Danusha Hewagama

Introduction

HabitRing ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application HabitRing (the "App"). Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Account Information

When you create an account, we collect:

• Email address
• Display name
• Profile image (optional)
• Authentication provider (Email, Google Sign-In, or Apple Sign-In)
• Account creation date and last login timestamp
• Ring ID (unique identifier for friend connections)

2. Habit Data

We collect and store information about your habits, including:

• Habit names and descriptions
• Habit categories
• Completion status and dates
• Habit frequencies and schedules
• Streak information
• Progress statistics
• Paired habits (habits shared with friends)

3. Social Features

To enable social features, we collect:

• Friend relationships (pending and accepted friends)
• Friend requests sent and received
• Shared habit data with friends
• Activity information related to paired habits

4. User Preferences

We store your app preferences, including:

• Notification settings
• Dark mode preferences
• Reminder times
• Other app customization settings

5. Device and Usage Information

We automatically collect certain information about your device and how you use the App:

• Device type and operating system version
• App version and build number
• Usage analytics (via Firebase Analytics)
• Crash reports and error logs (via Firebase Crashlytics)
• Performance metrics

6. Contact Information

If you contact us through the in-app contact form, we collect:

• Your name and email address
• Your message content
• Any attachments you provide (images, screenshots)

7. Local Storage

We store certain information locally on your device:

• User ID (for session persistence)
• Last login timestamp
• First launch flag
• Cached profile images

How We Use Your Information

We use the information we collect to:

• Provide and maintain the App: Create and manage your account, store your habits, and sync data across devices
• Enable social features: Connect you with friends, facilitate habit sharing, and support paired habits
• Improve the App: Analyze usage patterns, identify bugs, and enhance user experience
• Communicate with you: Respond to your inquiries, send important updates, and provide customer support
• Ensure security: Authenticate users, prevent fraud, and protect against unauthorized access
• Comply with legal obligations: Meet legal requirements and respond to legal processes

Third-Party Services

We use the following third-party services that may collect and process your information:

Firebase Services (Google)

• Firebase Authentication: Handles user authentication and account management
• Cloud Firestore: Stores your account data, habits, and social information
• Firebase Storage: Stores profile images and other user-generated content
• Firebase Analytics: Collects usage analytics and app performance data
• Firebase Crashlytics: Collects crash reports and error logs
• Firebase Remote Config: Manages app configuration and feature flags

Firebase Privacy Policy: https://firebase.google.com/support/privacy

Google Sign-In

• Purpose: Allows you to sign in using your Google account
• Data Collected: Email address, display name, profile image (if provided by Google)
• Google Privacy Policy: https://policies.google.com/privacy

Apple Sign-In

• Purpose: Allows you to sign in using your Apple ID
• Data Collected: Email address, display name (if provided by Apple)
• Apple Privacy Policy: https://www.apple.com/privacy/

EmailJS

• Purpose: Processes contact form submissions and sends emails to our support team
• Data Collected: Name, email address, message content, and attachments
• EmailJS Privacy Policy: https://www.emailjs.com/legal/privacy-policy/

Data Storage and Security

Cloud Storage

Your data is stored securely in Firebase (Google Cloud Platform) using:

• Standard TLS/SSL encryption for data in transit
• Standard AES encryption for data at rest
• Secure authentication mechanisms

Local Storage

Some information is stored locally on your device:

• User ID and session information (stored in UserDefaults)
• Cached profile images (stored in device cache)

Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Secure authentication protocols
• Encrypted data transmission
• Access controls and authentication
• Regular security assessments

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

With Your Consent

• When you explicitly choose to share habits with friends
• When you pair habits with other users

Service Providers

We may share information with third-party service providers who perform services on our behalf:

• Firebase (Google) for data storage and analytics
• EmailJS for contact form processing

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Update

• You can access and update your account information through the App settings
• You can modify your display name and profile image at any time

Delete Your Account

• You can delete your account and all associated data through the App settings
• Account deletion will remove all your habits, friend connections, and personal information
• Some information may be retained as required by law or for legitimate business purposes

Opt-Out of Analytics

• You can opt-out of Firebase Analytics by disabling analytics in your device settings
• Note: Some analytics may still be collected for essential app functionality

Manage Friend Connections

• You can accept or reject friend requests
• You can remove friends at any time
• You can unpair shared habits

Contact Preferences

• You can manage notification preferences in the App settings
• You can choose not to receive certain types of communications

Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you delete your account:

• Your account information will be deleted within 30 days
• Some anonymized analytics data may be retained for statistical purposes
• Information required by law may be retained longer

Children's Privacy

HabitRing is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the App, you consent to the transfer of your information to these countries.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date at the top of this policy
• Sending you a notification (if significant changes are made)

Your continued use of the App after any changes constitutes your acceptance of the new Privacy Policy.

Contact Us

Additional Information

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect
• The right to delete your personal information
• The right to opt-out of the sale of personal information (we do not sell your information)

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to access your personal data
• The right to rectification
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing

To exercise these rights, please contact us using the information provided above.