Privacy Policy

HabitGuild · last updated 15 August 2026

This Privacy Policy explains how HabitGuild — operated by an independent developer based in Colombia ("HabitGuild," "we," "us," or "our") — collects, uses, and protects your information when you use the HabitGuild mobile application (Google Play package com.habitguild.app) and related website (collectively, the "App").

By using the App, you agree to the practices described here. If you do not agree, please do not use the App.

Want to delete your account and data? See Section 9 — Data retention, account deletion and data deletion for both ways to do it, including how to request deletion without installing the App.

1. Information we collect

We aim to collect only what we need to run the App. Depending on how you use it, we may collect:

• Account information. HabitGuild creates an account for you when you finish onboarding, so your progress can be saved. You choose whether to attach an email address to it:
  • Without an email — the account is only an anonymous identifier. We hold no name and no email address for you.
  • With Google Sign-In — we also receive your name, email address and a unique account identifier from Google. We never receive your Google password.
  Attaching an email is what makes an account recoverable — see Section 4.
• Habit and app activity data. Habits you create, completions, streaks, XP, levels, Coins, Gems, quests, mini-game progress, and similar in-app activity. This data is written to your device first and synced to our servers once you finish onboarding — see Section 4.
• Purchase information. If you make a purchase, the app store you installed from — Google Play, or the Apple App Store on iOS — processes the payment and tells us whether it succeeded. We never collect or store your card or payment details.
• Device and diagnostic information. Device type, operating-system version, app version and language settings, plus crash reports and general information about how features are used — the kind of signal that tells us a screen is confusing or a bug is hurting people, so we can fix it (see Section 5).
• Website and waitlist data. If you join our waitlist or visit our website, we may collect your email address and basic analytics (such as referral source).

2. How we use your information

• Provide, operate, and maintain the App and your account;
• Save and sync your habits, progress, and Virtual Items;
• Process and validate purchases through the app stores;
• Diagnose problems, fix bugs, and improve features;
• Create aggregated, de-identified statistics (see the next section);
• Communicate with you about updates, support requests, or — only if you opted in — marketing;
• Protect against fraud, abuse, and violations of our Terms;
• Comply with legal obligations.

We do not sell your personal information.

3. Aggregated and de-identified data

We look at how the App is being used in the form of de-identified, aggregated statistics. Before any of that analysis happens, everything that identifies you — your name, email address, account identifier — is removed, so what is left describes the App rather than any person.

Those statistics are how we understand whether HabitGuild is working, and they inform what we decide to build, change or remove. Two commitments go with this:

• We will not attempt to re-identify you from aggregated data, and we will not publish or share statistics in any form that could identify you.
• Your personal information — your name, email, or your individual habit data tied to you — is never sold or handed to third parties for their own use.

4. Where your data is stored, and when it syncs

HabitGuild is local-first. Your habits and progress are written to your device first, and the App works without an internet connection.

When you finish onboarding, an account is created and your data begins syncing to our servers (see Section 5) so that it does not depend on one device. What that account can do for you depends on the choice in Section 1:

• With an email attached. You can sign in on another device and recover your data.
• Without an email attached. The account cannot be recovered. If you lose the device, uninstall the App, or clear its data, that progress is gone — there is nothing linking the account to you, so we cannot identify it or restore it.

Use one device at a time. Because the App keeps working offline, changes made on a device that has not synced can conflict with changes made elsewhere, and progress can be lost or left inconsistent. If you sign in on a second device while the first one is online, the App will warn you. We recommend one device per account.

We may need to delete stored data at some point — for technical, security or cost reasons. Where circumstances allow, we will give notice in the App before we do.

5. Third-party service providers

We rely on a small number of providers to operate the App. Each processes data only as needed to provide their service:

• Google — Google Sign-In and authentication.
• Supabase — backend database, authentication, and storage of synced data.
• Google Play, and Apple on iOS — app distribution and payment processing.
• RevenueCat — purchase validation, if paid features are enabled. It receives an app-scoped identifier, not your email.
• Google Firebase (Analytics / Crashlytics) — crash reporting and usage measurement.
• Cloudflare — hosting and serving our website.
• An email provider — waitlist and email communication, only if you sign up for it.

These providers may store data on servers located outside your country, including in the United States and the European Union.

6. Advertising

The App currently contains no third-party advertising and no ad trackers. If we ever introduce advertising in a future version, we will update this Policy and the store data-safety disclosures before ads appear, and where the law requires it we will ask for your consent.

7. Cookies and similar technologies

Our website may use cookies for basic functionality and analytics. You can control cookies through your browser settings. The mobile App does not use browser cookies; if analytics is enabled it may use an app-scoped device identifier for crash reporting and usage measurement.

8. How we share information

We share information only:

• With the service providers listed in Section 5, to operate the App;
• To comply with the law, a legal process, or a valid government request;
• To protect our rights, safety, and property, or those of our users;
• In connection with a business transfer (such as if the App is acquired), in which case we will notify you.

We do not sell or rent your personal information to third parties.

9. Data retention, account deletion and data deletion

We keep your information for as long as your account is active or as needed to provide the App.

How to delete your HabitGuild account and its data. You can do this in either of two ways:

• In the App. Open Settings → Account → Delete account and confirm. No further step is needed.
• By email, without installing the App. Write to habitguildofficial@gmail.com from the email address on your account, with the subject "Account deletion request". We will verify the request and confirm once it is done, normally within 30 days.

