Habitstone Privacy Policy
Effective date: August 18, 2026
Habitstone is operated by Habitstone LLC in the United States. This policy explains the information Habitstone handles and the choices available to you. Questions can be sent to tap@habitstone.app
Information stored on your device
Most Habitstone information is stored locally on your device. This can include your name, habit, schedule, reminders, completions, streaks, missed days, shields, badges, Rescue Mode progress, feelings, hydration or sodium entries, stone-pairing information, and app settings.
Habitstone uses this information to provide the features you choose to use. It is not sent to Habitstone unless specifically described below. Deleting the app may remove local information that has not been backed up.
Optional Apple sign-in and cloud backup
If you connect Apple backup, Apple and Supabase process information needed to authenticate you and restore your progress. The cloud record can include:
- An Apple/Supabase account identifier and authentication information
- Your name and a random support code
- Arc day, streak, shields, badges, milestones, and Rescue Mode status
- Arc start date, habit schedule, frequency, and duration
- A shortened cryptographic hash of your habit text
The plain text of your habit is not stored in the cloud backup. Cloud backup is used only to authenticate your account and save, restore, support, or delete your backed-up progress.
Product analytics
Habitstone sends limited product events to Supabase so we can understand whether the product is working and improve its design. Events can describe onboarding completion, logging a day, broad streak ranges, reaching day 66, shield use, Rescue Mode, restoration status, platform, app version, and the time an event was received.
Product events do not include your name, email address, Apple identifier, habit or habit hash, advertising identifier, or a persistent user or device identifier. They are not used to advertise to you, build a personal profile, or track you across other companies' apps or websites. Supabase may process standard network information, such as an IP address, in service logs for security and operation of its infrastructure.
Device features
Habitstone uses NFC to read or pair your stone when you request it. Notifications provide reminders if you enable them. Widgets and Live Activities can show habit and progress information on your device. You control notification and system permissions through iOS Settings.
If you create and share a streak card, it may contain your habit and progress. It is shared only when you choose a destination through the iOS share sheet, and that destination's privacy practices apply.
How information is used and shared
We use information to provide Habitstone, secure accounts, maintain optional backups, respond to support requests, understand aggregate product use, comply with law, and protect the service. Processing is based on providing the service you request, our legitimate interest in operating and improving Habitstone, your choices for optional features, and legal obligations where applicable.
We use Apple for iOS platform services and Sign in with Apple, and Supabase for authentication, optional backup storage, account deletion, and product analytics. They process information as service providers under their own terms and privacy commitments. We may also disclose information when legally required or necessary to protect users and the service.
Habitstone does not sell personal information, share it with data brokers, use it for targeted advertising, or track users across apps or websites.
Retention and deletion
Local information remains until you reset it or remove the app, subject to device backups you control. Cloud account and backup information remains while the connected account is active and is deleted when you use **Delete backup and account**, except where limited retention is legally required. Product analytics and infrastructure logs are kept only as long as reasonably needed for product analysis, security, and service operation.
Deleting your cloud account removes the Habitstone backup and Supabase Auth account. Local habit information remains on your device unless you separately reset it or delete the app. Habitstone attempts to revoke its Sign in with Apple authorization automatically. If Apple cannot complete that step, the app explains how to remove Habitstone from your Apple Account settings.
Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of eligible personal information, and to complain to a data-protection authority. Contact [tap@habitstone.app](mailto:tap@habitstone.app) to make a request. We may need to verify your identity.
You can use Habitstone without cloud backup, control system permissions in iOS Settings, delete your cloud account in Habitstone, and reset local information in the app.
Children
Habitstone is not directed to children under 13 or the minimum age required in their country. We do not knowingly collect personal information from children below the applicable age. Contact us if you believe a child has provided personal information.
International processing
Apple, Supabase, and their infrastructure providers may process information in countries other than yours. Where required, they use safeguards for international transfers.
Changes and contact
We may update this policy as Habitstone or applicable requirements change. We will update the effective date and provide additional notice when required.
Habitstone
Operated by: Habitstone LLC
United States
Email: tap@habitstone.app