Habiyo Logo

Privacy Policy

Last updated: December 24, 2025

This Privacy Policy describes how Habiyo ("we", "us", or "our") collects, uses, and shares information about you when you use our mobile application and related services (collectively, the "Service"). By using Habiyo, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

When you create an account and use Habiyo, you may provide us with:

  • Account Information: Your email address, display name, and profile picture (if you choose to add one)
  • Authentication Data: If you sign in using Google or Apple, we receive basic profile information from those services as permitted by your privacy settings
  • Habit Data: The habits you create, including names, descriptions, schedules, categories, and associated settings
  • Completion Logs: Records of when you complete habits, including timestamps, notes, and any metrics you track
  • Social Content: Posts, reactions, comments, and other content you share through social features
  • Communications: Messages you send to us for support or feedback

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

  • Device Information: Device type, operating system version, unique device identifiers, and mobile network information
  • Usage Data: How you interact with the app, including features used, time spent, and navigation patterns (collected in anonymized/aggregated form)
  • Notification Tokens: Push notification identifiers to send you reminders you've requested
  • Crash Reports: Technical information about errors and crashes to help us improve the app
  • Analytics Data: Anonymized usage statistics to understand how users interact with our Service

1.3 Information from Third Parties

  • Payment Processors: If you subscribe to Habiyo PRO, Google Play or Apple App Store processes your payment. We receive confirmation of your subscription status but do not have access to your payment card details.
  • Authentication Providers: If you sign in with Google or Apple, we receive your email and basic profile information as authorized by you.

2. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Create and maintain your account, sync your data across devices, and deliver the habit tracking features you use
  • Send Notifications: Deliver habit reminders, achievement notifications, and other alerts you've enabled
  • Generate Reports: Create personalized daily, weekly, and monthly progress reports and analytics
  • Enable Social Features: Allow you to connect with friends, share progress, and participate in community features (if you choose to use them)
  • Improve the Service: Analyze usage patterns to fix bugs, improve features, and develop new functionality
  • Provide Support: Respond to your questions, requests, and feedback
  • Ensure Security: Detect and prevent fraud, abuse, and security incidents
  • Comply with Legal Obligations: Meet applicable legal requirements and enforce our terms

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

  • With Your Consent: When you explicitly choose to share information, such as posting to social features or sharing progress with friends
  • Service Providers: With trusted third parties who help us operate the Service, including:
    • Supabase (database hosting and authentication)
    • RevenueCat (subscription management)
    • Google AdMob (advertising, if applicable)
    • Analytics providers (anonymized usage data only)
  • Legal Requirements: When required by law, legal process, or government request
  • Safety and Rights: To protect the rights, property, and safety of Habiyo, our users, or others
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (you would be notified of any change in ownership)

4. Data Storage and Security

Your data is stored securely using Supabase infrastructure hosted on Amazon Web Services (AWS). We implement industry-standard security measures including:

  • Encryption of data in transit using TLS/SSL
  • Encryption of data at rest
  • Row-level security policies to ensure users can only access their own data
  • Regular security audits and monitoring
  • Secure authentication using industry-standard protocols

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

  • Account Data: Retained until you delete your account
  • Habit and Completion Data: Retained until you delete your account or specifically delete the data
  • Backup Data: May be retained in encrypted backups for up to 30 days after deletion
  • Anonymized Analytics: May be retained indefinitely as it cannot be linked back to you

After account deletion, we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

6. Your Rights and Choices

6.1 Access and Portability

You can access and export your data at any time through the app's "Export Data" feature in Settings. This provides your habit data in JSON or CSV format.

6.2 Correction

You can update your profile information, habits, and other data directly within the app at any time.

6.3 Deletion

You can delete your account and all associated data at any time:

  • In-App: Go to Profile → Settings → Delete Account
  • Web: Use the deletion request form on the Delete Account page

Deletion is permanent and cannot be undone. We will process deletion requests within 30 days.

6.4 Notifications

You can control push notifications through your device settings or within the app's notification preferences.

6.5 Social Features

You can choose not to use social features. If you do use them, you can control who sees your profile and activity.

7. Children's Privacy

Habiyo is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at zerotonimbus@gmail.com.

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: