Privacy Policy

1.1 Personal Information

When you create an account, we may collect:

• Email address
• Username (optional)
• Password (encrypted)
• User ID (automatically generated)

1.2 Habit and Activity Data

To provide our core services, we collect and store:

• Habit names and descriptions you create
• Habit completion records and dates
• Progress data, streaks, and statistics
• Achievement unlocks
• Notes and custom values associated with habits
• Character customization (name, preferences)

1.3 Device and Usage Information

We automatically collect certain information about your device and how you interact with our App:

• Device type and operating system
• App version and configuration
• Language and locale settings
• Network connectivity status (for sync features)
• Push notification preferences and permissions (if you enable reminders)
• App usage patterns for improving app stability

1.4 Settings and Preferences

We store your app preferences locally and in the cloud:

• Theme preferences (light/dark mode)
• Language selection
• Notification settings
• Reminder times
• Sync preferences (WiFi-only, enabled/disabled)

We use the collected information for the following purposes:

• To provide and maintain our habit tracking services
• To sync your data across multiple devices
• To send you notifications and reminders (if enabled)
• To calculate your progress, streaks, and achievements
• To personalize your experience with custom characters and themes
• To analyze app performance and improve our services
• To detect, prevent, and address technical issues
• To process subscription payments and manage premium features
• To communicate with you about service updates and features

3.1 Data Storage

Your data is stored in two locations:

• Locally on your device: Using secure local storage (AsyncStorage) for offline access and quick performance
• Cloud storage: Using Supabase (hosted in secure data centers) for backup and multi-device sync

3.2 Security Measures

We implement industry-standard security measures to protect your data:

• End-to-end encryption for data transmission (SSL/TLS)
• Encrypted password storage
• Secure authentication tokens
• Regular security audits and updates
• Access controls and authorization systems

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We may share your data with trusted third-party service providers who assist us in operating our App:

• Supabase: Cloud database and authentication services
• App Store/Google Play: For subscription payment processing

These service providers are contractually obligated to maintain the confidentiality and security of your information and are prohibited from using it for any other purpose.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your data is transferred and becomes subject to a different Privacy Policy.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:

• Active accounts: Data is retained as long as your account remains active
• Deleted accounts: Personal data is permanently deleted within 30 days of account deletion
• Legal compliance: Some data may be retained longer if required by law
• Anonymous analytics: Aggregated, anonymized data may be retained indefinitely for service improvement

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (right to be forgotten)
• Data portability: Request your data in a machine-readable format
• Restriction: Request restriction of processing under certain circumstances
• Objection: Object to processing of your data for certain purposes
• Withdraw consent: Withdraw consent for data processing at any time

To exercise these rights, please contact us using the information provided in Section 11.

Our App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

For users between 13 and 18 years of age, we require parental or guardian consent before creating an account.

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

Our App uses local storage and similar technologies to enhance user experience:

• Essential storage: Required for app functionality (login sessions, preferences)
• Performance storage: Helps us understand app usage and improve performance
• Functional storage: Remembers your settings and preferences

We do not use third-party advertising cookies or tracking technologies.

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Effective Date" at the top of this policy
• Sending you an in-app notification or email (for significant changes)

Your continued use of the App after any changes indicates your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: melonryou@gmail.com
• Support: melonryou@gmail.com

We will respond to your request within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Know what personal information we collect and how it's used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing: Consent, contract performance, legitimate interests
• Data controller: TerraHabits is the data controller for your personal data
• Right to lodge a complaint with a supervisory authority