Privacy
We collect the minimum needed to run the app, your account and sync. No ads, no ad tracking, no selling. Everything except a record that your account existed can be deleted from inside the app.
Without an account
You can use The Habbits without signing in. Habits, completions, streaks and settings are stored only on your device. What leaves it is anonymous usage analytics, which you can turn off, and the install record behind feature tips, both described below.
When you sign in
We do not receive your password, contacts, friends, posts or anything else from the provider.
What your account stores
Stored with Supabase, our hosting provider, in a database where each person can read and write only their own rows.
What we don't do
Usage analytics
With or without an account, the app sends anonymous usage events (which screens and actions are used, and crash and hang reports) to PostHog, our analytics provider, tagged with a random id created on this install. Events never include your name, email or habit names, and the id is not linked to your account. It's on by default; turn it off in Settings › Data › Privacy with Help improve Habbits, and nothing more is sent.
This website
This website uses PostHog to count page views, without cookies and without storing anything in your browser. For each page view it receives the page address (without anything after a “?”), the website you came from, any campaign tags in the link, whether the visit came from an AI assistant such as ChatGPT or Claude, whether you clicked a link to the App Store, and a random id made for that one page view and kept nowhere. We do not build profiles, and we turn off location lookup and ask PostHog not to keep your network address. If your browser sends Do Not Track or Global Privacy Control, nothing is sent. Invite pages (Duet) are never counted. This is a separate PostHog project from the app’s usage analytics. Added October 6, 2026.
Feature tips
Habbits may occasionally show a tip about one of its features in the app, and, if you allow notifications from the reminder prompt, send one as a notification. To pick a tip that fits and reach the right phone, we keep a record for this install: a random id created on this install (never your account, and not the analytics id), your app language, region and time zone, app version, whether you're signed in, whether notifications are allowed, a count of your perfect days and, once notifications are allowed, the push token. We also note which tips were shown or opened. To stop abuse, the server keeps a one-way scrambled form of your network address for a day; the address itself is never stored. Tap No more tips on any tip and we stop sending them to that device.
On your device
Feedback
Feedback to creators in Settings sends what you type, its category, and your app version, iOS version, device model and language. If you're signed in it carries your account ID; if you turn on Let us reply, the email you enter. It works without an account.
Service providers
Keeping and deleting
Your account data is kept while your account exists. Sign Out first sends any changes that haven't synced to your account (and warns you if it can't), then clears your habits from that phone and returns it to a fresh first launch. Your account and its habits stay intact, ready when you sign back in. Delete Account on the Account page removes your account and all synced habits, completions, devices and any Duet pairing from our servers right away, and clears that phone too. We keep only a record that the account existed: its email address, the sign-in provider and the date it was deleted. Without an account, your data is on your device only; deleting the app removes it. See Delete your data.
Your rights
View your data in the app, export it as CSV or JSON from Settings › Data, correct your name on the Account page, and delete everything as described above. If you live somewhere with data-protection rights (the EU, UK or California, for example), those rights apply and you can exercise them by writing to us.
Children
The Habbits is not directed at children under 13 and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we'll remove it.
Security
Data in transit is encrypted with TLS. Database access is restricted per account with row-level security. No system is perfectly secure; if we learn of a breach affecting your data we'll notify you as the law requires.
Changes and contact
The Habbits app and this site are run by CBPS Technology Ltd ("The Habbits"), which is responsible for your data under this policy. If this policy changes in a way that matters, we'll update the date above and let you know in the app. Questions: hello@thehabbits.app, or see Support.