Habit App Privacy Policy
Effective October 11, 2026
Habit App is made by Turaev Muhammadali, an independent developer in State College, Pennsylvania, USA ("I", "me"). This policy explains what the app collects, why, who helps run it, and the choices you have. Questions: turaevmuhammadali81@gmail.com.
The short version
- Your data is used only to run the app for you. It is never sold, never used for ads and never used to track you across other apps or websites.
- Proof photos, reflections, task names and documents you import are sent to Google's Gemini AI to be checked and read, only while "AI checks" is on. Google doesn't use them to train its AI.
- You can delete your account and everything in it from Settings at any time.
- Habit App is for adults 18 and older.
What the app collects
Your account. Your email address and a password (stored only as a secure hash by our sign-in provider), or the identifier Apple or Google gives the app when you sign in with them. With Google, the sign-in provider also keeps the name on your Google account (the app doesn't show or use it). If you use Sign in with Apple and hide your email, the app only gets Apple's relay address.
What you put in the app. Tasks and reminders (their names, dates, times, how often they repeat and any course or group), and in Care mode medicines, doses and times, doctor visits and other reminders. Medicines and doctor visits are health details; see the Health Data Policy.
Proof. Photos you take with the in-app camera to show a task is done, and reflections you write. Proof photos are always taken live; photos from your library are never used as proof.
Documents you import. A PDF or photo of a syllabus, schedule or to-do list that you pick or take yourself, and the list of tasks read from it.
Progress. When you completed what, your streak, points, and your town and garden.
Settings. App mode, time zone, when your day starts, and your consent choices.
Crash reports. When the app crashes or hits an error, a report with the error, the app version, the phone model and system version. Screenshots and personal details are switched off in these reports. They carry a random installation ID, which isn't tied to your account, so repeated crashes on one phone can be told apart. Crash reports are sent only after you agree to this policy in the app, and stop when you sign out.
AI usage counts. How many AI checks and document reads your account made each day, so a daily limit can be applied. Kept for about a week.
On your phone only. Your reminder notifications and this phone's settings (such as Hide medicine names) stay on your phone and are never sent to the server.
Why it's used
To run the app: keep your tasks in sync across your phones, remind you, check that a proof shows its task, read the documents you import, tidy the wording of a task when you add one, count your streak and points, keep the service working and fix crashes, and stop abuse (for example, limits on how much one account can upload or ask the AI each day).
Who helps run it
These companies process data only to provide their service to Habit App:
- Supabase (database, file storage and sign-in), servers in the United States (Ohio).
- Google (the Gemini API), which checks proof photos and reflections (each sent with its task's name, kind and any course or group), reads imported documents (sent with today's date and your time zone, to place the due dates) and tidies task wording. Only while AI checks are on. Habit App uses Gemini's paid service, under which Google does not use the requests to improve its products; Google may keep them for a limited time to detect abuse and meet legal obligations.
- Resend (sends the sign-up and password reset codes to your email address), United States.
- Sentry (crash reports).
- Apple and Google, if you sign in with them.
Data may also be disclosed if the law requires it, or to protect someone's safety.
Your choices
- AI checks can be turned off in Settings, for your whole account. While off, nothing goes to the AI: photos and reflections you save aren't checked and never count toward your streak or points (not even after you turn the checks back on), and documents can't be imported.
- Notifications and the camera can be turned off in your phone's settings.
- "Hide medicine names" keeps medicine names and doses off your lock screen.
- Access, correction and a copy of your data: most of it is visible in the app; email me for a copy or a correction.
- Delete your account: Settings → Delete account. This removes your account, tasks, reminders, proofs, photos, documents and progress from the server and from the phone. Copies in the hosting provider's backups are overwritten on its regular backup schedule.
I'll answer any privacy request within 30 days.
How long it's kept
Until you delete your account. AI usage counts are kept for about a week. Crash reports are kept by Sentry for up to 90 days.
Security
Data travels encrypted (HTTPS). On the server, each account can only reach its own rows and files. On your phone, your sign-in is kept in the iOS Keychain or Android Keystore. No system is perfectly secure, but these protections are in place and kept up to date.
Children
Habit App is for adults 18 and older. It isn't meant for children and doesn't knowingly collect data from anyone under 18. If you believe a child has an account, email me and it will be deleted.
Where data is processed
In the United States. If you use the app from another country, your data is transferred to and processed in the US.
US state privacy rights
Depending on where you live (for example California, Washington or Nevada), you may have rights to know, access, correct and delete your data, and to opt out of its sale or use for targeted ads. Habit App doesn't sell data or use it for targeted ads. To use any of these rights, email me; you won't be treated differently for doing so. Washington and Nevada residents: see also the Health Data Policy.
Changes
If this policy changes in a way that matters, the app will tell you before the change applies. The date at the top shows the latest version.
Contact
Turaev Muhammadali, State College, Pennsylvania, USA · turaevmuhammadali81@gmail.com