Privacy Policy

Last updated: October 26, 2026

At Habitify, we believe building better habits should never come at the expense of your privacy.

This Privacy Policy explains what information we collect, how we use and protect it, when we share it with service providers, and what choices you have regarding your personal data.

We want this policy to be understandable, so we've written it in plain language wherever possible.

1. Who We Are

Habitify is operated by Unstatic Co., Ltd, a company registered in Vietnam.

Company: Unstatic Co., Ltd
Address: 266 Doi Can, Ngoc Ha, Hanoi, Vietnam
Email: contact@habitify.me
Website: https://habitify.me

Unstatic Co., Ltd is responsible for processing personal information as described in this Privacy Policy.

This policy applies to Habitify's mobile applications, desktop applications, web application, website, and related services, including Habi AI (collectively, the "Services").

2. Information We Collect

We collect information in three main ways: information you provide, information collected automatically when you use Habitify, and information received from services you choose to connect.

2.1. Account Information

You can use Habitify without creating a registered account.

If you choose to register or sign in, we may collect:

If you use Habitify without registering, we create an anonymous account identifier that allows us to store and synchronize your data.

Using Habitify without an account does not mean your data remains exclusively on your device. Habitify stores anonymous users' data on our cloud infrastructure as well.

2.2. Habit and Journal Information

When you create and track habits, we collect and store information such as:

This information is stored using Firebase and Google Cloud Platform to synchronize your experience across devices, restore your data, and provide Habitify's features.

Some information you enter may be personal or sensitive. For example, a habit name or journal entry could reveal details about your health, relationships, or daily life.

We process this information to provide the features you choose to use.

2.3. Health and Fitness Information

If you choose to connect a supported health or fitness service, Habitify may access information you authorize from:

Depending on the integration and permissions you grant, this information may include activity measurements, steps, exercise, sleep, and other supported health or fitness metrics.

We use this information to:

Authorized health and fitness data may be synchronized to our cloud infrastructure so your information remains available across supported devices.

We do not use health information obtained from these integrations for advertising or targeted marketing.

You control which integrations you connect and which permissions you grant. You can revoke access through Habitify or the connected service's settings.

You can also delete synchronized health information from Habitify. Disconnecting an integration and deleting previously synchronized information may be separate actions.

See Section 5 for additional information about health data and Habi AI.

2.4. Device and Usage Information

When you use Habitify, we automatically collect certain technical and usage information, including:

We use this information to operate the Services, identify technical problems, understand feature usage, improve the user experience, and measure the effectiveness of our products and marketing.

Some usage and analytics information can be associated with your Habitify account or another persistent identifier. It should not be considered anonymous merely because it does not contain your name or email address.

2.5. Purchases and Subscriptions

When you purchase a subscription or another paid product, payments are processed through the applicable provider:

Habitify operates its own backend to manage subscriptions, entitlements, purchase verification, and subscription status.

We may receive and store information such as subscription plans, purchase identifiers, purchase dates, renewal status, and transaction status.

Payment providers process payment information according to their own privacy policies. We do not require users to provide complete payment card details directly to Habitify for these purchases.

2.6. Communications and Notifications

If you contact our support team, we collect the information you provide in your message and any information necessary to investigate and respond to your request.

If you enable notifications, we store device push notification tokens to deliver habit reminders, progress updates, and other notifications you choose to receive.

We may also use your email address to send:

You can unsubscribe from promotional emails using the unsubscribe link included in those messages.

You can manage push notifications through Habitify's notification settings and your device's operating system settings.

3. Information We Do Not Collect Through Certain Features

Some Habitify features use device capabilities without sending the underlying information to our servers.

Location-Based Reminders

Habitify may request access to your device's location services to provide reminders when you enter or leave a location.

Location detection is handled through your device's operating system. We do not collect or store your precise GPS coordinates or saved reminder locations on our servers for this feature.

Your device may still share location-related information with its operating system provider according to your device settings.

Separately, IP addresses collected during network requests may indicate an approximate geographic region.

