Privacy Policy

Depending on the features you use, we process:

• Account information: email address, name, username, authentication provider, account identifier, and account settings.
• Onboarding information: goals, triggers, habit-related answers, session patterns, and self-reflection scores.
• Check-in information: mood, urge level, stress, anxiety, loneliness, sleep, energy, notes, streaks, relapse entries, and related progress information.
• Generated information: non-medical risk estimates, habit insights, and AI-generated check-in feedback.
• AI Mentor information: messages and relevant context sent to the AI Mentor, including recent habit and check-in context where applicable.
• Purchase information: product identifier, entitlement status, transaction status, subscription status, and store country. We do not receive complete payment-card details.
• Optional analytics: pseudonymous screen and feature-use events, including check-in, relapse, purchase, and AI-feature usage. Analytics is disabled by default. Notes and AI messages are not included in analytics.
• Technical information: app version, device type, operating system, diagnostic information, IP-derived information, and security events.
• Community information, if community features are available: content you publish, comments, reports, and blocked-user records.

We do not request precise location, contacts, microphone recordings, or photo-library access for core App functionality.

Information about sexual habits, mental wellbeing, urges, relapses, mood, and related behaviour may be considered health information or other sensitive personal information.

Where required by law, we request explicit consent before processing this information. Consent can be withdrawn, but withdrawal may prevent features that require this information from operating.

The App’s scores and estimates are self-help planning tools. They are not medical diagnoses or clinical assessments.

We use information to:

• Create, authenticate, and secure accounts.
• Provide and synchronise check-ins, progress tracking, daily activities, and other App features.
• Personalise your habit-change plan.
• Generate AI Mentor responses and AI check-in feedback.
• Calculate non-medical habit and risk indicators.
• Process, verify, and restore purchases.
• Schedule local notifications requested by you.
• Provide customer support.
• Prevent abuse, fraud, and security incidents.
• Comply with legal obligations.
• Improve the App through optional analytics when you enable them.

We do not sell personal information. We do not use health information, sexual-behaviour information, notes, or AI messages for advertising or targeted advertising.

AI Mentor messages and relevant context are transmitted securely through a Supabase Edge Function to OpenRouter and the model provider selected to generate a response, currently including OpenAI models.

AI check-in requests may contain current and historical check-in values, relapse patterns, streak information, risk estimates, and notes.

AI Mentor conversation history is stored in the App’s private storage on your device. It is not stored in our Supabase database. It remains on the device until you sign out, erase App data, delete your account through the App, clear the App’s storage, or uninstall the App.

AI-generated check-in feedback is stored with the corresponding check-in in our database.

AI providers may temporarily process or retain requests according to our account configuration, contractual arrangements, and their legal obligations. Do not submit information you do not want processed by an AI provider.

AI responses may be inaccurate or inappropriate. They are not medical advice, treatment, diagnosis, therapy, or emergency assistance.

Depending on your location, we rely on:

• Performance of a contract to provide accounts, purchases, and requested App functionality.
• Explicit consent for sensitive information and AI processing where required.
• Consent for optional analytics.
• Legitimate interests in securing, maintaining, and improving the service where those interests do not override your rights.
• Compliance with legal obligations.

You may withdraw consent through App settings, account deletion, or by contacting us.

We use:

• Supabase for authentication, database hosting, and Edge Functions.
• OpenRouter and underlying model providers, including OpenAI, for AI response generation.
• RevenueCat for purchase validation and entitlement management.
• Apple App Store and Google Play for payments, subscriptions, and transaction records.
• PostHog EU Cloud for optional product-event analytics. Session replay is disabled.
• Apple and Google for social sign-in when selected.
• Expo for application delivery, updates, and notification tooling.
• Vercel for hosting our public website and legal pages.

Providers receive only information needed to perform the relevant service. Their own legal obligations and retention requirements may also apply.

Some providers may process information outside Serbia or your country, including in the European Economic Area and the United States.

Where required, we use appropriate contractual or legal safeguards for international transfers. Contact us for information about applicable safeguards.

Private check-ins, notes, relapse records, and AI conversations are not published publicly.

If community features are available and you deliberately publish a post or comment, that content and its displayed author name may be visible to other users. Do not publish private health information or identifying information about yourself or another person.

Analytics is disabled by default.

If you enable analytics, PostHog receives pseudonymous feature-use events associated with an App identifier. These events may indicate that features such as check-in, relapse logging, purchases, or AI Mentor were used, but do not contain your notes or AI messages.

You can withdraw analytics consent at any time through Settings. Session replay and screen recording are disabled.

HabitBreaker primarily uses notifications scheduled locally on your device. Notification permission can be withdrawn through device settings.

Home-screen widgets may display progress information on your device. Anyone who can see your widgets may be able to see that information.

Information transmitted to our services uses HTTPS/TLS encryption. Authentication is handled by Supabase Auth, and database access is protected with access controls and Row-Level Security policies.

Information stored locally is protected by your device’s operating-system security and App sandbox. Not every locally stored file is separately encrypted.

No service is completely secure. Protect your device and credentials and contact us if you suspect unauthorised access.

Account information and App records are generally retained while your account remains active.

Deleting your account through the App removes your Supabase account and associated App records and clears account-linked local progress on that device.

A request submitted by email will be processed after identity verification and normally completed within 30 days.

Limited records may remain where required for store transactions, accounting, tax, fraud prevention, security, backups, support, or other legal obligations.

Deleting your HabitBreaker account does not cancel an Apple or Google subscription. Subscriptions must be cancelled separately through the applicable store.

Depending on your location, you may have rights to:

• Access your information.
• Correct inaccurate information.
• Receive portable information.
• Delete information.
• Restrict or object to processing.
• Withdraw consent.
• Appeal certain privacy decisions.
• Complain to your local data-protection authority.

Email habitbreaker531@gmail.com to exercise these rights. We may need to verify your identity.

HabitBreaker does not sell personal information or share it for cross-context behavioural advertising.

HabitBreaker addresses sexual habits and personal wellbeing and is not intended for anyone under 16.

Do not create an account if you are under 16. If we learn that information was collected from someone below the permitted age, we will investigate and delete it where required.

We may update this Policy when the App, our providers, or legal requirements change. We will update the date above and provide additional notice where required.

If a new purpose legally requires consent, we will request consent rather than relying only on continued use.

Data controller: Marko Petrovic

Contact location: Novi Sad, Republic of Serbia

Email: habitbreaker531@gmail.com