Check by Check is a family habit tracker built around off-screen check-ins — habits on paper, the phone only for printing and the occasional scan. Our rule is simple: if it can stay on your device, it does. In practice we have no server for it to go to.
We require no account, run no user backend of our own, do no advertising tracking, and never upload scan photos, points or family profiles to servers we control. The app integrates no third-party analytics, crash-reporting or advertising SDK. The App Store privacy label lists no collected data types.
Check-in sheets and print records, the points ledger, member profiles and mascots, custom tasks and rewards, achievement progress and preferences such as language and sound live in the app’s database on this device so the app can work. None of it leaves the device on its own.
Photos of sheets are aligned, recognized and scored entirely on the device, with no network involved. They are never written to the system photo library and never take part in iCloud sync. An image is kept in the app’s own folder only while its scan record is kept, and it disappears when you delete that record or the app.
Camera: to photograph a sheet and read ticked or filled boxes. Photo library (add only): only when you choose to save a share QR code. Calendar: only when you, as a Pro member, add a scan reminder after printing. Local network: only to discover AirPrint printers. Each can be revoked in system Settings at any time, and doing so affects only that feature.
The free plan is always local and creates no iCloud container at all. Pro members may switch sync on, which places points and sheets in the private iCloud database under your own Apple ID, reachable only by your devices; as developers we cannot read that private database. Scan photos are excluded from sync. Turning sync off stops further uploads, while already synced content remains under Apple’s iCloud terms and can be removed from the system’s iCloud storage settings.
The app is made for families and managed by a parent on their own device. Member profiles — the default AGou and ATu, or names you choose — stay on that device. We do not collect personal information from children and do not use these profiles for advertising or analytics. There is no chat, no social feed and no way to publish user content. For what it’s worth, a nickname is plenty for a member name.
Subscriptions, trials and restores all run through Apple’s App Store. Apple processes payment details; we never receive your card number or billing address. The app learns exactly one thing from the system: whether a Pro entitlement is currently active. That processing follows Apple’s Media Services terms and privacy policy.
Apart from Apple’s own system services — App Store purchases, optional iCloud, AirPrint, the system calendar and photo library — the app talks to no third-party service and bundles no third-party SDK. We do not sell, rent or trade user data, for the simple reason that we hold none.
Inside the app you can delete members, sheets, scan records and ledger entries one by one. To clear everything at once, delete the app: the local data goes with it. If iCloud sync was ever enabled, also remove the app’s data under Settings → Apple Account → iCloud → Manage Account Storage. Since we hold no copy, there is no deletion request to send us — and none we could act on.
If the way the app handles data changes materially, we update this page and the date at the top. Anything that would introduce new data collection will be stated in the app and asked for explicitly. Earlier versions of this page are available on request.
Questions about privacy, or want to check any line on this page? Write to service@hhyx.xyz