Calendar and Screen Time

Where Habitify integrates with device Calendar or Screen Time functionality, we do not collect or synchronize the underlying calendar entries or Screen Time data to our servers.

These features operate using the permissions and capabilities provided by your device's operating system.

4. How We Use Your Information

We use personal information for the following purposes.

Providing Habitify: To create and manage accounts, save habits, synchronize information across devices, deliver reminders, and provide the features you request.

Personalizing your experience: To display progress statistics, streaks, reports, and relevant habit-related insights.

Providing Habi AI: To process requests you choose to make using the Habi AI feature, subject to the permissions and disclosures described in Section 5.

Operating and improving our Services: To diagnose errors, analyze feature performance, understand how Habitify is used, and improve its reliability and usability.

Managing subscriptions: To verify purchases, provide access to paid features, manage entitlements, and address billing issues.

Communicating with you: To respond to support requests, send important service information, and provide marketing communications where permitted.

Advertising measurement and optimization: To understand the effectiveness of advertising campaigns and improve how we promote Habitify, subject to applicable privacy requirements and user choices.

Security and legal compliance: To protect accounts and systems, investigate suspected misuse, and comply with applicable legal obligations.

We do not use your personal information for unrelated purposes without an appropriate legal basis or any additional permission required by law.

5. Habi AI and Third-Party Artificial Intelligence

Habi AI is an optional feature that allows you to interact with your habit information using artificial intelligence.

Because Habi AI relies on an external AI service, this section explains how information is shared and processed.

5.1. AI Service Providers

Habi AI uses the following third-party services:

OpenRouter (OpenRouter, Inc.)
OpenRouter provides the API infrastructure through which Habitify routes AI requests.

Privacy Policy: https://openrouter.ai/privacy

OpenAI
OpenAI provides the AI models that process Habi's requests and generate responses.

Information about OpenAI API data handling: https://developers.openai.com/api/docs/guides/your-data

Habi AI currently uses OpenAI models routed through OpenRouter.

5.2. Information Shared with AI Providers

When you ask Habi to analyze your information or respond to a question, Habitify may transmit the information relevant to your request to OpenRouter, which forwards it to OpenAI for processing.

Depending on your request, this information may include:

Habi is designed to use the information needed to fulfill your request rather than automatically sending your entire Habitify dataset for every interaction.

We do not intentionally include your email address, Habitify account identifier, or device identifier in the content sent to the AI model.

Habi AI does not transmit your uploaded habit or journal photos to AI providers.

However, technical metadata required to operate and route AI requests may be processed by our service providers.

5.3. Your Permission

Before Habi AI shares your personal data with third-party AI services, Habitify requests your permission.

The permission disclosure explains that your information will be processed through OpenRouter and OpenAI, identifies the relevant data categories, and describes the purposes of sharing.

You can decline to use Habi AI and continue using Habitify's regular habit-tracking features.

You may withdraw your permission for AI-related data sharing by contacting us at contact@habitify.me.

Withdrawing permission prevents future AI processing that depends on that permission, but it does not automatically undo processing that has already occurred.

5.4. AI Processing and Data Retention

When you use Habi AI, Habitify retains AI prompts and responses, including relevant contextual information supplied for the request, as part of operating the feature and supporting troubleshooting.

OpenRouter also processes your prompts and responses. Prompt and response logging is enabled in our OpenRouter configuration.

OpenAI may retain certain API request information under its applicable API data retention and safety policies.

According to OpenAI's published API data practices, API inputs and outputs are not used for model training by default unless the API customer opts in to such use.

Third-party AI providers maintain their own security, processing, and retention practices, which may differ from Habitify's.

You can request deletion of your Habitify data as described in Section 9. Deletion from Habitify's systems does not necessarily cause immediate removal of records already retained by third-party AI providers under their applicable policies.

5.5. Health Information and AI

If you have connected Apple Health or Google Health Connect, Habi AI may process relevant health or fitness information when you specifically request an analysis involving that information.

