Privacy Policy – Web Version
Last updated: 9/4/2026
This is the Web version of our Privacy Policy
Welcome to Habits AI ("we", "our", "us"). We value your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our web application and related services (collectively, the "Service").
By using Habits AI, you agree to this Privacy Policy. If you do not agree, please stop using the service.
Controller:
Habits AI
United Kingdom
📧 Email: habitsai.app@gmail.com
We operate under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We only collect the data necessary to provide a secure and personalized experience.
3.1 Account & Authentication Data
- Email address and password (via Base44/Supabase authentication)
- Optional profile information (username or display name)
3.2 App Usage Data
- Habits you create, mood logs, diary entries, and activity timestamps
- Optional self-input data such as energy levels or journal notes
- Technical data (browser type, device type, operating system)
3.3 Payment Information
- When subscribing via Stripe, limited payment-related data is processed securely
- We do not store your full card or payment details
3.4 Analytics & Diagnostics
- Anonymous app crash logs and performance data via Firebase Crashlytics
- No personally identifying information is included in crash reports
We process your data for legitimate business and operational reasons, including:
- To create and manage your account
- To deliver habit tracking, analytics, and personalized insights
- To process subscriptions and payments
- To respond to customer support inquiries
- To improve app performance and reliability
- To comply with legal and tax obligations
Legal bases (GDPR):
- Contract performance (Art. 6(1)(b))
- Legitimate interest (Art. 6(1)(f))
- Legal obligation (Art. 6(1)(c))
- Consent (Art. 6(1)(a)) when applicable (e.g., analytics opt-in)
We only share data with trusted third-party processors necessary to operate the Service:
| Service | Purpose | Location |
|---|---|---|
| Base44 / Supabase | Database, authentication, and backend hosting | EU / US |
| Stripe Payments Europe, Ltd. | Secure web payment processing | EU |
| Firebase Crashlytics | Crash and performance analytics | EU / US |
All partners are bound by Data Processing Agreements and comply with GDPR data protection standards.
Data may be processed outside your country of residence (e.g., by Stripe or Firebase). We ensure adequate safeguards, such as Standard Contractual Clauses (SCCs), are in place for international data transfers.
We retain personal data only for as long as necessary to:
- Provide your account and service access
- Fulfil legal, tax, or contractual obligations
- Improve user experience
If you delete your account, all associated personal data will be permanently removed from our active systems (except where legally required to retain certain records).
You have the following rights:
You can exercise your rights by contacting habitsai.app@gmail.com.
If you are unsatisfied with our response, you may contact the Information Commissioner's Office (ICO):https://ico.org.uk
We implement appropriate technical and organizational measures to secure your data:
- HTTPS encryption for all network communications
- Salted and hashed passwords (via Supabase authentication)
- Encrypted storage of sensitive data
- Access restricted to authorized personnel only
No online service is 100% secure, but we continually improve our systems to minimize risks.
Our Service is not intended for children under 16 years old. We do not knowingly collect or store information from minors.
We may update this Privacy Policy periodically. The "Last Updated" date reflects the latest revision. Material changes will be communicated via email or in-app notice.
If you have any questions about this Privacy Policy or your personal data:
📧 Email: habitsai.app@gmail.com
🏢 Address: United Kingdom
🌍 Website: https://habitsai.org/