Privacy Policy

1. Who We Are

HabitFlow is a mobile application designed to help users create habits, set goals, schedule reminders, track progress, and review personal statistics.

For the purposes of applicable data-protection law, Jasper Arentsen is the person responsible for determining how personal data processed through HabitFlow is used.

Operator: Jasper Arentsen
Application: HabitFlow
Contact: jasperarentsen@gmail.com

2. Information We Collect

The information processed by HabitFlow depends on how you use the App and which features you choose to enable.

2.1 Account and authentication information

When you create or use an account, we may process:

• Your email address;
• A unique user or account identifier;
• Your selected authentication method;
• Authentication and account-creation information;
• Basic profile information associated with your account.

You may be able to sign in using:

• Email and password;
• Google Sign-In;
• Sign in with Apple.

When you use Google Sign-In or Sign in with Apple, the relevant provider may send HabitFlow limited account information needed to create or authenticate your account. The information provided depends on your settings and the choices you make with that provider.

2.2 Habit and progress information

HabitFlow processes information that you create or generate while using the App, including:

• Habit names and descriptions;
• Habit categories and goals;
• Habit frequency and schedules;
• Timer and counter values;
• Completion records and progress history;
• Streaks and calculated statistics;
• Reminder settings;
• Archived habits;
• App preferences and settings.

Habit information may reveal details about your routines or lifestyle. You decide which habits and descriptions you enter. You should avoid entering highly sensitive information that is not necessary to use the App.

2.3 Subscription and purchase information

If you purchase or use HabitFlow Premium, we may process limited subscription information, including:

• The subscription product identifier;
• Your entitlement or Premium-access status;
• Subscription start, renewal, and expiration information;
• Whether a subscription has been cancelled or refunded;
• The platform through which the subscription was purchased.

Payments are processed by the Apple App Store or Google Play. HabitFlow does not receive or store your full payment-card or bank-account details.

2.4 Technical and security information

Our infrastructure providers may process limited technical information that is necessary to deliver and secure their services. This may include IP addresses, request timestamps, authentication events, device or browser information, and technical logs.

HabitFlow does not currently use a separate third-party analytics or crash-reporting SDK.

3. How We Use Information

We use personal information to:

• Create, authenticate, and manage user accounts;
• Store and synchronize habits and progress;
• Calculate streaks, statistics, and completion status;
• Provide reminders and other requested functionality;
• Verify and manage Premium access;
• Maintain the reliability and security of the App;
• Prevent fraud, abuse, or unauthorized access;
• Respond to support, privacy, or account-deletion requests;
• Comply with legal and regulatory obligations.

HabitFlow does not currently use your personal habit information for advertising or sell it to third parties.

4. Legal Bases for Processing

Where the General Data Protection Regulation, the UK GDPR, or similar legislation applies, we rely on one or more of the following legal bases:

• Performance of a contract: processing needed to create your account and provide HabitFlow’s requested features.
• Legitimate interests: maintaining security, preventing abuse, resolving technical problems, and protecting the App and its users.
• Consent: where you make an optional choice that requires consent, such as enabling notifications.
• Legal obligations: where processing is necessary to comply with applicable laws or valid legal requests.

5. Third-Party Services

HabitFlow relies on selected service providers to deliver essential functionality.

6. Local Notifications

HabitFlow may request permission to send local notifications for habit reminders. Local notifications are scheduled and delivered through your device’s notification system.

HabitFlow does not currently use an external push-notification provider such as Firebase Cloud Messaging, Apple Push Notification Service through a custom server, or OneSignal.

You can change notification permissions through your device settings. Disabling notifications does not prevent you from using the other core features of HabitFlow.

7. Analytics, Crash Reporting, and Advertising

HabitFlow currently does not integrate:

• Third-party analytics SDKs;
• Third-party crash-reporting SDKs;
• Advertising SDKs;
• Personalized advertising;
• Cross-app advertising tracking.

If analytics, diagnostics, or similar technologies are introduced in a future version, this Privacy Policy and the relevant App Store and Google Play disclosures will be updated before or when the new processing begins, as required by applicable law.

8. How We Share Information

We do not sell or rent your personal data. Information may be disclosed only in the following circumstances:

• To service providers that process information on our behalf to operate HabitFlow;
• To Apple or Google in connection with authentication, app distribution, subscriptions, refunds, or purchases;
• Where required to comply with applicable law, a court order, or a valid governmental request;
• Where necessary to protect the rights, safety, and security of HabitFlow, its operator, or its users;
• In connection with a future business transfer, restructuring, or acquisition, subject to appropriate safeguards and legal notice requirements.

9. Data Retention

Account and habit data is generally retained while your HabitFlow account remains active and for as long as necessary to provide the App.

When you request account deletion, we will take reasonable steps to delete or anonymize associated personal data, unless information must be retained for legal, security, fraud-prevention, dispute-resolution, or financial-record obligations.

Information held by Apple, Google, or another independent service provider may remain subject to that provider’s own retention policies.

10. Data Security

We use reasonable technical and organizational measures intended to protect personal information against unauthorized access, alteration, loss, disclosure, or destruction.

These measures include account authentication, database access controls, row-level security policies, encrypted network connections, and restricted server-side operations.

No internet-based service can guarantee absolute security. Users are responsible for protecting their login credentials and for notifying us if they suspect unauthorized access to their account.

11. International Data Transfers

HabitFlow’s service providers may process information in countries other than the country in which you live.

Where required by applicable data-protection law, appropriate safeguards are used for international transfers, such as contractual protections or other legally recognized transfer mechanisms.

12. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request access to your personal data;
• Request correction of inaccurate or incomplete data;
• Request deletion of your personal data;
• Request restriction of processing;
• Object to certain processing activities;
• Request a portable copy of your data;
• Withdraw consent where processing is based on consent;
• Submit a complaint to a competent data-protection authority.

To exercise a privacy right, contact us at jasperarentsen@gmail.com. We may need to verify your identity before completing a request.

These rights may be subject to limitations or exceptions under applicable law.

13. Account and Data Deletion

You may request deletion of your HabitFlow account and associated personal data by sending an email from the email address associated with your account to:

jasperarentsen@gmail.com

Please use the subject line “HabitFlow Account Deletion Request”.

We may request information needed to verify that you are the account owner. After verification, we will process the request within the period required by applicable law.

Deleting your HabitFlow account does not automatically cancel an active Apple App Store or Google Play subscription. Subscriptions must be cancelled separately through the subscription settings of the store through which they were purchased.

14. Children’s Privacy

HabitFlow is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

If a parent or guardian believes that a child has provided personal information without appropriate authorization, they may contact us so that we can investigate and take appropriate action.

In countries where a higher minimum age applies to online services, users below that age should use HabitFlow only with any permission or supervision required by local law.

15. Changes to This Privacy Policy

We may update this Privacy Policy when HabitFlow, our service providers, or applicable legal requirements change.

The date at the top of this page shows when the Policy was last updated. Where required, we will provide additional notice of material changes.

16. Contact