Draft — not yet reviewed. Bracketed details are placeholders.

Privacy policy

Effective [Effective date]

HABIT is a habit tracker that keeps your habits in step across your devices. This policy says what it collects, why, where it goes, and how to have it deleted. The short version: your habits are stored so they can sync; your health data stays on your phone; there are no ads, no tracking and nothing is sold.

Who is responsible

[Legal name of the developer or company], [Postal address]. Contact: ris.habits3@gmail.com.

What is collected, and why

• Your account. Your email address and a password (stored hashed by our authentication provider), or the identifier and email address Apple or Google share if you sign in with them. Sign-in codes are sent to your email. Needed to give you an account.
• Your habits. What you enter: habit names and descriptions, icons, colours, categories, goals and schedules; each tick (its date, the time you logged it, any value, and whether it came from you, a widget or Health); day notes; your own categories; and, if you link a habit to Health, which metric and threshold it uses. Stored so your habits are the same on every device you sign in on.
• Your devices. A random identifier the app creates when it is installed, and when each device first and last synced. Used to show your devices and to apply the free plan's two-device limit. It is not your phone's advertising identifier or serial number.
• Purchases. Subscriptions and the lifetime purchase are made through the App Store or Google Play. Our payment provider, RevenueCat, receives the store's record of the purchase linked to your account's random identifier, and we keep which plan you have, which store it came from and when it ends.
• Crash reports, unless you turn them off in Settings → Diagnostics: what went wrong and where in the app, your device model, operating system version and app version, and a random number that identifies this installation of the app, sent to Sentry. The text of an error is trimmed before it leaves the phone so it leaves out your habits, notes, email address and account identifier, and a report is not linked to your account.

Reminders stay on the device that set them; they are never sent to us.

Health data

If you connect Apple Health or Health Connect and link a habit to it, the app reads, on your phone only, the metric you chose: steps, exercise sessions, sleep or distance. It only reads; it never writes to Health.

Raw health data never leaves your phone. When a day reaches the threshold you set, the app records a tick for that habit, carrying that day's total (for example, a step count). That tick syncs like any other. Health data is not used for advertising, not sold, not shared with anyone else, and not used for anything except ticking the habits you linked. Disconnect it at any time in your phone's Health or Health Connect settings.

What is not collected

No advertising, no advertising identifiers, no tracking across other apps or websites, no location, no contacts. Your data is never sold.

Where it is stored, and who processes it

• Supabase — the database and sign-in, hosted in the European Union (Frankfurt).
• Vercel — runs the service your app talks to, in Frankfurt.
• RevenueCat — processes purchases.
• Sentry — receives crash reports.
• Apple and Google — process payments and deliver the app.

Where a provider processes data outside the European Economic Area, it does so under the European Commission's standard contractual clauses. [Confirm each provider's region and transfer mechanism.]

How long it is kept

For as long as you have an account. If a free account has not synced from any device for 12 months, its device registrations and sync bookkeeping are removed; your habits are kept until you delete them or your account, and syncing again picks up where you left off.

Deleting your account (Settings → Delete account, or see Delete your account) removes your account and everything in it from our database immediately. Backups that contain it are overwritten within [N] days. Deleting your account does not cancel a store subscription — cancel that in the App Store or Google Play.

Your rights

You can ask for a copy of your data, have it corrected or deleted, object to how it is used, or ask for it in a portable format, by writing to ris.habits3@gmail.com. The legal bases are the contract with you (syncing your habits and your purchases), your consent (health data, which you grant and withdraw in your phone's settings), and our legitimate interest in fixing crashes (which you can switch off). You may also complain to a data protection authority — in Romania, ANSPDCP — or the one where you live.

Children

HABIT is not directed at children under 16.

Changes

If this policy changes, the effective date above changes with it, and a material change will be shown in the app before it applies.