Privacy

Effective September 26, 2026 · The Habbits

We collect the minimum needed to run your account and sync your habits. No ads, no tracking, no selling. Everything can be deleted from inside the app.

Without an account

Everything stays on your phone

You can use The Habbits without signing in. Habits, completions, streaks and settings are stored only on your device. We receive nothing.

When you sign in

Account ID
A unique identifier from Apple, Google or Facebook, so we can recognise you across devices.
Name
If the provider shares it. Shown on your profile. You can edit or remove it.
Email
If the provider shares it. Shown on your profile and used to recover your account. With Apple's Hide My Email we receive only the relay address.

We do not receive your password, contacts, friends, posts or anything else from the provider.

What your account stores

Habits
Names, colors, icons, chime, reminder time, retirement dates. Glass · E–B
Completions
Which habit you marked done on which day.
Devices
The name and model of each device that has synced, so you can see them on the Account page.

Stored with Supabase, our hosting provider, in a database where each person can read and write only their own rows.

What we don't do

Ads
None, and no advertising identifiers.
Tracking
No ad trackers and no cross-app tracking. Anonymous usage analytics only, described below.
Sharing
No selling, renting or sharing of your data with third parties for their own purposes.
Sensors
No location, health, contacts, photos or microphone access.

Usage analytics

The app sends anonymous usage events (which screens and actions are used, and crash and hang reports) to PostHog, our analytics provider, tagged with a random id created on this install. Events never include your name, email or habit names, and the id is not linked to your account.

On your device

Notifications
Daily reminders and the weekly summary are scheduled on your device by the app. They never pass through our servers. Control them in Settings and in iOS Settings.
Chimes
Generated on the device. No audio is recorded.

Service providers

Supabase
Hosts the account database and authentication service.
PostHog
Receives the anonymous usage events described above.
Apple, Google, Meta
Sign-in providers. Each has its own privacy policy for what they collect when you use their sign-in.

Keeping and deleting

Your account data is kept while your account exists. Sign Out keeps your habits on that device and leaves your account intact. Delete Account in the app removes your account and all synced habits and completions from our servers, normally immediately and in all cases within 30 days. Data on your device is yours to keep, or to remove by deleting the app.

Your rights

View your data in the app, export it as CSV or JSON from Settings › Data, correct your name on the Account page, and delete everything as described above. If you live somewhere with data-protection rights (the EU, UK or California, for example), those rights apply and you can exercise them by writing to us.

Children

The Habbits is not directed at children under 13 and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we'll remove it.

Security

Data in transit is encrypted with TLS. Database access is restricted per account with row-level security. No system is perfectly secure; if we learn of a breach affecting your data we'll notify you as the law requires.

Changes and contact

If this policy changes in a way that matters, we'll update the date above and let you know in the app. Questions: hello@thehabbits.app.