Privacy

Last updated October 9, 2026

Hadar is built so there is almost nothing to have a policy about. There is no account, no sign-up, no analytics, no tracking, no advertising, and no server of ours. We cannot read what you write, we do not know who you are, and we collect no data about you. This page says what stays on your phone, what travels, and how to take any of it back.

What stays on your phone

Your name, your start date, the names of your people, the lines you lay down at night, the plumb line answers, what you keep, your look backs, and your settings. All of it is written in the app's own storage on your device. None of it comes to us, because there is nowhere for it to go: the app has no backend. The one copy that leaves the phone is yours, in your own iCloud (see Backups). The type is built into the app, so it does not even fetch a font.

What travels, and how

If you send a friend Hadar, the invitation is a text message you send from your own phone, in a thread you already have. She begins her own forty when she opens it. Nothing about either of you passes through us, and nothing passes between your phones. If you send her a kept verse, a passage on a painting, the week's question or your keepsake, it goes by the share sheet on your phone to whatever you choose, and we never see it.

What Apple holds

Apple's own systems are Apple's. If you install Hadar through TestFlight, Apple collects crash reports and basic usage from testers under its TestFlight terms. If you install it from the App Store, Apple's standard app analytics apply, under your own Apple settings. Hadar itself sends nothing to Apple or to anyone.

Backups

Like most of what lives on an iPhone, the app's data rides along in your device backup if you have backups turned on. That is your backup, in your account, governed by your settings. The iPhone app also keeps a copy of what you write in your own iCloud key-value store, nowhere else, so a new phone or a reinstall brings it back; the switch is on More, and turning it off clears the copy. We cannot read it; it never passes through us. The Export on the More page gives you everything you wrote as plain text, whenever you want it.

Notifications

Hadar rings a morning bell only if you set a time for one, on More. The phone itself schedules the note, with the day's reference, from this phone to this phone; nothing is sent to anyone to make it ring, and nothing is counted when you answer it or when you do not. Off clears it. There are no streaks and no badge.

The widget

If you put Hadar's widget on your Home Screen or Lock Screen, it shows the day's passage. It reads your day one from the app, inside your phone, and nothing else. It counts nothing and sends nothing.

Photos

If you set a passage on a painting and choose Save Image, the image is added to your photo library. Hadar asks only to add, never to read your photos.

Taking it back

Your people. More, Your people, Change. Clear the names and they are gone from the device.

The friend. More, Part ways. Your phone stops showing her name. She is not told, and nothing on her phone changes.

Everything. On More, turn off the copy in your own iCloud, which clears it. Then delete the app, which removes the rest from your device.

Children

Hadar is written for a grown woman. A child in Hadar is at most a name on the People days, written by a mother, and nothing else is asked or held.

Questions

Write to andrew@andrewcebulka.com. A person answers.

Hadar · forty days · andrewcebulka.studio