Habit of the Day logoHabit of the Day
Back to home

Legal

Privacy Policy

Habit of the Day is a consistency-first habit tracker. This policy explains what personal data we collect, why we collect it, how we look after it, and the choices you have.

Last updated:

1. Introduction

Habit of the Day (“Habit of the Day”, “we”, “us”) provides a web and installable (PWA) habit tracking application that helps people build habits using a Consistency Score rather than streaks. This policy applies to the app, our website at habitoftheday.com, and any related services.

We act as the data controller for the personal data described below. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the UK Data Protection Act 2018 and other privacy laws that apply to us.

2. Information We Collect

Account information

  • Your email address.
  • Your authentication credentials. Passwords are handled by our authentication provider and stored only as salted cryptographic hashes — we never see or store your password in readable form.
  • The authentication provider you sign in with (email and password, magic link, Google, or Apple).
  • Optional profile details you choose to give us, such as first name, last name and date of birth, plus your newsletter preference.

Habit data

  • The habits you create, including titles, categories, priority, frequency and any Tiny Habit fallback you define.
  • Your completions, skips and the optional notes you attach to a completion.
  • Streak-independent consistency metrics — your Consistency Score and related history.
  • Grace Days applied to a habit, and archived habits you have kept for their statistics.
  • Habits you save from the Discover feed.

Wellbeing data

Habit of the Day does not collect mood, energy, sleep or stress check-ins. Earlier versions of the app included wellbeing check-ins; that feature was removed and the associated records were deleted. If you write about how you feel inside a habit note, that note is treated as your private habit data and is covered by this policy.

We never sell your data. Your habit data, notes and profile details are never sold, rented or shared with advertisers or data brokers.

Device and technical information

  • Browser type and version.
  • Operating system and device type.
  • IP address, and the approximate (city or country level) location it implies.
  • Crash logs and error reports.
  • Technical identifiers such as your push notification subscription endpoint and your time zone, used to deliver reminders at the right local time.

Payment information

Payments for Habit of the Day Pro are processed by Stripe. Habit of the Day never stores your full card details. We store only the identifiers and subscription status Stripe returns to us (for example a customer reference, plan, status and renewal date) so we can unlock Pro features on your account.

Usage analytics

We may collect anonymous or aggregated product analytics — such as pages viewed, features used and events like “habit added” — to understand how the app is used and to improve it. Analytics events are designed to exclude the private content of your habits and notes; we do not send habit titles or note text to analytics providers.

3. How We Use Your Information

  • Creating and maintaining your account.
  • Authenticating you and keeping your session secure.
  • Syncing your habits and settings across your devices.
  • Tracking your habits, completions and Consistency Score.
  • Storing the optional notes you attach to completions.
  • Sending the reminders and push notifications you have configured.
  • Managing Pro subscriptions, billing and entitlements.
  • Detecting, preventing and investigating fraud, abuse and security incidents.
  • Providing customer support and responding to your messages.
  • Measuring and improving the performance, reliability and design of the service.
  • Sending product or newsletter emails where you have opted in.

5. Cookies and Local Storage

We use essential cookies and browser storage to keep you signed in and to remember preferences such as your theme. For the full breakdown, see our Cookie Policy.

6. Data Storage and Security Measures

  • Your data is stored in a managed PostgreSQL database provided by Supabase.
  • Depending on our infrastructure configuration, data may be stored and processed in the European Union or the United States.
  • Data is encrypted in transit using TLS, and encrypted at rest by our infrastructure providers.
  • Access to production data is restricted, and database-level row security rules ensure users can only read and write their own records.

7. Third Party Services

We rely on a small number of processors to run the service:

  • Supabase — database, authentication and backend hosting.
  • Stripe — payment processing and subscription billing.
  • Google — optional “Sign in with Google” authentication, and analytics where enabled.
  • Apple — optional “Sign in with Apple” authentication.
  • Email provider — transactional and authentication emails, and newsletter delivery where you have opted in.
  • Push notification provider — the Web Push service built into your browser or operating system, used to deliver reminders.

Each provider operates under its own privacy policy and, where required, a data processing agreement with us. We share only the data needed for them to perform their function.

8. International Transfers

Some of our providers operate outside the UK and the European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations, the European Commission’s adequacy decisions, or Standard Contractual Clauses together with the UK International Data Transfer Addendum.

9. Data Retention

  • Account and habit data is kept for as long as your account exists, so your history and Consistency Score remain accurate.
  • When you delete your account, your account, habits, completions, notes, preferences, reminder schedules and push subscriptions are permanently removed. Deletion is completed immediately in-app, and within 7 days for requests made by email after we verify your identity.
  • Limited records may be retained where we are legally required to keep them — for example billing and tax records — or where needed to resolve disputes or prevent fraud.
  • Backups are rotated on a short schedule and any residual copies expire as part of that rotation.

You can start a deletion at any time from the Delete Account page.

10. Your Rights

Subject to the conditions in applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your data (the “right to be forgotten”).
  • Receive your data in a portable, machine-readable format.
  • Object to processing based on our legitimate interests.
  • Request that we restrict processing in certain circumstances.
  • Withdraw consent at any time, for example by turning off notifications or unsubscribing from emails.

To exercise any of these rights, email support@habitoftheday.com. We will respond within one month. If you are in the UK you may also complain to the Information Commissioner’s Office (ICO); in the EU you may complain to your local supervisory authority.

11. Children’s Privacy

Habit of the Day is intended for people aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, email us and we will delete the account and its data.

12. Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit, hashed credentials, row-level database access rules, least-privilege access to production systems, and dependency and security scanning.

No method of transmission or storage over the internet is completely secure. While we work to protect your data, we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the relevant regulator as required by law.

13. Changes to This Policy

We may update this policy as the product evolves. The “last updated” date above always reflects the current version. If we make a material change, we will let you know by email or by an in-app notification before it takes effect.

14. Contact Us

Questions about this document? Email support@habitoftheday.com and we’ll respond as soon as we can.

You can also use our contact page.