Privacy Policy

This Privacy Policy explains how HabitGenius ("we," "us," or "our") collects, uses, stores, and protects your information when you use our mobile application (the "App"). We are committed to transparency and protecting your privacy rights under GDPR, CCPA, and other applicable privacy laws.

1. Information We Collect

1.1 Information You Provide Directly

When you use HabitGenius, you create and store the following types of personal data locally on your device:

• Habit Tracking Data: Habit names, completion status, streaks, goals, categories, notes, timestamps, and sub-items/checklists
• Task Data: Task descriptions, due dates, completion status, categories, priority levels, and recurring tasks
• Mood Tracking Data: Mood levels (1-10 scale), mood tags, timestamps, notes, and emotional patterns
• Financial Data: Income and expense transactions, account balances, budget information, categories, recurring transactions, and financial notes (all stored locally)
• Journal Entries: Text content, photos, attachments, tags, and timestamps
• Focus Timer Data: Pomodoro session durations, session types (focus/break), tags, notes, and productivity statistics
• App Settings: Theme preferences (dark/light mode, accent color), notification settings, language preferences, passcode (encrypted), custom categories, and widget configurations

1.2 Automatically Collected Information

We automatically collect limited technical information necessary for app functionality:

• Device Information: Device type, operating system version, app version, device language, and timezone (used for scheduling local notifications and analytics)
• Usage Analytics: App feature usage, screen views, session duration, and interaction patterns (collected anonymously via Firebase Analytics in production mode only)
• Crash Reports: Error logs and crash data (collected via Sentry for debugging and app stability improvements)
• Purchase Information: Subscription status and purchase receipts (processed through Apple App Store or Google Play Store and managed by RevenueCat)

1.3 Information We DO NOT Collect

• ❌ We do not require you to create an account or provide an email address (email only collected if you sign in to Google Drive for cloud backup)
• ❌ We do not collect your name, phone number, or contact information
• ❌ We do not track your location or GPS data
• ❌ We do not access your contacts, call logs, or SMS messages
• ❌ We do not collect data from other apps on your device
• ❌ We do not use advertising IDs or serve third-party advertisements

2. How We Use Your Information

2.1 Primary Uses (Local Processing)

Your personal data is used exclusively for providing app functionality:

• Habit Tracking: Calculate streaks, generate statistics, provide progress insights, and track sub-items/checklists
• Local Notifications: Send device-based reminders for habits, tasks, and focus sessions (not push notifications from servers)
• Analytics: Display your personal statistics, charts, heatmaps, and progress trends within the app
• Widgets: Display quick action buttons and app data on your device home screen
• Cloud Backups (Optional, Premium only): Sync your data to iCloud (iOS) or Google Drive (Android) only if you enable cloud backup in settings
• Local Backups: Generate encrypted .hg backup files for manual export/import
• CSV Export: Generate CSV files of expense transactions when you request data export

2.2 Anonymous Analytics

We use Firebase Analytics and Sentry to collect anonymous usage data for:

• Understanding which features are most used to prioritize improvements
• Identifying and fixing bugs and crashes
• Measuring app performance and load times
• Improving user experience based on aggregated, anonymized patterns

Note: Analytics data is anonymized and cannot be linked back to your personal habit, mood, or financial data. Analytics are only active in production builds, not during development.

2.3 Subscription Management

We use RevenueCat to manage in-app subscriptions. RevenueCat processes:

• Anonymous device identifiers to track subscription status
• Purchase receipts from Apple/Google to verify subscriptions
• Subscription tier (Free vs. Premium) to unlock premium features including cloud backup, statistics, widgets, and unlimited tracking

3. Data Storage and Security

3.1 Local Storage (Default)

By default, 100% of your personal data is stored locally on your device using:

• MMKV Storage: Encrypted key-value storage for fast access and security
• iOS Keychain / Android Keystore: Biometric authentication data and passcode storage
• Local File System: Journal photos and attachments stored in app's private directory

We cannot access, view, or retrieve data stored locally on your device.

3.2 Cloud Backup (Optional, Premium Feature)

If you subscribe to Premium and enable cloud backup in settings, your data can be synced to:

Platform	Service	What's Backed Up	Encryption
iOS	iCloud (CloudKit)	Habits, tasks, moods, expenses, journal entries (with media), focus sessions, settings	Stored in iCloud, managed by Apple
Android & iOS	Google Drive	Habits, tasks, moods, expenses, journal entries (with media), focus sessions, settings	Encrypted with CryptoJS before upload, stored in appDataFolder

Important: Cloud backups are:

• Optional and disabled by default (requires Premium subscription)
• Stored in your personal iCloud or Google Drive account
• Accessible only by you through your Google/Apple credentials
• Can be set to auto-backup once per day on app launch
• Can be manually triggered or disabled at any time in Settings → Backup

We do not have access to your cloud storage or backup files. You control when backups occur and can disable cloud sync at any time.

3.3 Local Backup Files

Free and Premium users can create local backup files:

• Encrypted .hg files stored in Downloads (Android) or On My iPhone/HabitGenius (iOS)
• Includes all data except journal media files
• Can be manually exported and imported for device transfers

3.4 Security Measures

We implement industry-standard security practices:

• Encryption: All sensitive data (passcode, biometric data) is encrypted using iOS Keychain and Android Keystore
• Passcode Protection: Optional PIN code (5 max attempts) with biometric authentication (Face ID, Touch ID, Fingerprint)
• No Account System: No passwords to leak, no user accounts to hack (email only collected for Google Drive backup)
• HTTPS/TLS: All network communications use industry-standard encryption
• Regular Updates: Security patches and updates delivered through App Store and Google Play

4. Data Sharing and Third-Party Services

4.1 Third-Party Services We Use

HabitGenius integrates with the following trusted third-party services:

Service	Purpose	Data Shared	Privacy Policy
RevenueCat	Subscription management	Anonymous device ID, purchase receipts, subscription status	View Policy
Firebase Analytics	Anonymous usage analytics	Device type, OS version, app version, anonymous usage events (production only)	View Policy
Sentry	Error tracking and crash reporting	Crash logs, device information, app version, error stack traces	View Policy
Apple iCloud	Cloud backup (iOS only, optional Premium feature)	All app data when backup is enabled	View Policy
Google Drive	Cloud backup (Android & iOS, optional Premium feature)	All app data when backup is enabled (encrypted)	View Policy

4.2 No Selling or Sharing for Marketing

We do NOT:

• ❌ Sell your personal data to third parties
• ❌ Share your data with advertisers or marketing companies
• ❌ Use your data for targeted advertising
• ❌ Share your data with data brokers or analytics companies (beyond anonymous Firebase Analytics)

4.3 Legal Requirements

We may disclose limited information if required by law:

• In response to valid legal processes (court orders, subpoenas)
• To protect our rights, property, or safety
• To prevent fraud or security issues
• In connection with a merger, acquisition, or sale of assets (with user notification)

5. Your Privacy Rights

5.1 Access and Control (GDPR, CCPA Compliance)

You have the following rights regarding your data:

• Right to Access: View all your data within the app at any time
• Right to Export: Export expense transaction data to CSV format (Settings → Backup & Export)
• Right to Backup: Create encrypted local backup files (.hg format) containing all your data
• Right to Delete: Delete individual habits, moods, expenses, journal entries, focus sessions, tasks, categories, and other items within the app
• Right to Portability: Export data in CSV format or encrypted backup files for transfer to other services
• Right to Rectification: Edit or update any data within the app at any time
• Right to Withdraw Consent: Disable cloud backup, unsubscribe from Premium, or uninstall the app at any time

5.2 Manage Your Data

To exercise your privacy rights:

1. Disable Cloud Backup: Settings → Backup → Turn off iCloud/Google Drive auto-backup (Premium feature)
2. Export Expense Data: Settings → Backup & Export → Export transactions to CSV
3. Create Local Backup: Settings → Backup → Create encrypted .hg backup file
4. Delete Individual Items: Long-press or swipe on any habit, mood, expense, journal entry, or task to delete it
5. Uninstall App: Deleting the app removes all local data permanently from your device

Note on Analytics: Firebase Analytics runs automatically in production builds to help us improve the app. Analytics data is anonymous and cannot be linked to your personal data. If you wish to opt out of analytics entirely, please contact us at habitgenius1997@gmail.com.

5.3 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under CCPA:

• Right to know what personal information is collected (see Section 1 above)
• Right to know if personal information is sold or disclosed (we do not sell data)
• Right to say no to the sale of personal information (not applicable - we don't sell data)
• Right to delete personal information (delete individual items or uninstall app)
• Right to non-discrimination for exercising CCPA rights

5.4 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under GDPR:

• Right to access your personal data (view all data in app)
• Right to rectification of inaccurate data (edit any data in app)
• Right to erasure ("right to be forgotten" - delete individual items or uninstall app)
• Right to restrict processing (disable cloud backup)
• Right to data portability (export CSV or backup files)
• Right to object to processing (contact us to disable analytics)
• Right to withdraw consent at any time (disable features or uninstall)

6. Children's Privacy

HabitGenius is intended for users aged 13 years and older. We do not knowingly collect personal information from children under 13 years of age. The app does not include age verification, and we rely on parents and guardians to supervise children's use of mobile devices.

If you believe we have collected information from a child under 13, please contact us immediately at habitgenius1997@gmail.com, and we will take steps to address your concerns.

For users aged 13-16 in the EEA, we obtain parental consent where required by GDPR.

7. International Data Transfers

HabitGenius is developed and operated in India. If you use the app from outside India, your data remains on your local device unless you enable cloud backup (Premium feature).

For users who enable cloud backup:

• iCloud users: Data is stored in your iCloud account, managed by Apple according to their data transfer policies
• Google Drive users: Data is encrypted and stored in your Google Drive account, managed by Google according to their data transfer policies
• Analytics data: Anonymous Firebase Analytics and Sentry data may be transferred to servers in the United States

For users in the EEA, we ensure adequate safeguards are in place for data transfers, including:

• Reliance on explicit user consent for cloud backup transfers
• Use of service providers (Google, Apple) certified under privacy frameworks
• Data minimization - only necessary analytics data is collected

8. Data Retention

We retain your data according to the following principles:

• Local Data: Retained indefinitely on your device until you delete individual items or uninstall the app
• Cloud Backups: Retained in your iCloud/Google Drive until you delete them, disable backup, or delete your cloud account
• Analytics Data: Anonymous analytics data retained for 14 months (Firebase default)
• Crash Reports: Retained for 90 days for debugging purposes (Sentry default)
• Subscription Data: Retained by RevenueCat for the duration of your subscription plus 1 year for refund/dispute resolution

Deletion: When you delete individual items within the app, they are permanently removed from local storage. When you uninstall the app, all local data is permanently deleted. Cloud backups must be deleted separately from your iCloud or Google Drive account.

9. Cookies and Tracking Technologies

HabitGenius is a native mobile app and does not use cookies. We use the following tracking technologies:

• Analytics SDKs: Firebase Analytics SDK for anonymous usage tracking (active in production builds only)
• Crash Reporting SDK: Sentry SDK for error tracking and crash reports
• Device Identifiers: Anonymous device IDs for analytics and subscription management

We do not use advertising IDs (IDFA/GAID) or track you across other apps or websites.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last updated" date at the top of this policy
• We will notify you via in-app notification if changes are material
• Continued use of the app after changes constitutes acceptance of the updated policy
• You can review the full history of changes on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

11. How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: habitgenius1997@gmail.com
Website: habit-genius.netlify.app
Response Time: We will respond to privacy-related inquiries within 30 days

For GDPR-related requests (EEA residents):
You may submit Data Subject Access Requests (DSARs) to habitgenius1997@gmail.com with the subject line "GDPR Request."

For CCPA-related requests (California residents):
You may submit requests to know, delete, or opt-out to habitgenius1997@gmail.com with the subject line "CCPA Request."

12. Additional Information for Specific Regions

12.1 India (DPDP Act Compliance)

For users in India, we comply with the Digital Personal Data Protection Act, 2023:

• We process your data based on your consent (by using the app and enabling features like cloud backup)
• You have the right to withdraw consent at any time by disabling features or uninstalling the app
• You can nominate a person to exercise your rights in case of death or incapacity
• Data Principal rights include access, correction, erasure, and grievance redressal

12.2 Australia (Privacy Act Compliance)

For users in Australia, we comply with the Australian Privacy Principles (APPs):

• We handle personal information in accordance with the Privacy Act 1988
• You can access and correct your personal information at any time within the app
• You may submit privacy complaints to habitgenius1997@gmail.com

12.3 Brazil (LGPD Compliance)

For users in Brazil, we comply with Lei Geral de Proteção de Dados (LGPD):

• We process your data based on your consent and for legitimate purposes
• You have rights to access, correct, delete, and port your data
• You can revoke consent at any time by disabling features or uninstalling the app

13. App Store and Google Play Compliance

This app complies with:

• Apple App Store Guidelines: We follow Apple's privacy requirements including Privacy Nutrition Labels
• Google Play Store Policies: We comply with Google Play's Data Safety section requirements and user data policies

App Store Privacy Labels (iOS): See our App Store listing for detailed privacy labels.

Data Safety Section (Android): See our Google Play listing for data safety information.

---