Privacy Policy

Questions about privacy can be sent to [email protected].

Operator: YongSheng Wei

This Privacy Policy explains how Habitor ("Habitor," "we," "us," or "our") collects, uses, and protects personal data when you use the Habitor mobile application and related services.

1. Information We Collect

We collect the following categories of information:

Account and authentication data, such as your internal user ID, Sign in with Apple identifier, sign-in method, registration time, and last login time.
Profile data, such as your nickname and avatar image if you choose to provide them.
Habit data, such as habit names, habit settings, completion records, timer records, and related habit statistics generated from your use of Habitor.
Login metadata, such as your recent login IP address, recent login country or region, and recent login device model.
Limited technical and security data, such as app version, device and operating system information, request timestamps, and basic error or security logs.
Notification data, including an app installation identifier, Apple push notification token, notification language, delivery status, and reminder content needed to deliver habit reminders.
Purchase and membership data received from Apple or generated through membership administration, including transaction identifiers, subscription product, verification results, membership status, expiry, refund or revocation status, and promotional grants.
Communications data, including feedback submitted in the app and information you send when contacting us.

If you choose to upload an avatar, Habitor may access photos that you explicitly select from your device's photo library.

Account and habit information is stored on our backend to support your signed-in experience and access across devices. Data is supplied by you, generated when you use Habitor, or received from Apple for authentication and subscription verification. Apple processes purchase payments; we do not collect your payment card number.

2. How We Use Information

We use personal data to:

provide, operate, and maintain Habitor;
authenticate users and manage accounts;
store and display your habits, records, nickname, and avatar;
generate habit statistics and related personal progress views;
deliver habit reminders to registered devices;
verify subscriptions, restore eligible purchases, and administer membership;
secure Habitor, prevent abuse, and troubleshoot issues; and
respond to support or privacy requests.

We do not sell your personal data. We do not use your data for cross-app or cross-site targeted advertising.

3. Legal Bases for Processing

If you are in the European Economic Area, the United Kingdom, or another jurisdiction that requires a legal basis for processing, we rely on one or more of the following legal bases:

performance of a contract, when we need the data to provide Habitor to you;
legitimate interests, including securing, maintaining, and improving Habitor, where those interests are not overridden by your rights; and
compliance with legal obligations, where applicable.

If you choose to provide optional profile information, such as a nickname or avatar image, we process that information to provide the features you request.

4. How We Share Information

We may share information only as needed to operate Habitor, comply with law, or protect rights and security.

Habitor may rely on third-party service providers such as:

Apple, for Sign in with Apple, App Store purchases, subscription verification, and push notification delivery;
Supabase, for backend data and storage infrastructure;
Render, where used for backend hosting infrastructure; and
Resend, for forwarding in-app feedback to our support mailbox.

We limit information shared with service providers to what is needed for the relevant function, such as a device token and reminder payload for push delivery or feedback content for support email. Providers handling data on our behalf must protect it consistently with this policy and applicable requirements. Apple also processes information independently under its own privacy policy.

Habit names and records are private account data; Habitor does not publish them to other users. We may disclose information when required by law or necessary to address fraud, security incidents, or legal claims.

5. International Data Transfers

Your personal data may be processed in countries other than the country where you live. Where required by applicable law, we will use appropriate safeguards for international transfers.

6. Data Retention

We retain personal data for as long as reasonably necessary to provide Habitor, maintain security, comply with legal obligations, and resolve disputes.

If you delete your account through the in-app deletion flow, we will delete your account data from active systems within a reasonable period, except where limited retention is required for legal, security, fraud-prevention, or backup purposes.

7. Your Choices and Rights

You can edit your profile and supported habit information in the app, disable Habitor notifications in iOS Settings, and delete your account through Me > Settings > Delete Account. Notification permission is optional. Disabling notifications does not delete your account.

Deleting a Habitor account does not cancel an Apple subscription or remove purchase records independently held by Apple. Manage subscription renewals in your Apple Account settings. We retain limited records where needed for legal obligations, security, transaction verification, or backup purposes, and restrict their use to those purposes.

If you contact us about privacy rights or questions, we may request information reasonably necessary to verify your identity before responding.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or request portability of your personal data, and to lodge a complaint with a competent supervisory authority.

8. Whether Data Is Required

Some data is required for Habitor to function, including account authentication data and the data needed to store and sync your habits and records. If you do not provide required data, some parts of Habitor may not function.

Optional profile data, such as a nickname or avatar image, is not required to use the core service.

9. Automated Decision-Making

Habitor does not use solely automated decision-making or profiling that produces legal or similarly significant effects about you.

10. Children

Habitor is not directed to children under 13, and we do not knowingly collect personal data from children under 13. Contact us if you believe a child has provided personal data so we can investigate and delete it where required.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Third-Party Services

Habitor may rely on third-party services, including Apple services. Those third parties have their own terms and privacy practices, and we are not responsible for their independent practices.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through Habitor.

14. Contact

If you have questions about this Privacy Policy or our privacy practices, contact:

YongSheng Wei

Email: [email protected]