Privacy policy
Last updated: June 2026
Overview
Habitinator is a productivity application for habits, scheduled dailies, and to-dos. This policy describes what we collect when you use the web app at habitinator.app and related services, and how we use it.
Data we collect
- Account information — email address and password hash when you register.
- Board data — habits, dailies, to-dos, tags, focus timer sessions, and activity history you create in the app.
- Preferences — display name, theme, time zone, date format, and notification settings you choose.
- Technical data — standard server logs (IP address, user agent, request timestamps) for security and reliability.
How we use data
We use your data to authenticate you, sync your board across devices, show statistics, send optional notifications you configure, and operate and secure the service. We do not sell your personal data or use third-party advertising trackers on the web app.
Cookies and storage
The web app uses essential session cookies for sign-in and security (including antiforgery protection). Native clients may use a JWT instead of cookies. We do not use non-essential analytics or advertising cookies.
Retention and deletion
We retain your account and board data while your account is active. You can delete your account from Settings when signed in; this removes associated board data subject to backup retention limits.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Contact us using the details below to exercise those rights.
Security
We use HTTPS, access controls, and industry-standard practices to protect your data. Report security issues via our security.txt contact.
Contact
Questions about this policy: security@habitinator.app (or open an issue on our GitHub repository).