.
- The home-screen widget shows your tasks and habits on your home screen, so anyone who looks at your phone can see them there.
- Android's own backup: if your phone's Google backup is switched on, Android may include Hoptick's data and bring it back on a new phone. That backup is made and stored by Google under its privacy policy.
6.What leaves your phone
Hoptick never sends your tasks, habits, notes or rabbit to anyone (for tasks you put in your calendar, see "Your calendar" below). These are the only times it uses the internet:
| What | Who handles it | What's sent | When |
|---|---|---|---|
| Checking a purchase | Google Play and RevenueCat | A random app ID, your purchase details and basic technical details (see below) | When you subscribe, buy Lifetime or restore Premium, and when the app checks it's still active |
| Public holidays | Nager.Date | Only the code of the country you picked and the year | When you pick a country, then about once a month |
| Holiday corrections, new monthly scenes, the list of our other apps | Us, from oxcred.co.za | Nothing about you: only the request for the file | From time to time, to keep them up to date |
| Voice tasks (Premium) | Your phone's speech service, usually Google's | What you say while the mic is on, only when your phone can't turn it into text on the device | When you use the mic button |
| Crash reports | Google Play (Android vitals) | Anonymous crash and performance reports, if you've let your phone share diagnostics with Google | When the app crashes or freezes |
As with any internet connection, each server you reach sees your IP address.
Purchases. Google Play handles the payment, and we use RevenueCat, Inc. to check it. RevenueCat receives a random ID made for the app (not your name, email or Google account), your purchase details (what you bought, the price and currency, the date and Google Play's purchase token), and basic technical details such as the app version, Android version, language, country and IP address. Google Play also gives us order details, such as the order number, product, price, country and status, which we use only to handle purchases and refunds. We never see your card or bank details. See RevenueCat's privacy policy and Google's privacy policy.
Voice tasks. Hoptick uses your phone's own speech-to-text. When your phone supports it, this happens on the device. If it doesn't, Android's standard speech service (usually Google's) may send your voice to its servers to turn it into text, under Google's privacy policy. Hoptick never records or keeps audio; only the text goes into your task.
Your calendar. Hoptick itself never sends your calendar anywhere. If you turn on Add my tasks to my calendar and pick a calendar that belongs to an online account, such as your Google account, your phone's own calendar sync sends those events (each task's title, date, time and sub-tasks) to that account, just like events you add yourself. Google, or your calendar's provider, handles them under its own privacy policy, for Google this one. Pick a calendar that's only on your phone if you'd rather they stay there.
Links in your calendar. Each event Hoptick adds ends with an "Open in Hoptick" link to oxcred.co.za/hoptick/task, carrying a random id for that task and nothing else. Tapping it opens the task in Hoptick. If Hoptick can't open it, for example on a computer, a short page on our website opens instead. Our server then sees your IP address and that random id, like any visit to our website (section 8).
Other countries. RevenueCat and Google may handle this information outside South Africa, for example in the United States, with the safeguards described in their own policies.
7.When you email us
If you email support@oxcred.co.za, we receive your email address and whatever you send, such as a screenshot or a backup file you choose to attach. We use it only to help you, and we keep it only as long as we need to, or as long as the law requires.
8.This website
The Hoptick pages on oxcred.co.za don't use cookies, analytics, ads or trackers, and don't load anything from other websites. Like any web server, ours keeps standard logs for security and to keep the site running: the IP address, the page or file asked for, the time and the browser type. We don't use these logs to identify you, and they're deleted after a limited time.
9.What we don't do
- No ads, advertising IDs or ad networks.
- No analytics or tracking tools in the app.
- We don't sell, rent or trade your information.
- No profiling, and no automated decisions about you.
- No access to your location, contacts, camera or photos, and never to your fingerprint or face (Android checks those itself).
10.Children
Hoptick is for people aged 13 and over. We don't knowingly collect personal information from children under 13. Because Hoptick keeps your data on your phone, the only personal information that could reach us is a purchase check or an email.
If you're under 18, please ask a parent or guardian before you subscribe to Premium, buy it, or email us. If you think a child has sent us information without that permission, email us and we'll delete it.
11.How long information is kept
- On your phone: until you delete it with Delete all data or uninstall Hoptick. Backup files stay where you saved them until you delete them.
- Purchase records: RevenueCat and Google Play keep them while you have Premium, and for as long as tax and accounting law requires. You can ask us to delete your RevenueCat record; you may then need to restore Premium again.
- Emails to us: as long as we need them to help you, or as the law requires.
- Website logs: for a limited time, for security.
12.Your rights
Under POPIA, you have the right to ask what personal information we hold about you, to have it corrected or deleted, to object to how we use it, and to complain to the Information Regulator. If you live elsewhere, for example in the European Union or the United Kingdom, you have similar rights under your local law, including the right to complain to your local data protection authority.
Where the GDPR applies, we rely on: our agreement with you (checking purchases), our legitimate interests (keeping the app and website working, and answering your emails), and your consent (the microphone and the calendar, which you can withdraw at any time in your phone's settings).
Because almost everything stays on your phone, we usually hold nothing about you at all: you can view, change, export or delete your data yourself in the app. To use any of these rights, email support@oxcred.co.za, and we'll reply within 30 days.
13.Security
Your Hoptick data is protected by your phone's own security, so we recommend using a screen lock. Hoptick's internet connections are encrypted (HTTPS). Backup files and exports are only as safe as the place you keep them. No system is perfectly secure, but we keep what we handle to a minimum.
14.Changes to this policy
If Hoptick changes in a way that affects your information, for example when optional cloud features such as syncing between devices arrive, we'll update this policy and the date at the top. If a change is important, we'll tell you in the app or on this page before it takes effect. Cloud features will always be your choice to use.
15.Contact us
For any question about your privacy or this policy: