Privacy Policy

Last updated: May 23, 2026

This Privacy Policy explains how Habit Tracker ("we", "our", or "us") collects, uses, and protects information when you use our mobile application ("App") and related services.

1. Information We Collect

We collect only the minimum information needed to provide the service:

Email address – used for account authentication via one-time passcode (OTP).
Display name – optional, used to personalise your profile.
Habit data – the habits you create, your completion records, and your preferences (week start day, theme, notification settings). This data is stored locally on your device.
Subscription information – your current plan (Free or Pro) and purchase status, processed through Google Play or the Apple App Store.
Device information – basic device type information used to deliver the correct app experience (e.g. emulator vs. physical device). We do not collect device identifiers.

We do not collect advertising identifiers, location data, contacts, photos, or any other sensitive data.

2. How We Use Your Information

To authenticate you via email OTP and maintain your session.
To associate your subscription plan with your account.
To send transactional emails (OTP codes only — no marketing emails).
To enforce plan limits (e.g. maximum number of habits on the Free plan).

3. Data Storage and Security

Your account information (email, display name, plan) is stored on secure servers hosted by Microsoft Azure (Azure SQL Database, Azure App Service) in the Central India region. Habit data (your daily logs) is stored locally on your device and is not transmitted to our servers.

Emails are sent using Azure Communication Services. OTP codes are hashed before storage and expire after 10 minutes. JWT authentication tokens expire after 60 minutes.

We implement industry-standard security measures including encrypted connections (TLS), hashed credentials, and token-based authentication. No system is perfectly secure, and we cannot guarantee absolute security.

4. Sharing of Information

We do not sell or rent your personal data. We share information only in these limited cases:

Microsoft Azure – cloud infrastructure provider that processes and stores your account data on our behalf.
Google Play / Apple App Store – payment processing for Pro subscriptions. We do not receive your full payment details.
Legal obligations – if required by law, court order, or to protect the rights and safety of users.

5. In-App Purchases

Pro subscriptions and lifetime purchases are processed entirely by Google Play or the Apple App Store. All billing, refund, and payment disputes are governed by their respective terms. We do not store payment card information.

Refund requests for subscriptions should be directed to:

Google Play: support.google.com
Apple App Store: support.apple.com

6. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access – request a copy of the personal data we hold about you.
Correction – request that we correct inaccurate data.
Deletion – request deletion of your account and associated data. You can initiate this by signing out and contacting us.
Data portability – request your data in a portable format.
Objection – object to processing of your data in certain circumstances.

To exercise any of these rights, email us at [email protected].

8. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law. Habit data stored locally on your device is under your full control and is deleted when you uninstall the App.

9. Push Notifications

The App may send local notifications to remind you of your habits. These are generated on your device and do not involve transmitting data to our servers. You can disable notifications at any time through your device settings.

10. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:
[email protected]