Privacy

Effective October 6, 2026 · The Habbits

We collect the minimum needed to run the app, your account and sync. No ads, no ad tracking, no selling. Everything except a record that your account existed can be deleted from inside the app.

Without an account

Your habits stay on your phone

You can use The Habbits without signing in. Habits, completions, streaks and settings are stored only on your device. What leaves it is anonymous usage analytics, which you can turn off, and the install record behind feature tips, both described below.

When you sign in

Account ID
A unique identifier from Apple or Google, so we can recognise you across devices.
Name
If the provider shares it. Shown on your profile. You can edit or remove it.
Email
If the provider shares it. Shown on your profile and used to recover your account. With Apple's Hide My Email we receive only the relay address.

We do not receive your password, contacts, friends, posts or anything else from the provider.

What your account stores

Habits
Names, colors, icons, chime, reminder time, retirement dates. Glass · E–B
Completions
Which habit you marked done on which day.
Devices
The name and model of each device that has synced, so you can see them on the Account page.
Duet
Duet needs an account. If you pair with someone, we store the pairing, which of your habits you linked, your time zone (for quiet hours) and a push token for each device, so we can send the other person a notice. Your partner sees your name, the names of the linked habits and whether each is done today. Nothing else.

Stored with Supabase, our hosting provider, in a database where each person can read and write only their own rows.

What we don't do

Ads
None, and no advertising identifiers.
Tracking
No ad trackers and no cross-app tracking. Anonymous usage analytics only, described below.
Sharing
No selling, renting or sharing of your data with third parties for their own purposes.
Sensors
No location, health, contacts or microphone access.
Photos
Only when you tap Save to Photos on your month mosaic, the app asks to add that image to your library. It can add; it can't see your photos. A profile photo you pick stays on your phone and isn't uploaded.

Usage analytics

With or without an account, the app sends anonymous usage events (which screens and actions are used, and crash and hang reports) to PostHog, our analytics provider, tagged with a random id created on this install. Events never include your name, email or habit names, and the id is not linked to your account. It's on by default; turn it off in Settings › Data › Privacy with Help improve Habbits, and nothing more is sent.

This website

This website uses PostHog to count page views, without cookies and without storing anything in your browser. For each page view it receives the page address (without anything after a “?”), the website you came from, any campaign tags in the link, whether the visit came from an AI assistant such as ChatGPT or Claude, whether you clicked a link to the App Store, and a random id made for that one page view and kept nowhere. We do not build profiles, and we turn off location lookup and ask PostHog not to keep your network address. If your browser sends Do Not Track or Global Privacy Control, nothing is sent. Invite pages (Duet) are never counted. This is a separate PostHog project from the app’s usage analytics. Added October 6, 2026.

Feature tips

Habbits may occasionally show a tip about one of its features in the app, and, if you allow notifications from the reminder prompt, send one as a notification. To pick a tip that fits and reach the right phone, we keep a record for this install: a random id created on this install (never your account, and not the analytics id), your app language, region and time zone, app version, whether you're signed in, whether notifications are allowed, a count of your perfect days and, once notifications are allowed, the push token. We also note which tips were shown or opened. To stop abuse, the server keeps a one-way scrambled form of your network address for a day; the address itself is never stored. Tap No more tips on any tip and we stop sending them to that device.

On your device

Notifications
Daily reminders and the weekly summary are scheduled on your device by the app. They never pass through our servers. Duet notices and feature tips are the exception: they go from our server to the phone through Apple's push service. Control them in Settings and in iOS Settings.
Chimes
Generated on the device. No audio is recorded.

Feedback

Feedback to creators in Settings sends what you type, its category, and your app version, iOS version, device model and language. If you're signed in it carries your account ID; if you turn on Let us reply, the email you enter. It works without an account.

Service providers

Supabase
Hosts the account database, the feature-tips install record and the authentication service.
PostHog
Receives the anonymous usage events from the app and, in a separate project, anonymous page views from this website, as described above.
Resend
Delivers each feedback message to our inbox by email.
Apple
Delivers Duet notices and feature tips through its push notification service.
Apple, Google
Sign-in providers. Each has its own privacy policy for what they collect when you use their sign-in.

Keeping and deleting

Your account data is kept while your account exists. Sign Out first sends any changes that haven't synced to your account (and warns you if it can't), then clears your habits from that phone and returns it to a fresh first launch. Your account and its habits stay intact, ready when you sign back in. Delete Account on the Account page removes your account and all synced habits, completions, devices and any Duet pairing from our servers right away, and clears that phone too. We keep only a record that the account existed: its email address, the sign-in provider and the date it was deleted. Without an account, your data is on your device only; deleting the app removes it. See Delete your data.

Your rights

View your data in the app, export it as CSV or JSON from Settings › Data, correct your name on the Account page, and delete everything as described above. If you live somewhere with data-protection rights (the EU, UK or California, for example), those rights apply and you can exercise them by writing to us.

Children

The Habbits is not directed at children under 13 and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we'll remove it.

Security

Data in transit is encrypted with TLS. Database access is restricted per account with row-level security. No system is perfectly secure; if we learn of a breach affecting your data we'll notify you as the law requires.

Changes and contact

The Habbits app and this site are run by CBPS Technology Ltd ("The Habbits"), which is responsible for your data under this policy. If this policy changes in a way that matters, we'll update the date above and let you know in the app. Questions: hello@thehabbits.app, or see Support.