Privacy policy
Last updated: October 3, 2026
habia is a habit-building app. This policy explains what we store, why, who we share it with and how you can delete it. In short: we store the minimum the app needs, we never sell your data, and you can delete your account from inside the app at any time.
What we collect
- Account: your email address and an encrypted password.
- Your habits: name, icon, color, frequency, times, reminders, your 2-minute version, where you do them and identities.
- Your activity: which habits you complete and when, to compute streaks, stats and your tree.
- Preferences: language, theme, day bands and time zone.
- If you turn on the AI weekly review: the reviews Brote writes for you.
- If you add friends or join circles: your username, display name and color; your friendships, requests and circles; the cheers you send and receive; and the people you block or report.
- If a habit of your circle comes with a photo: the photos you take with the camera (deleted after 7 days). If you turn on notifications: your phone’s notification id.
- If you subscribe to habia Pro: your subscription status (plan, until when it lasts and whether it renews). Never your payment details: Apple handles the charge.
- Minimal technical data produced by the connection to our provider (for example, the IP address in server logs).
- Error reports: if the app crashes, a technical report (what failed, phone model, OS version) tied to your account’s internal id (a code, not your name or email).
- Usage data, unless you turn it off: which screens you open, actions such as creating or checking a habit and your answers to the short "is habia helping?" question, tied to the same internal id, along with your phone model, language and time zone. Never your habit names or email. It tells us what works and what does not.
What we do NOT collect
We never ask for your real name, phone number, location, contacts, the photos in your library or health data from other apps. No ads, and we do not follow your activity across other apps or websites. We do not sell or rent your data.
Why we use your data
Only to provide the service: show your habits, send the reminders you set up, compute your stats and progress, and keep your account secure.
Who we share it with
- Supabase, which hosts the database and handles sign-in.
- Sentry, which receives error reports so we can fix them.
- RevenueCat, which manages habia Pro subscriptions with Apple: it receives your account’s internal id (a code, not your name or email) and your in-app purchases, so Pro follows you on all your devices.
- Expo (the push notification service), only if you turn them on: it receives your phone’s notification id and the text of each notice (for example, the name of who cheered you on) to deliver it through Apple or Google.
- PostHog, which receives the usage data. You can turn it off in Settings → Help improve habia.
- Anthropic (Claude), only if you turn on Brote with AI (off by default; Settings → Brote with AI). Once a week we send it a summary of your week so it can write the review: your habit names, their identities and places, how many times you did them and your display name if you set one; never your email. Under its API terms, Anthropic does not use this data to train its models. If you also chat with Brote, your questions and the latest messages of the conversation are sent along with a summary of your last 60 days: your habit names, their identities and 2-minute versions, which days you did them, the patterns the app finds between them and your display name if you set one. The conversation is stored in your account and you can delete it from the chat. You can turn it off at any time.
- Your friends and the people in your circles, only if you add friends or circles: they see your username, name and color, your streak and record, your consistency over the last 30 days, your seeds, your tree stage and which days you completed a habit or rested on purpose. Never your habit names, your identities or your email. You can remove friends, leave a circle or block someone at any time.
- The people in a circle, only for the circle habits you create or join: they see that habit (defined by the circle), since when you joined, which days you did it or rested and, if the habit comes with a photo, the photos you take with the camera. Photos are deleted after 7 days; you can delete yours sooner. Others can privately vote that a photo “doesn’t count” (if most do, that day doesn’t count toward the group streak; who voted is never shown, though in a habit of two it can be worked out) or report it as inappropriate: it disappears for whoever reports it and, with two reports, it is hidden for everyone while we review it. If you leave the circle or archive the habit, it is no longer shared.
Nobody else receives your data, unless legally required.
Notifications
Reminders are scheduled on your own device: your schedule does not need to leave the phone to deliver them. You can turn them off in the app or in system settings.
Friends and circles notifications (cheers, requests, “already watered in your circle”) are sent from our server, never the same one twice a day. Turn them off in Settings → Friends & circles notifications, or in system settings.
How long we keep it
As long as your account exists. If you delete it, we delete your habits, logs, identities and preferences. Deletion is immediate and cannot be undone; short-lived copies may remain in the provider backups for a brief period. Error reports and usage data already sent to Sentry and PostHog are kept for their retention periods; once your account is deleted, their id no longer maps to anyone. Apple and RevenueCat keep the purchase history accounting law requires; deleting your account does not cancel an active subscription: cancel it in iPhone Settings.
Your rights
You can access your data in the app, correct it, and delete everything in Settings → Danger zone → Delete my account. For a copy of your data or any question, write to hola@habia.app.
Children
habia is not directed at children under 13. If we find such an account, we will delete it.
Security
Connections are encrypted. Each user can only read and write their own rows, plus the summary their friends share (described above): the database enforces that rule per row, not just the app. No system is perfect, but we work to keep your data safe.
Changes and contact
If this policy changes we will tell you in the app. Questions: hola@habia.app.