Privacy Policy

1. Introduction

Welcome to HabitBlocks ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service"). By using HabitBlocks, you agree to the collection and use of information in accordance with this policy.

2. Definitions

For the purposes of this Privacy Policy:

• "Personal Information" means any data that can be used to identify an individual, including but not limited to name, email address, IP address, device identifiers, or account activity patterns.
• "Service" refers to the HabitBlocks mobile application and any associated features, functionality, or online services we provide.
• "We", "Us", or "Our" refers to the HabitBlocks development team and the legal entity operating the Service.
• "User", "You", or "Your" refers to the individual person using our Service.
• "Third Parties" refers to external companies, services, or individuals that are not part of HabitBlocks.

3. Information We Collect

3.1 Personal Information

When you create an account, we collect:

• Account Information: Email address, full name, and password (encrypted)
• Profile Information: Display name, preferences, and profile settings
• Authentication Data: Google Sign-In or Apple Sign-In credentials (if used)

3.2 Habit Tracking Data

To provide our core functionality, we collect:

• Habit Information: Habit names, descriptions, effort levels, and block shapes
• Progress Data: Completion dates, streaks, and achievement unlocks
• Board Data: Board names, themes, color palettes, and grid configurations
• Reward Information: Custom rewards and completion triggers

3.3 Social Features Data

When you use our social features:

• Friends List: User IDs of connected friends and friendship status
• Shared Boards: Collaboration data and board sharing permissions
• Activity Data: Interactions with shared boards and friend activities

3.4 Usage Analytics

We collect analytics data to improve our Service:

• App Usage: Screen views, feature usage, session duration
• Performance Data: App performance metrics, error logs, crash reports
• Device Information: Device type, operating system, app version
• Interaction Data: Button taps, navigation patterns, tutorial completion

3.5 Subscription Data

For premium features:

• Payment Information: Subscription status, purchase dates (processed by RevenueCat)
• Billing Data: Subscription tier, renewal dates, payment status
• Payment Security: We do not store credit card or payment method information; all billing data is handled through app stores and RevenueCat

3.6 Technical Data

We automatically collect:

• Device Information: Device ID, IP address, timezone, device settings
• Log Data: Error logs, crash reports, and technical diagnostics
• Connection Data: Network status, sync events, offline actions

3.7 AI Insights and Personalization Data

To provide AI-powered features and personalized recommendations:

• Habit Placement Patterns: Your daily, weekly, and monthly tracking behaviors
• AI-Generated Recommendations: Habits, rewards, and board themes suggested to you
• AI Interaction Feedback: Your responses to AI suggestions (accepted, rejected, modified)
• Behavioral Analytics: Aggregated patterns used to improve AI recommendations
• Weekly Insights: AI-generated summaries of your habit patterns and progress

3.8 User-Generated Content

When you use creative features:

• Creative Mode Drawings: Pixel art, drawings, and custom designs you create
• Custom Color Palettes: Color schemes you design and save
• Custom Themes: Visual themes and board customizations you create
• Associated Metadata: Creation dates, modification history, and sharing settings

4. How We Use Your Information

We use the collected information to:

4.1 Core Functionality

• Provide habit tracking and progress visualization
• Enable board creation and customization
• Calculate streaks, achievements, and statistics
• Synchronize data across devices

4.2 Personalization

• Customize app experience based on preferences
• Provide relevant achievements and rewards
• Tailor content based on your usage patterns

4.3 AI Features and Personalization

• Generate personalized habit suggestions based on your activity patterns and goals
• Create weekly behavioral summaries and progress insights using AI analysis
• Improve algorithmic recommendations over time through machine learning
• Provide contextual tips and motivational content based on your habits
• Analyze usage patterns to suggest optimal habit timing and combinations

4.4 Service Improvement

• Analyze app usage to improve features
• Monitor performance and fix bugs
• Develop new features and improvements

4.5 Communication

• Send verification emails for account security
• Provide important service updates
• Send reminder notifications (if enabled)

4.6 Legal and Security

• Comply with legal obligations
• Protect against fraud and unauthorized use
• Ensure service security and integrity

4.7 Social Features

• Connect you with friends and manage friend requests
• Enable board sharing and collaboration
• Show friend statistics and achievements

5. Information Sharing and Disclosure

5.1 Third-Party Service Providers

We share information with trusted partners who assist in providing our Service:

• Supabase: Database hosting and backend services
• Firebase: Analytics, crash reporting, and notifications
• RevenueCat: Subscription management and payment processing
• SendGrid: Email verification and communications
• Google/Apple: Authentication services (if you choose to use them)

Research and Development: Anonymized or aggregated data may be used for internal research, AI model training, and service improvement purposes. This data is stripped of any personal identifiers and cannot reasonably be linked back to an individual user.

