Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you:

• Account Registration: Email address, name, and account credentials
• Habit Data: Information about habits you track, including habit names, schedules, completion records, and streaks
• Usage Data: Features used, frequency of access, and interaction patterns to improve our service
• Payment Information: Processed securely by Creem (our payment processor). We do not store payment card details
• Communications: Information when you contact support or participate in surveys

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our habit tracking services
• Process payments through our payment provider (Creem)
• Send service-related notifications, including reminders and progress updates
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service
• Respond to your requests for support and customer service

3. Local Storage Priority

HabitQuest prioritizes local data storage whenever possible. Your habit data and preferences are stored locally on your device. Cloud synchronization is optional and only occurs when you explicitly enable it. We believe in giving you control over where your data resides.

4. Cookies and Tracking

We use minimal cookies and tracking technologies:

• Essential Cookies: Required for authentication and session management
• Analytics: Anonymous usage statistics to improve our service (optional, can be disabled)
• Preferences: Remember your settings and display preferences

We do not use third-party advertising cookies or track you across unrelated websites.

5. Data Sharing

We do not sell your personal data. We share information only in the following circumstances:

• Payment Processing: Creem processes transactions securely. They store payment details per their privacy policy
• Service Providers: Trusted vendors for email delivery, cloud hosting, and infrastructure
• Legal Requirements: When required by law, court order, or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets (with notice)

6. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, we remove or anonymize your personal data within 30 days. Some data may be retained longer for legal compliance or fraud prevention purposes.

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your account and associated data
• Portability: Export your data in a machine-readable format
• Object: Object to certain processing activities
• Withdraw Consent: Where processing is based on consent, withdraw at any time

To exercise these rights, contact us at support@habitquest.tech.

8. GDPR Notice for EU Users

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation:

• The legal basis for processing your data is primarily performance of contract (Article 6(1)(b))
• You have the right to lodge a complaint with your local data protection authority
• We designate a data protection officer where required
• Data transfers outside the EEA are protected by appropriate safeguards

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit, secure storage practices, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Contact Information

For privacy-related inquiries, data access requests, or to report a security concern, contact us at:

support@habitquest.tech