Privacy Policy for HabitStreak

1. Introduction

Welcome to HabitStreak ("we", "our", or "us"). We are committed to protecting your personal privacy and providing a transparent, trustworthy environment for tracking your personal habits and collaborating with friends.

This Privacy Policy explains how information about you is collected, used, protected, and disclosed when you use our mobile application (HabitStreak), available on Android and Google Play.

By downloading, accessing, or using HabitStreak, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms outlined here, please do not use the application.

2. Information We Collect

We only collect information necessary to deliver, maintain, and enhance the habit tracking, streak calculation, and social encouragement features of HabitStreak.

2.1 Information You Provide Directly

• Account Information: When you create an account, you may provide your display name, username, email address, password hash (handled securely by Firebase Authentication), bio, and an optional profile avatar image.
• Habit & Check-In Data: Habit titles, descriptions, categories (e.g., Fitness, Mindfulness, Learning), target frequencies, schedules, reminder times, and daily check-in timestamps.
• Private Notes: Optional reflection notes entered during check-in. Private notes are strictly confidential to your account and are never shared with friends or participants in shared habits.
• Social Connections & Interactions: Friend requests, accepted friendships, participation in shared habits, and motivational nudges sent between connected friends.
• Safety & Moderation Actions: User blocking records and report submissions, including reason and timestamp, to maintain a safe community.

2.2 Information Collected Automatically

• Time Zone & Locale: Device time zone and preferred language settings to ensure habit streak calculations, cut-off hours, and reminders align accurately with your local calendar day.
• App Performance & Crash Data: Standard anonymous crash diagnostics and performance telemetry (e.g., error logs, ANR reports) to identify and fix technical issues.
• Device Identifiers: Anonymous installation IDs used solely to deliver notifications and ensure account synchronization.

2.3 Information We DO NOT Collect

• Precise Geolocation: We do not track, collect, or monitor GPS or location data.
• Device Storage / Media Library: We do not request broad media or file storage permissions. Avatar photos are selected exclusively via the zero-permission Android Photo Picker.
• Biometric Data: We do not collect fingerprints, facial recognition data, or biometric identifiers.
• Financial Information: HabitStreak does not collect credit card numbers, bank account numbers, or billing addresses.

3. How We Use Your Information

We use the collected information for the following legitimate purposes:

1. Core Service Delivery: Calculating personal and team streaks, updating milestone badges, maintaining habit history, and organizing daily check-in lists.
2. Social Accountability & Friends: Allowing friends you have accepted to view your shared habits, streaks, and progress.
3. Reminders & Nudges: Sending timely local reminders to complete your habits and delivering encouragement nudges from your friends.
4. Safety & Moderation: Enforcing user blocks, processing content reports, preventing spam, and safeguarding users against harassment.
5. Account Management & Sync: Storing data locally on your device with optional encrypted cloud backup via Firebase Cloud Firestore.

4. Visibility & Data Sharing Principles

• Private by Default: All habits you create default to Private visibility. Only habits you explicitly set to Friends or Public can be viewed by your accepted friends.
• Zero Exposure of Notes: Daily check-in notes are never surfaced to other users under any circumstances.
• No Sale or Rent of Personal Data: We do NOT sell, rent, monetize, or trade your personal data, habits, or behavioral logs to third-party data brokers, marketers, or advertisers.
• No Third-Party Advertising: HabitStreak does not include third-party advertising SDKs or tracking networks.

4.1 Service Providers & Infrastructure

We share data with trusted cloud infrastructure providers strictly to operate the service:

• Google Firebase / Google Cloud Platform: Provides authentication, cloud database storage (Firestore), and secure data transmission. All data transmitted between your device and Google Cloud servers is encrypted using Transport Layer Security (TLS/HTTPS).

4.2 Legal Disclosures

We may disclose your information only if required to do so by law, subpoena, or valid legal process, or to protect the safety, rights, or property of our users, the public, or HabitStreak.

5. Data Security

We implement industry-standard administrative, technical, and physical security measures to safeguard your personal information:

• Encryption in Transit: All network traffic between the HabitStreak app and backend cloud services uses TLS 1.3 / HTTPS encryption.
• Zero-Trust Firestore Security Rules: Cloud database access is enforced by server-side security rules ensuring users can only read and write their authorized records.
• Local Sandboxing: On-device databases (Room SQLite) are protected within Android's secure application sandbox.

6. Data Retention and Account Deletion

• Retention Period: We retain your account data, habits, and check-in history for as long as your account remains active.
• User Control & Deletion: You maintain complete control over your data. You may delete individual habits, check-ins, or friends at any time directly in the app.
• Account Deletion: You can permanently delete your entire account and all associated data:
  1. Open HabitStreak and tap Profile > Settings.
  2. Tap Delete Account.
  3. Confirm the deletion prompt.

  All profile records, habits, check-ins, achievements, and friendships will be permanently purged from our databases.

• Request Deletion via Email: You can also request complete deletion of your data by emailing amrish.roundark@gmail.com with the subject line "Data Deletion Request".

7. Children's Privacy (COPPA Compliance)

HabitStreak is intended for general audiences aged 13 and older (or the applicable minimum age in your jurisdiction). We do not knowingly collect or solicit personal information from children under the age of 13. If we become aware that we have inadvertently collected personal data from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information from our records.

If you believe a child under 13 has provided us with personal information, please contact us immediately at amrish.roundark@gmail.com.

8. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your geographic location, you may have specific rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
• Right to Restrict Processing: Request restrictions on how your data is processed.
• Right to Data Portability: Request an export of your habit records in a structured, machine-readable format.
• Non-Discrimination: We will never discriminate against you for exercising any of your statutory privacy rights.

To exercise any of these rights, please contact us at amrish.roundark@gmail.com. We respond to all verified requests within 30 days.

9. Google Play Data Safety Disclosures

For transparency with Google Play's Data Safety requirements:

• Data collected: Name, email address, user IDs, user-generated content (habit titles/history), and optional crash diagnostics.
• Data encrypted in transit: Yes, using standard HTTPS/TLS protocols.
• Data deletion policy: Users can delete their data in-app or request deletion via email.
• Third-party sharing: None (no third-party advertising or data sales).

10. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our practices, legal requirements, or app features. When updates occur, the "Last Updated" date at the top of this document will be revised. If significant changes are made, we will notify users through an in-app notice or by other reasonable means prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we safeguard your data.

11. Contact Information

If you have questions, feedback, or concerns regarding this Privacy Policy or our privacy practices, please contact our data protection team:

• Email: amrish.roundark@gmail.com
• Application: HabitStreak
• Package ID: com.aistudio.habitstreak.vqmz