Privacy Policy — Habitua

1. Information We Collect

1.1 Information You Provide

When you use Habitua, you may provide the following types of information:

• Habit Data: Habit names, descriptions, target minutes or goals, categories, reminder times, and associated notes
• Completion History: Logs of when you complete habits, streaks, and reward or badge progress
• User Preferences: Theme preferences (light/dark mode), notification settings, and other app configuration choices

1.2 Information Automatically Collected

When you use Habitua, we automatically collect certain technical information:

• Device Information: Device model, operating system version (Android), app version, and unique device identifiers (such as Android Advertising ID, if available)
• Usage Analytics: App launch events, screen views, feature usage patterns, session duration, and interaction events (collected through Firebase Analytics)
• Crash Reports and Error Logs: Stack traces, error messages, device state information, and performance metrics when the app crashes or encounters errors (collected through Firebase Crashlytics)
• Advertising Data: Ad interaction data (clicks, impressions), general location data for ad relevance (not precise location), and device information for ad targeting (collected by Google AdMob)

1.3 Information from Third-Party Services

• Google AdMob: Collects advertising identifiers (Android Advertising ID), ad interaction data, and device information for ad targeting, in accordance with Google's Privacy Policy.
• Firebase Analytics and Crashlytics: Collect aggregated, anonymized usage statistics and crash reports to improve app stability and user experience.

1.4 Permissions We Request

Habitua requests only the permissions necessary for the app to function:

• Notifications: To send reminder notifications for your habits
• Exact alarm / Schedule exact alarm: To trigger reminders at the exact time you set
• Receive boot completed: To reschedule reminders after your device restarts
• Vibration: To vibrate when a reminder notification is shown
• Internet: Used by the ad network to display ads and by analytics services; core habit tracking works offline

2. How We Use Your Information

We use the information we collect for the following purposes:

• Core Functionality: To provide habit tracking, reminders, streak tracking, rewards, and insights
• Notifications: To deliver reminder notifications at the times you configure
• App Improvement: To analyze usage patterns, identify bugs, and improve app performance and user experience
• Crash Reporting: To diagnose and fix technical issues, crashes, and errors
• Advertising: To display relevant advertisements through Google AdMob and measure ad performance
• Personalization: To remember your preferences (theme, notification settings) and customize your app experience
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contractual Necessity: Processing your habit data is necessary to perform our contract with you (providing the habit tracking and reminder service)
• Legitimate Interests: We process analytics, crash report, and advertising data based on our legitimate interest in improving the app, ensuring its stability, and supporting the app through advertising
• Consent: Where required by law (e.g., for personalized advertising in certain regions), we use Google's User Messaging Platform (UMP) to obtain your consent. You can change your consent choices in your device or Google account settings.

You have the right to withdraw consent at any time, though this may affect app functionality (e.g., ad personalization).

4. Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Third-Party Service Providers: We share anonymized analytics, crash report data, and advertising identifiers with Google AdMob and Firebase, which are subject to Google's Privacy Policy (https://policies.google.com/privacy)
• Legal Requirements: We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections
• With Your Consent: We may share information if you explicitly consent to such sharing

5. Data Security Measures

We implement reasonable security measures to protect your information:

• Local Storage: Habit data is stored on your device in the app's private storage, protected by the operating system's sandboxing and permission systems
• No Cloud Sync (Current): As of the current version, your habit data is stored only on your device and is not synced to our servers
• Network Security: All network communications (for analytics and ads) use HTTPS/TLS encryption
• Access Controls: App data is accessible only to the app and is not shared with other apps unless you explicitly export or share it

6. Data Retention

• Habit Data: Retained on your device until you delete it in the app, clear app data, or uninstall the app. We do not automatically delete your habit or completion history.
• Analytics Data: Firebase Analytics retains aggregated, anonymized usage data according to Google's data retention policies (typically up to 14 months for standard analytics)
• Crash Reports: Retained by Firebase Crashlytics for up to 90 days, after which they are automatically deleted
• Advertising Data: Advertising identifiers and ad interaction data are retained according to Google AdMob's retention policies. You can reset your advertising ID in device settings.
• App Preferences: Retained on your device until you change them or uninstall the app

If you uninstall the app, all locally stored data is deleted by the operating system. We do not maintain copies of your data after uninstallation.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you (your habit data is on your device; we can describe what we collect)
• Right to Correction: You can update or correct your habit data and preferences directly in the app
• Right to Deletion: You can delete individual habits or data in the app, or uninstall the app to delete all local data
• Right to Object: You can opt out of personalized advertising (Android: Settings > Google > Ads > Opt out of Ads Personalization) and limit analytics where supported
• Right to Restrict Processing: You can stop using the app or disable certain features to limit data processing
• Right to Withdraw Consent: If processing is based on consent (e.g., ads), you can withdraw it at any time via device or Google settings

To exercise these rights, please contact us using the information provided in Section 13. We will respond within 30 days (or as required by applicable law).

California Residents (CCPA): You have the right to know what personal information we collect, the right to delete personal information (subject to certain exceptions), and the right to opt out of the sale of personal information (we do not sell personal information). You also have the right to non-discrimination for exercising your privacy rights.

8. Cookies and Similar Technologies

Habitua is a mobile application and does not use traditional web cookies. However, we use similar technologies:

• Local Storage: We use local device storage (e.g., Room database, SharedPreferences) to store your habit data and app preferences
• Advertising Identifiers: Google AdMob uses Android Advertising ID for ad personalization and measurement. You can reset or opt out of personalized ads in device settings
• Analytics Identifiers: Firebase Analytics uses a unique, anonymized identifier to track app usage across sessions (this identifier does not personally identify you)

You can reset your advertising ID (Android: Settings > Google > Ads > Reset advertising ID) to change your analytics/advertising identifier.

9. Children's Privacy

Habitua is not intended for users under the age of 13 (or 13 in jurisdictions that require it, such as the United States under COPPA). We do not knowingly collect personal information from children under this age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

If you are located in the EEA, the minimum age may be 16 (or lower if your country permits). If you are under the applicable minimum age, please do not use Habitua without parental consent.

10. International Data Transfers

If you are located outside your home jurisdiction, your information may be transferred to and processed in other countries where our service providers (such as Google AdMob and Firebase) operate. These countries may have different data protection laws than your country.

• Google AdMob and Firebase: Data is processed by Google, which operates globally. Google complies with applicable data protection laws, including GDPR, and provides appropriate safeguards (such as Standard Contractual Clauses) for international transfers.
• EU/UK Users: If you are in the EEA or UK, we ensure that international transfers are subject to appropriate safeguards as required by GDPR.

By using Habitua, you consent to the transfer of your information to these countries.

11. Third-Party Services

Habitua uses the following third-party services that may collect or process your information:

• Google AdMob: Displays advertisements and may collect advertising identifiers, ad interaction data, device information, and general location for ad relevance. Privacy: https://policies.google.com/privacy and AdMob Privacy & Messaging. You can opt out of personalized ads in device settings or at https://adssettings.google.com/.
• Firebase Analytics and Crashlytics: Collect anonymized usage analytics and crash reports. Privacy: https://policies.google.com/privacy.

We recommend reviewing the privacy policies of these third-party services to understand how they handle your information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy in the app (e.g., in-app banner or policy screen)
• Updating the "Effective Date" at the bottom of this policy
• Sending an email notification if you have provided an email and opted in to communications

We encourage you to review this policy periodically. Your continued use of Habitua after changes become effective constitutes acceptance of the updated policy.

13. How to Contact Us

14. Effective Date