5.2 Social Features

When you use social features:

• Friend Visibility: Your display name, achievement count, current streaks, and total habits tracked are visible to accepted friends
• Shared Board Access: Board collaborators can see all habits, progress data, placement history, rewards, and board customizations for shared boards
• Collaboration Activity: Real-time updates of block placements, habit additions, and board modifications are visible to all collaborators
• Public Profile Elements: Your username and basic statistics may be visible when you interact with shared content

5.3 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Investigate potential violations of our Terms of Service

5.4 Business Transfers

In case of merger, acquisition, or sale of assets, user information may be transferred as part of the transaction.

6. Data Storage and Security

6.1 Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Data encryption in transit and at rest
• Secure authentication protocols
• Regular security updates and monitoring
• Limited access to personal information

6.2 Data Location

Your data is primarily stored in the United States on servers provided by Supabase, with additional processing through Firebase services. All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. We ensure all storage and processing locations meet appropriate security standards and comply with applicable data protection regulations.

International Transfers: Where required by law, we rely on Standard Contractual Clauses (SCCs) or equivalent legal mechanisms to ensure adequate protection for international data transfers.

6.3 Data Retention

We retain your information for as long as:

• Your account remains active
• Necessary to provide our services
• Required by law or legitimate business interests
• You can request deletion at any time (see Your Rights section)

7. Your Rights and Choices

7.1 Account Access and Control

You can:

• Access and update your profile information
• Modify privacy settings and notification preferences
• Delete habits, boards, and other content you've created
• Manage friend connections and shared boards

7.2 Data Rights

Depending on your location, you may have rights to:

• Access: Request a copy of your personal information
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format (JSON or CSV)
• Objection: Object to certain processing activities

Data Export Details: When you request data portability, we will provide your information in JSON or CSV format within 30 days. The export includes your profile information, all habit and board data, progress history, achievement records, and friend connections (but not your friends' private data).

Additional Rights: You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal information in accordance with applicable data protection laws.

7.3 Communication Preferences

You can control:

• Email notifications and marketing communications
• Push notifications for reminders and updates
• Friend request and collaboration notifications

7.4 Analytics and Tracking

HabitBlocks does not:

• Serve personalized advertisements
• Use tracking data for marketing purposes outside our app
• Share personal data for cross-context behavioral advertising
• Sell your personal information to third parties

You can:

• Limit tracking through your device's privacy settings
• Disable analytics features by contacting our support team
• Control notification preferences through app settings

Important Note: Disabling analytics may impact the accuracy and personalization of AI-generated habit suggestions, weekly insights, and behavioral recommendations, as these features rely on usage pattern analysis.

8. Children's Privacy

HabitBlocks is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information immediately.

Parents: If you believe your child has provided personal information to us, please contact us immediately at hello@thecraftedcode.com so we can remove the information and terminate the account.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

10. Third-Party Links and Services

Our app may contain links to external websites, social media platforms, or third-party services that are not operated by us. We are not responsible for the content, privacy practices, or security of these external services. We encourage you to review their privacy policies and privacy settings before interacting with or providing information to these third parties.

This includes but is not limited to:

• Links shared within the app by users
• Social sharing features that redirect to external platforms
• Help documentation or support resources hosted externally
• Payment processing through app stores

User Guidance: We encourage you to review the privacy settings and terms of those third parties before using their services through our app.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our app
• Sending an email notification
• Providing in-app notifications

Your continued use of the Service after changes constitute acceptance of the updated policy.

12. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: hello@thecraftedcode.com
App Support: Through the in-app support feature

For data protection inquiries specifically, you can reach us at:
Privacy Email: hello@thecraftedcode.com

13. Legal Basis for Processing (EU Users)

If you are in the European Union, we process your personal information based on:

• Consent: For marketing communications and some analytics
• Contract: To provide our services and fulfill our obligations
• Legitimate Interest: For service improvement and security
• Legal Obligation: To comply with applicable laws

14. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we don't sell data)
• Right to opt-out of sharing for cross-context behavioral advertising (we don't share for this purpose)
• Right to non-discrimination for exercising these rights

Additional CCPA Disclosures:

• We do not sell personal information and have not sold personal information in the past 12 months
• We do not share personal data for cross-context behavioral advertising
• We may share anonymized, aggregated data for research purposes that cannot identify individuals

To exercise these rights, please contact us using the information provided above.