Privacy Policy

Effective Date: March 7, 2026

Developer: neron (Batuhan Ayhan)

App: HabitShift - Smart Tracker (app.neron.habitcoach)

1. Information We Collect

Data Type	Purpose	Storage
Anonymous User ID	App functionality (Firebase Anonymous Auth)	Firebase
Habit Data (names, completions, streaks)	Core app functionality	On your device (SQLite); copied to Firebase (Firestore) only if you sign in with Apple or Google
Step Count Data	Optional pedometer feature	Local device only
Purchase History	Subscription management	RevenueCat
App Usage Analytics	Crash reporting & performance	Firebase Analytics & Crashlytics
AI Interaction Data	AI coaching prompts sent to OpenAI via Firebase Functions	Not stored permanently

2. Information We Do NOT Collect

We do not collect any of the following:

• Real names or personal identifiers
• Email addresses
• Phone numbers
• Location data
• Contacts
• Photos or media

3. How We Use Your Information

• Anonymous User ID: To associate your subscription status and enable core app features without identifying you personally.
• Habit Data: Stored exclusively on your device to track your habits, completions, and streaks. On your device this data stays local. If you sign in with Apple or Google, your habits, check-ins and daily summaries are also copied to your private account in Firebase (Firestore) so they can be restored on a new device; anonymous users are not copied. Habit data also leaves the device when you explicitly consent to AI coaching (see below), and a limited profile (display name, avatar, invite code and aggregate counts without habit names) is stored if you use Buddies.
• Step Count Data: Processed locally on your device for the optional pedometer feature.
• Purchase History: Managed through RevenueCat to verify and maintain your subscription status.
• App Usage Analytics: Collected via Firebase Analytics and Crashlytics to identify crashes and improve app performance.

3.1 AI Coaching & Third-Party AI Data Sharing

When you use the AI coaching feature and grant permission, the following data is shared with OpenAI (via our secure server proxy):

• What is sent: Habit names, daily completion status, streak counts, weekly completion rates, and day-of-week breakdown.
• What is NOT sent: Your real name, email, phone number, location, device identifiers, or any other personally identifiable information.
• Who receives the data: OpenAI processes the data through their API (model: GPT-4o-mini) to generate personalized coaching responses.
• Data retention: Our server does not permanently store the AI prompts or responses. OpenAI processes the data according to their Privacy Policy and API Data Usage Policy, which states that API data is not used to train their models.
• How to opt out: You can revoke AI data sharing permission at any time in the app's Settings screen under "AI Data Sharing". The app will continue to work without AI coaching features.

4. Third-Party Service Providers

We use the following third-party services to operate the app. These providers may process limited data as described:

• Firebase (Google): Anonymous authentication and cloud functions. Privacy Policy
• RevenueCat: Subscription and in-app purchase management. Privacy Policy
• Firebase Analytics & Crashlytics (Google): Usage analytics and crash reporting. Privacy Policy
• OpenAI: AI-powered coaching responses. Privacy Policy

5. Advertising

HabitShift does not display any advertisements. We do not share your data with advertising networks.

6. Data Sharing

We do not sell, trade, or share your personal data with third parties, except with the service providers listed above, which are essential to the app's operation.

7. Data Security

All data transmitted between the app and our service providers is encrypted using HTTPS (TLS). Your habit data is stored locally on your device using SQLite and is not accessible to us.

8. Data Retention and Deletion

Since your habit data is stored locally on your device, you have full control over it. To delete your account and your data, open Settings and choose Delete Account. This permanently removes your account, your buddy connections and the data backed up to our cloud (habits, check-ins, daily summaries and your profile), and signs you out; if you signed in with Apple, the Apple sign-in token is revoked. Delete All Data removes only the data stored on this device. Short-lived nudge records (user IDs and dates) cannot be removed from within the app and expire under Firebase's data retention policies; you can also request deletion by contacting us.

9. Children's Privacy

HabitShift is not directed at children under the age of 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with data, please contact us and we will promptly delete it.

10. Your Rights (GDPR & CCPA)

For European Users (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

For California Users (CCPA)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us at the email address below.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated effective date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: