Logo
Help Center

Privacy Policy

Effective Date: May 26, 2026 Last Updated: June 20, 2026

1. Introduction

Welcome to Habits Social ("we," "our," or "us"). This Privacy Policy explains what information Habits Social collects, how it is used, the service providers involved, and the choices available to you.

Data Controller Identity: DevFoFun
Contact Email: support@habitssocial.com

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the application.

2. Information We Collect

We collect the information needed to operate the service:

  • Account information: Your email address, username, password hash, and optional avatar URL.
  • Habit and social content: Habits, habit logs, buckets, streak data, friendships, blocks, sharing activity, and chat messages.
  • Notification information: If you enable push notifications, we store the browser-provided push endpoint, encryption keys, expiration information, and limited browser or device information such as the user-agent string.
  • Security and operational information: Our infrastructure may process IP addresses, request headers, timestamps, and error or request logs to deliver the service, apply rate limits, investigate failures, and protect accounts.
  • Cookies and device storage: We use an essential authentication cookie. The app also stores account details, preferences, tutorial state, and habit data in browser storage and IndexedDB so supported features can work offline and synchronize later.

We do not use advertising identifiers, advertising SDKs, or advertising networks.

3. How We Use Your Information

We use collected information to:

  • Create and manage your account.
  • Provide habit tracking, offline synchronization, social sharing, chat, and notifications.
  • Authenticate sessions, reset passwords, enforce access controls, and prevent abuse.
  • Maintain reliability, diagnose errors, and improve the service.
  • Comply with legal obligations and protect the rights and safety of users and the service.

Habits Social does not display advertisements, use your information for personalized advertising, or sell personal information for advertising purposes.

4. Disclosure of Your Information

We disclose information only as needed to operate the service, follow the law, or protect users. Our current service providers are:

  • Cloudflare: Hosts and delivers the application and processes requests, security information, and operational logs.
  • Neon: Hosts the primary application database.
  • PartyKit: Delivers authenticated real-time change notifications so clients can refresh chat and social data. Chat message content remains in the primary application database.
  • Resend: Delivers password-reset emails and receives the destination email address and email contents needed for that delivery.
  • DiceBear: Generates optional avatar images requested by your browser. Request metadata such as your IP address is sent to DiceBear when those images are loaded.
  • Browser and device push services: Route notifications when you opt in. The specific provider depends on your browser and device.

We may also disclose information when required by law or when reasonably necessary to investigate abuse, enforce our policies, or protect the rights, property, or safety of users, the public, or the service.

5. Cookies and Tracking Technologies

We use an essential, HTTP-only authentication cookie to keep you signed in. The application also uses browser storage for offline functionality, cached account information, preferences, and tutorial state.

We do not use advertising cookies, advertising SDKs, or cross-site advertising trackers.

6. Data Retention and Deletion

We retain account information and user content while your account is active and as needed to operate the service. Short-lived authentication and password-reset tokens expire automatically. Operational logs may be retained by infrastructure providers for security and reliability according to their configured retention periods.

You may permanently delete your account from the Edit Profile screen. Deletion removes your email, username, password hash, habits, logs, buckets, friendships, blocks, sharing data, push subscriptions, and password-reset records from the active application database. It also erases the content and sender link from messages you sent. Non-identifying message tombstones and conversation structure may remain so other participants' conversation history remains internally consistent.

Deleting the account does not automatically clear data already stored by the app on every device. On the device where deletion is performed, the app clears its cached account state. You should also clear the site's browser storage or uninstall the app on any other device where you used it.

See Delete Your Account for instructions.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right to Access: You have the right to request copies of your personal data.
  • Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
  • Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
  • Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you.

These rights may be subject to exceptions under applicable law. Contact us to submit a request. We may need to verify your identity before fulfilling it.

8. Contact Us

If you have questions or comments about this Privacy Policy, your privacy rights, or if you would like to exercise any of those rights, please contact us at:

DevFoFun
Email: support@habitssocial.com