Privacy Policy
How Habitix collects, uses, and protects your data. Last updated 2026.
Who we are
Habitix is an independently developed, early-access habit-tracking application. This policy explains what data we collect when you use the app, why we collect it, and what control you have over it.
Information we collect
Account information: your email address, display name, and avatar. Activity data: the habits you create, your completions, streaks, XP, and stats. Support data: messages you send us and any replies. Technical data: IP address (used only to rate-limit abuse on public forms), and device/browser information needed to deliver push notifications. If you enable push notifications, we store your browser's push subscription details. We never collect more than what's needed to run Habitix, and we don't collect payment information — the service is currently free.
How we use your information
To operate your account and its features (stats, streaks, leagues, achievements), to send notifications you've explicitly opted into, to respond to support requests, to detect and prevent abuse, and to fix bugs and improve the product. We do not use your data to serve you ads, and we never sell or rent it to third parties.
Third-party services we use
We rely on a small number of infrastructure providers to run the app: Supabase (database, authentication, and file storage), Vercel (application hosting), and standard web push services (Google/Mozilla/Apple push infrastructure) to deliver notifications you've enabled. These providers process data on our behalf under their own security and privacy commitments; we don't share your data with anyone beyond what's needed to run the service.
How we protect your data
Data is stored with reputable infrastructure providers using industry-standard security practices, including encryption in transit (HTTPS) and at rest. Passwords are never stored in plain text — authentication and password hashing are handled by Supabase Auth. Access to production data is restricted to the developer and gated behind admin-only, audited database functions.
Cookies & similar technology
We use a session cookie strictly to keep you signed in, and, if you opt in, a local flag to remember notification and onboarding preferences. We don't use third-party advertising or cross-site tracking cookies.
Your rights & control
You can view and edit your profile at any time from Settings. You can export or request a copy of your data by contacting us through Support. You can permanently delete your account and all associated data (habits, completions, stats, support history) at any time from Settings — this action is irreversible and takes effect immediately. If you're in a region with specific data-protection rights (such as the EU/UK GDPR or California's CCPA), those rights apply to you and we'll honor requests to access, correct, or erase your data on request.
Data retention
We keep your data for as long as your account remains active. When you delete your account, your personal data is removed from our active database within a reasonable time; anonymized, aggregate usage statistics that can't identify you may be retained for product analytics.
International data transfers
Our infrastructure providers may process and store data in regions outside your own country. By using the app, you consent to your data being processed in those locations, which maintain security standards consistent with this policy.
Children's privacy
Habitix is not directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child has created an account without appropriate consent, contact us and we'll remove it promptly.
Changes to this policy
If this policy changes in a meaningful way, we'll update this page and adjust the date above, and where appropriate notify you in-app. Continued use of the app after a change means you accept the updated policy.
Contact
Questions about your data or this policy? Sign in and reach us through the in-app Support page — we read and reply to every message personally.