Privacy Policy.

1. Information We Collect

We collect only the minimum data necessary to provide a private productivity experience:

• Account Identifiers: Name and email from Google/Apple Sign-In.
• App Content: Habits, tasks, notes, expense entries, and completion history are stored in the app database on your device and in backups you choose to create.
• Burn Notes: Ephemeral notes are automatically deleted 24 hours after creation.
• Product Analytics: Firebase receives account-anonymous feature and reliability events. These events exclude account identity, habit names, task titles, note text, expense amounts, and referral codes.

2. Lawful Basis (GDPR/LGPD)

We process your data under: Consent (for Cloud Backup/Reminders), Performance of a Contract (to provide core tracking), and Legitimate Interests (app security and anonymized analytics).

3. Data Storage & Backups

Local-First: Your app content is stored in a SQLite database on your device.

Cloud Backups: Backups are stored through the Google Drive or iCloud account you select. You must maintain access to that account to retrieve them.

Portable Backups: Exported Habis backup files are designed for portability and should be stored and shared carefully. Backup validation helps identify invalid or corrupted files but is not a substitute for secure file storage.

4. AI Transparency

Current intelligent features, such as our "Daily Coach" and "Expense NLP," operate using proprietary local algorithms on your device. We do not transmit your habit patterns or note text to external servers for processing. Integration with external LLMs is currently in a "code-only" research state.

5. Sub-processors

We use Google and Apple for authentication and user-selected cloud services, Firebase for account-anonymous product analytics, and an email service when you choose to send feedback.

6. Your Global Privacy Rights

You may export or delete your app data, delete your account, and disable cloud backup at any time in Settings.

7. Sale and Advertising

We do not sell personal information or share it for cross-contextual behavioral advertising. Habis does not contain third-party advertising.

8. Regional Disclosures

Brazil (LGPD): You have the right to confirm processing, access data, and request anonymization or deletion.

Japan (APPI): Information manager is Muthu M. (Founder). Data is processed strictly for the purposes outlined in Section 1.

Korea (PIPA): Privacy Officer: Muthu M. Data is destroyed without delay upon account deletion using methods that ensure records cannot be reproduced.

9. Application Permissions

For high-performance tracking, we require: SCHEDULE_EXACT_ALARM (Android) for precise nudges, Notifications for system alerts, and Sync Services to maintain streaks across reboots.