Privacy Policy

Key Points

• Privacy-First: We do not collect your habit data. Everything stays on your device.
• Optional Sync: If you choose to sync with Google Drive, the data is encrypted on your device. We cannot read it.
• Health Data (Optional): If you choose to link a habit to Apple Health or Health Connect, Habitt reads that data on your device only to update your habit progress. It is never sent to us or anyone else, never used for ads, and never written back.
• No Analytics/Ads: We don’t track your behavior or show ads.
• Voluntary Support: Payments are handled securely by Apple, Google, and RevenueCat.

FULL PRIVACY POLICY

Effective Date: May 9, 2026

1. INTRODUCTION
Habitt ("the App") is published by ThinkingApp (Legal Entity: Ibrahim Bećirović), based in Pordenone, Italy. We are committed to a "privacy-by-design" approach. This policy explains how we handle the very limited data involved in your use of the App.

2. DATA CONTROLLER
Under the GDPR, ThinkingApp is the Data Controller. However, because we do not host your habit data on our servers, we have no access to your personal content.

3. DATA WE DO NOT COLLECT
We do not collect or store:

• Your habit names, logs, or schedules.
• Your location or IP address.
• Technical telemetry or usage analytics.
• Your health and fitness data. Habitt can read it from Apple Health or Health Connect on your device (see Section 5), but it never leaves your device through us.

4. OPTIONAL DATA PROCESSING

• Cloud Sync: If you enable Google Drive sync, the App requests access to your Google Drive to create a backup file. All data is encrypted locally on your device before transfer. We do not hold the encryption keys and cannot access this data.
• Authentication: We use Firebase Authentication solely to facilitate the connection between the App and your Google account.
• Payments: If you choose a voluntary subscription, processing is handled by Apple App Store/Google Play Store and RevenueCat. We see only a transaction ID and subscription status; we never see your credit card details.

5. HEALTH DATA (APPLE HEALTH & HEALTH CONNECT)
Habitt offers an optional feature that lets you link individual habits to health and fitness data stored on your phone, either in Apple Health (iOS) or Health Connect (Android). This feature is entirely opt-in: Habitt asks for access only when you link a habit to a health metric (or accept the in-app offer to do so for a premade habit), and you can decline or revoke access at any time.

• What we access (read-only): Depending on the habit you link, steps, sleep (including sleep and wake times), exercise minutes, workouts (type, start and end time, duration), mindful minutes, and active or total calories burned. On Android, Habitt also requests the Activity Recognition permission, which Health Connect's step data relies on. Habitt only reads the metrics you link to a habit.
• Why we access it: Solely to fill in your habit progress automatically, for example marking a "10,000 steps" or "sleep 8 hours" habit as complete without manual entry, and to show that habit's progress, history and streaks inside the App. This is the only purpose.
• How it is handled: Health data is read on your device when you open or resume the App, and the resulting progress values are stored locally in the App, like any other habit entry. Habitt never writes data to Apple Health or Health Connect.
• What we do not do: We do not transmit health data to our servers, sell it, share it with third parties, or use it for advertising, marketing, profiling, credit or insurance decisions, or analytics. We do not use it to train AI or machine-learning models.
• Backups: If you enable Google Drive or iCloud backup, or create a local backup file, the progress stored in your habits is included in that backup. Cloud backups are encrypted on your device before upload, and we cannot read them.
• Your control: You can unlink a habit from health data at any time in the habit's settings, and you can withdraw access in Apple Health (Settings > Health > Data Access & Devices) or Health Connect (Settings > Health Connect > App permissions). Deleting the App or using "Wipe All Data" removes all locally stored progress. Data inside Apple Health or Health Connect itself remains under your control there.
• Compliance: Habitt's use of information received from Health Connect adheres to the Google Play User Data Policy, including the Limited Use requirements. Habitt's use of Apple HealthKit data complies with Apple's HealthKit guidelines: it is used only to provide the health and fitness features described above, and is not stored in iCloud or shared with third parties.

6. LEGAL BASIS (GDPR)
We process data based on:

• Consent: When you choose to link your Google Drive, and, for health data (a special category of data under Article 9 GDPR), your explicit consent when you grant Habitt access to Apple Health or Health Connect. You can withdraw it at any time by revoking access.
• Contract: To fulfill your voluntary subscription purchase.

7. DATA RETENTION & DELETION

• Local Data: You may delete your data at any time by uninstalling the App or using the "Wipe All Data" button within settings.
• Cloud Data: You can delete your sync file directly from your Google Drive.

8. THIRD-PARTY PROVIDERS
We use the following processors:

• Google (Firebase/Drive): For authentication and storage.
• RevenueCat: For managing subscription status.
• Apple/Google: For payment processing.

9. CHILDREN’S PRIVACY
The App is not marketed to children under 13. Given our local-only nature, we do not knowingly collect personal data from children.

10. CONTACT
For privacy inquiries, contact: ibrsboy32@proton.me.