Privacy Policy

1. Who we are

HabitFlow is operated by O.K - Studios. This policy explains how we collect, use, store and protect your personal information when you use the HabitFlow mobile and web app.

If you have any questions about this policy or how we handle your data, please contact us at thehabitflowapp@gmail.com.

2. What data we collect

We collect the following information when you create and use an account:

• Account information: email address, password, full name, username, phone number and time zone.
• Habit data: the habits you create, your completion logs (achieved, failed or pass), streak counts, scheduling preferences and any notes you add.
• Social data: friend connections, friend requests and habit shares you choose to make with other users.
• Device tokens: if you opt in, a push notification subscription token is stored so we can send habit reminders to your device.
• Usage data: anonymised app usage statistics and error logs to help us fix bugs and improve performance.

3. How we use your data

We use your data only to provide and improve the app:

• To authenticate you and keep your account secure.
• To store and display your habits, streaks and history.
• To send time-zone-aware reminder notifications you have requested.
• To enable social features such as adding friends and sharing habits.
• To diagnose technical issues and improve reliability.

We do not sell your personal data, show you third-party advertising, or use your data for unrelated profiling.

4. Legal basis for processing

We process your data because it is necessary to perform our contract with you (providing the HabitFlow service) and because you consent to specific features such as push notifications and friend discovery by phone number or email. You can withdraw consent for optional features at any time in Settings or Profile.

5. Where your data is stored

Your data is stored in secure cloud databases and object storage provided by our backend infrastructure partner (Supabase). Data may be processed in the United States and the European Union. We rely on standard contractual clauses and technical safeguards to protect international transfers.

6. Third parties and subprocessors

We use a small number of trusted service providers to run the app:

• Supabase — authentication, database, storage and serverless functions.
• Google — optional Google sign-in and, if you use it, Google OAuth profile data.
• Web Push services — your browser or operating system handles delivery of push notifications; we only store the subscription token needed to send them.

We do not share your habit history, logs or personal content with these providers beyond what is technically required to operate the service.

7. Data retention

We keep your account and habit data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, although anonymised backups may be retained for a short period for disaster recovery before they are permanently erased.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated data.
• Export your data in a commonly used format.
• Object to or restrict certain processing.
• Withdraw consent for optional features.

To exercise any of these rights, email us at thehabitflowapp@gmail.com.

9. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, database row-level security and access controls. No system is completely secure, so we encourage you to use a strong, unique password and keep your device software up to date.

10. Children's privacy

HabitFlow is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify you through the app where reasonably practicable.

12. Contact us

Data controller: O.K - Studios
Email: thehabitflowapp@gmail.com