Why Steady Ember Has No Account, No Ads, and No Cloud Sync

Three things this habit tracker deliberately does not have, the reasoning behind each one, and what each of them costs you.

Absences are easy to market, easy to fake and easy to misread as missing features. This page sets out why this app ships without an account, without advertising and without cloud sync: what each decision buys, what it protects against, and where it makes your life harder.

No account: nothing to reset, nothing to harvest

An account exists to identify you to a server. Once that server exists, so does a record: an email address, a creation timestamp, a device list, and a log of what was checked off and when. That record can be misconfigured into public view, breached, or quietly assembled into a profile. For a habit tracker the contents are unusually personal — medication, sleep, the things you have decided to change.

Removing the account removes the whole class of problem rather than a slice of it. There is no password to reset, no email to verify, no server-side profile to breach, and no session to time out. It also removes the friction that matters most in practice: the moment at 6am when you open the app to log last night and are asked to sign in again before you can do anything.

What it changes is the shape of the risk. With no account, the only copy of your record is on a device you control, and there is no address attached to it anywhere. The trade is that nobody can restore it for you either — which is the same trade described in the cloud sync section below.

No ads: no SDK with an incentive to hold your attention

An advertising-supported app needs attention to pay for itself, and the usual way to buy attention is session time. That incentive reaches into design: more notifications, more surfaces, more reasons to open the app than the habit requires. An ad SDK also has to load, which means network calls, device identifiers, and a third-party library with its own policy attached to yours.

This app bundles no advertising SDK. The free tier — up to 6 habits at once, with streaks, notes and history intact — is funded by an optional paid tier that lifts the limit. The incentive is therefore to be worth paying for rather than to be opened more often. A tracker you can put down is a tracker that is working.

There is a quieter benefit: nothing depends on measuring you, so nothing has to ask for a network connection to display a habit list. That is what makes the next absence possible rather than merely noble.

No cloud sync: nothing holding your history hostage

Sync is the feature that quietly converts a local database into a server record. It is also what makes leaving expensive. Export the file, re-enter the habits, discover the notes were not included, find the statistics stopped at some arbitrary date. None of that has to be deliberate. It is simply what happens when the canonical copy of your history belongs to whoever runs the server.

Storing the database in local SQLite on the device removes the leverage. You can export to CSV or JSON whenever you like, and create an AES-256-GCM encrypted backup protected by your own key token. Health Connect integration for steps, hydration and sleep runs on the device as well, so even the automatic data is written locally. Leaving is a file you save, not an account you close.

Sync is convenient on the day you change phones and expensive on every other day of your life.

What you give up

Three absences have a real cost, and it is only fair to name it plainly.

No live sync between devices. Moving to a new phone means exporting your data or restoring an encrypted backup yourself. Two phones will not show the same streak in real time.
No automatic off-device copy. A lost, wiped or stolen phone without a recent backup takes the history with it.
You are responsible for the export. Nothing will remind you, and uninstalling before you have made one is unrecoverable.
No web dashboard. Your habits live on the Android device and the home screen widget, not in a browser you can open anywhere.

Those are the price of the three sections above, and they are not minor. The bet underneath is narrower than "local is always better": a habit tracker should be cheap to leave, and a little maintenance from you beats a standing relationship with a server. If you live on two phones and want the same number on both today, a sync-first tracker is the better tool, and this one is not pretending otherwise.

Does an encrypted backup on my own phone protect me if I lose the phone?

Only halfway. The backup is encrypted with your key token, which means a copy you have moved elsewhere — a computer, a drive, a second device — stays unreadable to anyone who finds it. A backup that never leaves the phone protects your privacy but not your recovery. Once the history starts to matter to you, move a copy off the device.

What is left when the three are gone

Steady Ember is what remains: a habit tracker with simple checks, numeric counts, and medication dose slots with multi-slot daily reminders; streak freezes with a retroactive recovery window; daily notes with a local, deterministic tone and insight engine rather than a cloud AI reading your journal; statistics and heatmaps, flexible schedules, custom reminder channels, 8 themes, a home widget, and archiving that keeps a finished habit's history. Android only, built with Flutter.

The free tier runs up to 6 habits at once. Streaks, notes and history stay intact as you archive, and archiving a completed habit frees the slot. If you want the checks behind these claims, What to Look for in a Private Habit Tracker walks through them one at a time. For the testable definition of the phrase itself, see What "Privacy-First" Actually Means in a Habit Tracker.