If your account has no email attached. Deleting it in the App works normally. But if you no longer have the device, we cannot tell which anonymous account was yours, so there is no email request we can act on. That is the trade-off of an account without an email, and the reason we suggest attaching one.

What is deleted. Deleting your account removes your account record and the personal data tied to it — your name, email address, account identifier, and your synced habits, completions, streaks, XP, levels, Coins, Gems, quests and other in-app progress. This cannot be undone, and Virtual Items are forfeited (see the Terms).

What we may keep, and for how long. We may retain a limited record where the law requires it — transaction and tax records of any purchase (kept for the period required by tax and accounting law), and minimal records needed for security, fraud prevention, or to resolve a dispute. We also keep de-identified, aggregated statistics that can no longer be linked to you, as described in Section 3. Everything else is removed or anonymized within 30 days of your request.

Local data on your device is removed when you delete it or uninstall the App. Deleting your HabitGuild account does not delete your Google account, and does not cancel a subscription — cancel that in your app-store account settings before deleting, as described in the Terms.

10. Your privacy rights

Wherever you live, you can access, correct, delete, or receive a portable copy of your personal data, object to or restrict certain processing, and withdraw consent at any time. We apply these rights to every user, not only to those whose local law requires them. To exercise any of them, contact us at the address in Section 14, or delete your account directly as described in Section 9. We will not discriminate against you for exercising your rights.

Depending on where you live, specific laws also apply:

• Colombia. We operate from Colombia and handle personal data under Ley 1581 de 2012 and its implementing decrees. You have the constitutional right of habeas data — to know, update, rectify and delete your personal data, to ask on what basis we process it, and to complain to the Superintendencia de Industria y Comercio (SIC). Where we rely on your authorization, you may withdraw it at any time.
• European Economic Area and United Kingdom. These rights arise under the GDPR, including the right to lodge a complaint with your national supervisory authority.
• United States. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of any "sale" or "sharing" of personal information. We do not sell or share your personal information, so there is nothing to opt out of. Residents of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Texas, Oregon and Utah) have equivalent rights, which we honour on the same terms.
• Japan. We handle personal information in line with the Act on the Protection of Personal Information (APPI). The purposes for which we use your information are set out in Section 2, our transfers outside Japan are described in Section 12, and you may ask us to disclose, correct, or stop using your data, or raise a complaint, at the address in Section 14.

11. Children's privacy

The App is not directed to children under 13, and we do not knowingly collect personal data from them. If we learn that we have collected personal data from a child under 13 without appropriate consent, we will delete it. Parents or guardians who believe their child has provided us data should contact us at the address in Section 14.

12. International data transfers

We operate from Colombia. The providers listed in Section 5 process data on our behalf, and their servers are located principally in the United States and the European Union. This means that if you use the App from Japan, the EEA, the United Kingdom, or anywhere else, your information will be transferred to and stored in those countries, whose data-protection laws differ from your own.

Where the law requires a safeguard for those transfers, we rely on the protections in our providers' data-processing terms — including the European Commission's Standard Contractual Clauses, and equivalent contractual measures for transfers under the APPI and Ley 1581 de 2012 — and on the European Commission's adequacy decision for Japan where it applies. If you would like details of the safeguards for a particular transfer, ask us at the address in Section 14.

13. Security

We use reasonable technical and organizational measures to protect your information: all traffic between the App and our servers is encrypted in transit, server-side access rules restrict each account's data to that account, and locally stored data relies on your device's operating-system protections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Changes and contact

We may update this Policy from time to time. If we make material changes, we will update the date at the top and, where appropriate, notify you within the App. Continued use after changes take effect constitutes acceptance.

Questions or requests: habitguildofficial@gmail.com · habitguild.com

Who is responsible for your data. The data controller — Responsable del Tratamiento under Colombian law — is HabitGuild, operated by an independent developer based in Colombia. Requests about your personal data — access, correction, deletion, proof of the authorization you gave us, or a complaint — are handled at habitguildofficial@gmail.com, which is the contact point for this purpose. Section 15 sets out how, and how quickly, those requests are answered.

15. How to make a request, and how long we take

Write to habitguildofficial@gmail.com from the email address on your account, and tell us what you want: a copy of your data, a correction, deletion, proof of the authorization you gave us, or that you are withdrawing it. Include enough detail for us to identify your account. If you are writing on someone else's behalf, say so and show that you are entitled to.

We answer every request as quickly as we can. Where Colombian law sets the clock — Ley 1581 de 2012 — it works like this:

• A query (consulta) — you want to know what data we hold or how we use it: answered within 10 business days. If we cannot, we will tell you why and answer within a further 5 business days.
• A claim (reclamo) — you want data corrected, updated or deleted, or you believe we have breached the law: answered within 15 business days from the day after we receive it. If we cannot, we will tell you why and answer within a further 8 business days.

Deleting an account is completed within 30 days, as described in Section 9. If you are not satisfied with our answer, you may complain to your local data protection authority — in Colombia, the Superintendencia de Industria y Comercio (SIC), after first raising the matter with us.

Entry into force. This Policy takes effect on 15 August 2026 and remains in force while HabitGuild operates. We keep personal data for as long as your account is active, and the databases described here are maintained for the duration of that treatment and of the legal retention periods set out in Section 9.