Habitus

Last updated: [Date to be added]

1. Who we are

Habitus is operated by [Operator name and address to be added — see Impressum]. We are responsible for the processing of your personal data as described in this policy.

2. What data we collect

We collect only the data necessary to provide the service:

Account data: your email address and first name, provided at registration.
Usage data: the content you create within Habitus (habits, tasks, notes, links, reviews). This data is stored to provide the service and is not used for any other purpose.
Technical data: standard server log data (IP addresses, request timestamps) retained for security purposes.
Timezone: your browser timezone, collected at registration to support time-sensitive features.

We do not collect behavioral analytics, advertising identifiers, or any tracking data beyond what is necessary for the service to function.

3. Legal basis for processing (GDPR)

We process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

Performance of a contract (Art. 6(1)(b)): Account and usage data are processed to deliver the service you have registered for.
Legitimate interest (Art. 6(1)(f)): Server log data is retained for security monitoring purposes.

4. How we use your data

Your data is used exclusively to provide the Habitus service. We do not sell, share, or monetize your personal data. We do not use your data for advertising.

5. Data storage and security

Your data is stored on servers [location to be specified]. We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction.

Authentication is performed via magic links sent to your email address. We do not store passwords.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, your data will be removed from our systems within [number of days to be specified] days.

7. Your rights (GDPR)

Under the GDPR, you have the following rights:

Right of access (Art. 15): you may request a copy of the data we hold about you.
Right to rectification (Art. 16): you may request correction of inaccurate data.
Right to erasure (Art. 17): you may request deletion of your data.
Right to data portability (Art. 20): you may request your data in a machine-readable format.
Right to object (Art. 21): you may object to processing under legitimate interest.

To exercise any of these rights, contact us at [contact email to be added].

8. Cookies and local storage

Habitus uses browser local storage (not cookies) to store your session state and preferences (such as dark mode and onboarding completion). This data is stored only on your device and is not transmitted to our servers.

We do not use advertising cookies or third-party tracking cookies.

9. Third-party services

Habitus uses the following third-party services to deliver the platform:

[Email provider — to be specified] for sending authentication magic links.
[Hosting provider — to be specified] for server infrastructure.

Each provider has its own privacy policy governing their use of data.

10. Contact and complaints

For privacy-related questions or requests, contact [contact email to be added].

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the relevant supervisory authority in your country of residence.

Privacy Policy