Habit RebootPrivacy Policy
The short version. We collect what the app needs to work, and nothing for advertising. Your reflections and check-ins are private. Your crew sees whether you sealed each day and your mood, the day after. We don't sell your data, we don't track you across other apps or websites, and you can delete your account from inside the app.
Habit Reboot (the "app") is a free personal project made by Damanpreet Singh ("we", "us"), an individual. It is an accountability tool, not a health, medical or monitoring app. This policy explains what we collect, why, who can see it, and the choices you have. The app is offered in the United States.
What we collect
Things you give us
- Account details: your email address, the name you choose to show, and your password (stored only in scrambled, hashed form by our sign-in provider).
- Your reboots: the habit you commit to, when you started, and an optional note to your future self.
- Daily activity: each day's seal (did it or didn't), the mood you pick, an optional short reflection, and optional daytime check-ins with mood and notes.
- Crew activity: which crew you're in, reactions you send, nudges you send, and email addresses you enter to invite someone. If you invite someone, we use their email address only to send that invitation and up to two reminders.
- Feedback: if you delete your account, the reason you choose and any comment.
Things collected automatically
- Notification token: if you allow notifications, a code that lets us send nudges to your device.
- Server logs: our providers keep short-lived technical logs (such as IP address and request times) to run and secure the service.
The app has no advertising, analytics or tracking tools, and we don't collect your location, contacts or photos.
How we use it
- To run the app: sign you in, save your reboots and seals, and show you your progress.
- To run your crew: show crewmates what they're allowed to see (below), and deliver invites, reminders and nudges.
- To send you service emails, like sign-up and password-reset codes.
- To keep the service secure and fix problems.
- To understand, in totals only, how the app is doing (for example, how many people sealed today or started a reboot this week), so we can keep it working well. We work this out from the data above, without any analytics or tracking tools, and it never identifies you.
We don't sell your personal information, and we don't share it for advertising.
What other people can see
Your crew sees your preferred name, full name and email address.
| Your crew can see | Your crew cannot see |
|---|---|
| Your preferred name, full name and email address The crew's shared habit Your day number, or that you've paused or completed your reboot Whether you sealed each day and the mood you picked, shown the next day How many reactions your seals got |
Your reflections Your check-ins and notes Your note to your future self Your other reboots |
If you leave a crew, its members no longer see your details. A nudge is seen only by the person you nudge. Pending invites, with the email address entered, are visible to the crew admin who sent them.
Who processes data for us
We use a small number of service providers, who handle data only to provide their service to us:
- Supabase hosts our database and sign-in.
- Resend sends our emails (codes, invitations, reminders).
- Apple delivers push notifications to your device.
- Apple distributes the app through the App Store under its own privacy policy.
- Cloudflare hosts this website, counts visits to it, and forwards emails sent to our support address.
We may also disclose information if the law requires it, or to protect someone's safety.
Habit, mood and reflection data
Some of what you enter can say something about your health or wellbeing: the habit you choose (for example, drinking less or sleeping better), the moods you pick, and what you write in reflections, notes and check-ins. Some US states treat this kind of information as "consumer health data" and give it extra protection. We treat all of it that way, wherever you live:
- We ask first. We only collect it after you agree, separately, when you sign up.
- We use it only to run the app for you: to save your reboots, show you your history, and show your crew the limited information listed above (never your reflections or notes).
- We never sell it, never use it for advertising, and never share it except with the service providers listed below, who store or deliver it for us.
- You're in control. You can see it in the app at any time. To have us delete it, delete your account in the app or email us. To withdraw your consent, delete your account; we can't run the app without storing what you enter.
This website
habitreboot.app is an information site. It has no sign-in, forms or cookies, and you can't manage your account or reboots on it. To see how many people visit and which pages they read, we use Cloudflare Web Analytics, which counts visits without cookies, without fingerprinting and without building a profile of you. It records things like the page, the site that sent you there, and your browser and country. Cloudflare, which hosts the site, also keeps short-lived technical logs (such as IP address and the pages requested) to deliver and protect it. If you email us, we use your message and address only to reply.
How long we keep it
We keep your data while your account exists. When you delete your account in the app, it is locked straight away and you leave your crew. Thirty days later your account and everything in it are permanently erased. If you sign back in during those 30 days, you can choose to keep your account. Copies in backups are overwritten within 30 days after that.
Your choices and rights
- Delete your account: in the app, go to Me, then Delete account. If you can't get into the app, email us from the address on your account.
- See or correct your data, or ask us anything: email [email protected]. We reply within 30 days.
- Notifications: turn them off any time in the app or in your iPhone's Settings.
California residents: we don't sell or share personal information, and we don't disclose it to third parties for their direct marketing. You can ask what we hold about you and ask us to delete it, at the address above.
Do Not Track: we don't track you across other websites or apps, so there's nothing for a Do Not Track signal to turn off.
Age
Habit Reboot is only for adults 18 and over, and we don't knowingly collect information from anyone younger. If you believe someone under 18 has an account, email us and we will delete it.
Security
Data is encrypted in transit, access is limited by database rules so people only see what this policy says they can, and passwords are never stored in readable form. No system is perfectly secure, and we can't guarantee that information will never be accessed without permission, but we take reasonable steps to protect it. If we learn of a breach that affects you, we'll tell you as the law requires.
Changes
If we change this policy, we'll update the date above. For significant changes we'll also let you know by email or in the app.
Contact
Damanpreet Singh
[email protected]