Privacy Policy – Android App

Last updated: 10/31/2026

1. Introduction

Welcome to Habits AI ("we", "our", "us"). We value your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Android mobile application and related services (collectively, the "Service").

By using Habits AI, you agree to this Privacy Policy. If you do not agree, please stop using the app.

2. Data Controller

Controller:

Habits AI

United Kingdom

📧 Email: habitsai.app@gmail.com

We operate under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and Google Play Store policies.

3. Data We Collect

We only collect the data necessary to provide a secure and personalized experience.

3.1 Account & Authentication Data

  • Email address and password (via Base44/Supabase authentication)
  • Optional profile information (username or display name)

3.2 App Usage Data

  • Habits you create, mood logs, diary entries, and activity timestamps
  • Optional self-input data such as energy levels or journal notes
  • Technical data (Android version, device type, app version)

3.3 Payment Information

  • When subscribing via Google Play Billing, limited payment-related data is processed securely
  • We do not store your full payment details

3.4 Analytics & Diagnostics

  • Anonymous app crash logs and performance data via Firebase Crashlytics
  • No personally identifying information is included in crash reports
Android-Specific Permissions

Our Android app may request the following permissions:

  • Internet Access: To sync your data and provide online features
  • Storage: To save your data locally on your device
  • Notifications: To send habit reminders and updates
  • Camera: To allow photo attachments in diary entries (optional)

All permissions are clearly explained when requested, and you can revoke them at any time through your device settings.

4. How We Use Your Data

We process your data for legitimate business and operational reasons, including:

  • To create and manage your account
  • To deliver habit tracking, analytics, and personalized insights
  • To process in-app purchases through Google Play Billing
  • To send push notifications for habit reminders
  • To respond to customer support inquiries
  • To improve app performance and reliability
  • To comply with legal and tax obligations

Legal bases (GDPR):

  • Contract performance (Art. 6(1)(b))
  • Legitimate interest (Art. 6(1)(f))
  • Legal obligation (Art. 6(1)(c))
  • Consent (Art. 6(1)(a)) when applicable (e.g., analytics opt-in)
5. Data Sharing

We only share data with trusted third-party processors necessary to operate the Service:

ServicePurposeLocation
Base44 / SupabaseDatabase, authentication, and backend hostingEU / US
Google Play BillingIn-app payment processingGlobal
Firebase CrashlyticsCrash and performance analyticsEU / US
Google Play ServicesApp functionality and updatesGlobal

All partners are bound by Data Processing Agreements and comply with GDPR data protection standards.

6. International Transfers

Data may be processed outside your country of residence (e.g., by Google or Firebase). We ensure adequate safeguards, such as Standard Contractual Clauses (SCCs), are in place for international data transfers.

7. Data Retention

We retain personal data only for as long as necessary to:

  • Provide your account and service access
  • Fulfil legal, tax, or contractual obligations
  • Improve user experience

If you delete your account, all associated personal data will be permanently removed from our active systems (except where legally required to retain certain records).

8. Your Rights (GDPR / UK GDPR)

You have the following rights:

Access
Request a copy of your data
Rectification
Correct inaccurate data
Erasure
Request deletion of your data
Restriction
Limit processing in certain cases
Portability
Receive data in a machine-readable format
Objection
Opt out of certain processing (e.g., analytics)
Withdraw Consent
Revoke previously given consent at any time

You can exercise your rights by contacting habitsai.app@gmail.com.

If you are unsatisfied with our response, you may contact the Information Commissioner's Office (ICO):https://ico.org.uk

9. Security

We implement appropriate technical and organizational measures to secure your data:

  • End-to-end encryption for data transmission
  • Local data encryption on your Android device
  • Secure authentication using industry standards
  • Regular security updates and patches
  • Compliance with Google Play Store security requirements

No online service is 100% secure, but we continually improve our systems to minimize risks.

10. Children's Privacy

Our Service is not intended for children under 16 years old. We do not knowingly collect or store information from minors.

11. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date reflects the latest revision. Material changes will be communicated via email or in-app notice.

12. Contact Us

If you have any questions about this Privacy Policy or your personal data:

📧 Email: habitsai.app@gmail.com

🏢 Address: United Kingdom

🌍 Website: https://habitsai.org/