For such requests, relevant information may be transmitted through OpenRouter to OpenAI.

Connecting a health integration does not, by itself, trigger the transmission of your health history to AI providers.

We treat health information as sensitive data and require appropriate permission for its use and disclosure.

You may continue tracking health-related habits without using Habi AI.

5.6. Limitations of AI

Habi AI generates automated responses that may be inaccurate or incomplete.

AI-generated insights are intended to help you understand your habits and progress. They are not professional medical advice, diagnosis, or treatment recommendations.

6. Analytics, Advertising, and Cookies

We use analytics and advertising technologies to understand how Habitify is used and how people discover our Services.

6.1. Product Analytics

We use services including:

These services may process information about app interactions, device characteristics, account-linked usage events, and technical activity.

For example, we may analyze which features users interact with, how frequently habits are logged, or how trial users interact with subscription screens.

This information helps us evaluate product performance and improve Habitify.

6.2. Advertising

We use Meta technologies for advertising measurement and optimization.

These technologies may process app or website interaction data, device-related information, and advertising event information to help measure or improve campaign performance.

We do not intentionally provide users' email addresses or Habitify account identifiers to Meta for this purpose.

However, advertising and analytics technologies may collect technical identifiers and information about interactions according to their implementation and applicable privacy terms.

We do not use information obtained from health integrations for advertising targeting.

6.3. Website Cookies

Our website uses cookies and similar tracking technologies, including Google Analytics and Meta Pixel.

These technologies help us:

Cookies may collect information such as IP addresses, browser information, device characteristics, pages visited, and interactions with website content.

You can manage or delete cookies through your browser settings. Additional consent or opt-out choices may apply depending on your location and applicable law.

For information about these third-party technologies, please refer to the privacy policies of Google and Meta.

7. When We Share Information

We share personal information only when necessary for the purposes described in this policy, when you authorize an integration or optional service, or when otherwise permitted or required by law.

7.1. Cloud Infrastructure and Authentication

Google Firebase and Google Cloud Platform

We use Google services for authentication, account management, data storage, synchronization, cloud infrastructure, analytics, and crash reporting.

These services may process account information, habit data, uploaded content, device information, and other data necessary to operate Habitify.

7.2. Connected Services

When you connect Apple Health, Health Connect, Fitbit, or Strava, Habitify exchanges the information necessary for the integration according to the permissions you grant and the connected service's rules.

Each external service may independently process information in accordance with its own privacy policy.

7.3. AI Services

When you use Habi AI with permission, we share relevant information with OpenRouter and OpenAI as described in Section 5.

7.4. Analytics and Advertising Providers

We share relevant technical, usage, and advertising measurement information with Google and Meta through the analytics and advertising technologies described above.

7.5. Payment Providers

Apple, Google, and Paddle process payments and related transaction information according to their respective payment services and privacy policies.

7.6. Authorized Employees

Authorized Habitify engineers and support team members may access user information through internal tools when necessary to investigate technical problems, respond to support requests, or maintain the Services.

Access is restricted according to employee roles and responsibilities.

7.7. Legal Requirements and Business Changes

We may disclose information when reasonably necessary to comply with applicable law, respond to valid legal requests, protect users and our Services, or address security incidents.

If Habitify is involved in a merger, acquisition, or transfer of business assets, personal information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate privacy protections.

We do not sell personal habit or journal content to data brokers. Advertising-related disclosures are described separately in Section 6.

8. Data Storage, Security, and International Transfers

8.1. Data Storage

Habitify's primary user data infrastructure is hosted using Firebase and Google Cloud Platform in the United States, in the US Central region.

User account information, habits, journal entries, uploaded content, and synchronized data are stored using this infrastructure.

Although our primary cloud storage is located in the United States, personal information may be accessed or processed in other countries, including Vietnam, where our team operates.

External service providers may also process information in other jurisdictions according to their infrastructure and data-processing arrangements.

International transfers of personal information are subject to applicable data protection laws.

