Privacy Policy | Habit Goals

1. Introduction

Habit Goals ("we", "our", or "the service") is a habit-tracking web application. This Privacy Policy explains what data we collect, how we use it, where it is stored, and what rights you have.

2. Data we collect

Account data: When you sign up, we collect your email address. Authentication is handled by Supabase Auth.
Usage data: The habits you create, the goals you set, and the activity logs (dates, duration) you enter. This data is stored in our database (Supabase) and is necessary to provide the service.
Payment data: If you subscribe to Pro, payment is processed by Lemon Squeezy. We do not store your card details. We receive and store your subscription status and related identifiers (e.g. subscription ID) so we can grant Pro features.
Technical data: Session cookies are used to keep you logged in. We may collect basic request data (e.g. for error logging or analytics if we add them later).

3. How we use your data

We use your data to:

Provide and maintain the Habit Goals service (dashboard, habits, goals, streaks, progress).
Authenticate you and manage your account.
Process subscriptions and manage Pro access via Lemon Squeezy.
Respond to support or legal requests when necessary.
Improve the service (e.g. fixing bugs, analyzing usage in an aggregated way if we use analytics).

4. Where your data is stored

Your account and habit data are stored on Supabase (infrastructure may be in regions chosen by Supabase). Payment and subscription data are processed and stored by Lemon Squeezy in accordance with their privacy policy. We do not sell your personal data to third parties.

5. Cookies

We use session and authentication cookies so you can stay logged in. These are essential for the service. If we add non-essential cookies (e.g. analytics), we will update this policy and, where required, ask for your consent.

6. Data retention

We keep your account and habit data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data in line with our data retention practices and applicable law. Subscription and payment records may be retained longer for legal and accounting purposes (e.g. tax).

7. Your rights

Depending on where you live, you may have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Ask us to correct inaccurate data.
Deletion: Request deletion of your account and associated data (we will do this subject to legal obligations).
Export: Pro users can export their habits, logs, and goals as CSV from the Profile page.
Object or restrict processing: In certain cases, you may object to or request restriction of processing.

To exercise these rights, contact us (see Contact below). If you are in the EEA/UK, you also have the right to lodge a complaint with a supervisory authority.

8. Security

We use industry-standard practices (e.g. HTTPS, secure authentication, limited access to data) to protect your data. No system is 100% secure; we will notify you of any significant breach where required by law.

9. Children

The service is not directed at children under 13 (or higher age in your jurisdiction). We do not knowingly collect data from them. If you believe we have collected such data, please contact us so we can delete it.

10. Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and, for material changes, we may notify you by email or a notice in the app. Your continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related requests or questions, contact us at the email or contact method listed on the Habit Goals website or in the app (e.g. in the footer or "Contact" section). If none is listed, use the support or contact option provided where you signed up.