8.2. Data Security

We take technical and organizational measures to protect your information against unauthorized access, loss, misuse, and disclosure.

These measures include:

No online service can guarantee absolute security. We continually work to maintain and improve the security of our systems.

If you believe your account or information has been compromised, please contact us at contact@habitify.me.

9. Data Retention and Deletion

9.1. Active Accounts

We generally retain account information and user-created data for as long as your Habitify account remains active or until you choose to delete that information.

We do not automatically delete accounts solely because they have been inactive for a certain period.

9.2. Account Deletion

You can delete your Habitify account and its associated data.

Account deletion removes associated information from Habitify's active systems, including:

Anonymous users can also delete their data without first creating a registered account.

9.3. Backups and Residual Records

Although data is removed from active systems when you delete your account, residual copies may remain in system backups, diagnostic records, or operational logs for up to 60 days before they are removed through normal retention processes.

Habitify does not intentionally retain identifiable purchase or billing records beyond this residual retention period after account deletion.

Information previously processed by external service providers may remain subject to their independent retention policies, applicable legal requirements, and deletion procedures.

9.4. Deletion Requests

You can request assistance with deletion or other privacy matters by emailing contact@habitify.me.

We may need to verify that a request relates to your account before taking action.

10. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have rights to:

You can exercise many controls directly through Habitify or your connected device and service settings.

For other requests, contact us at contact@habitify.me.

We will handle requests in accordance with applicable law. Some rights are subject to legal conditions and exceptions.

Where consent is the legal basis for processing, withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

11. Legal Bases for Processing

Where data protection laws such as the European Union's General Data Protection Regulation (GDPR) apply, our legal basis for processing personal information depends on the purpose of the processing.

Performance of a contract: We process information necessary to provide Habitify's core services, maintain accounts, synchronize data, and administer subscriptions.

Consent: We rely on your consent for processing activities that require it, including optional access to certain health information, sharing personal information with third-party AI services, and marketing or tracking activities where consent is required by law.

Legitimate interests: Where permitted, we process information for purposes such as protecting our Services, preventing misuse, diagnosing technical problems, and improving product reliability, provided these interests are not overridden by your rights and freedoms.

Legal obligations: We may process information where required to comply with applicable law.

Health information and other sensitive personal data may be subject to additional requirements, including explicit consent where applicable.

12. International Users

Habitify is available to users in multiple countries.

If you live in the European Economic Area, United Kingdom, or another jurisdiction with specific data protection rights, additional protections may apply under local law.

Personal information may be transferred from your country to our cloud infrastructure in the United States or processed by our authorized personnel and service providers in other countries.

You may contact us to request further information about the processing and international transfer of your personal data.

Where permitted by applicable law, you may also raise privacy concerns with your local data protection authority.

13. Children's Privacy

Habitify is designed as a general-purpose habit-tracking service and is not specifically directed or marketed to children.

We do not intentionally use the Services to solicit personal information from children in violation of applicable children's privacy laws.

If we learn that personal information belonging to a child has been collected or processed without any parental consent or other authorization required by law, we will take appropriate steps to address the situation, including deleting the information where required.

Parents or guardians who have concerns about a child's information may contact contact@habitify.me.

14. Third-Party Websites and Services

Habitify may contain links to external websites or allow you to connect third-party services.

We do not control the privacy practices of these independent services.

We encourage you to review their privacy policies before connecting accounts, granting permissions, or providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, technology, data practices, or legal requirements.

When we make material changes, we will provide notice through appropriate channels, such as our website, the Habitify app, or email where appropriate.

The date at the top of this policy indicates when it was last updated.

Where a change requires additional permission under applicable law, we will request that permission before carrying out the relevant processing.

16. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how Habitify handles personal information, please contact us.

Unstatic Co., Ltd
266 Doi Can, Ngoc Ha, Hanoi, Vietnam
Email: contact@habitify.me
Website: https://habitify.me

We will review and respond to privacy-related inquiries in accordance with applicable law.

‍