Habbit ProHabbit Pro

Privacy Policy

Last updated: August 26, 2026

1. Introduction

Habbit Pro ("we", "our", or "us"), operated by BaruzoTech, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

2. Information We Collect

Account Information

Habbit Pro lets you use the app without an account (as a guest) or sign in. The account information we collect depends on how you sign in, and the available methods differ by platform:

  • Sign in with Apple (iOS):Your name and email address from your Apple ID. If you choose Apple's "Hide My Email" option, we only receive a private relay address.
  • Google Sign-In (Android): Your name and email address from your Google account.
  • Guest access: No name or email is collected. A temporary anonymous account is created via Firebase Authentication so your data can sync; if you later sign in, your existing data is carried over.

In every case an anonymous user identifier is assigned by Firebase Authentication and associated with your data so we can keep it in sync across your devices and widgets.

Habit and Widget Data

The content you create in the app is stored so it can sync across your devices:

  • Habit and tracker configurations (title, description, emoji, color)
  • Habit tracking entries, dates, and completion history
  • Widget layouts (heatmap and calendar views) and groupings
  • In-app preferences and settings

Device and Diagnostic Information

To keep the Service reliable, we collect limited device and diagnostic information. Where required, this is gated behind your consent (see "Your Choices and Consent" below):

  • Platform (iOS/Android), device model, and operating system version
  • App version and build number
  • Locale, timezone, and country/region
  • An app installation identifier assigned by Firebase
  • Last sign-in and last active timestamps
  • Crash reports and diagnostic logs (via Firebase Crashlytics)

Push Notification Tokens

If you enable notifications, we collect your Firebase Cloud Messaging (FCM) token so we can deliver reminders, account notifications, and prompt your home screen widgets to refresh. The token is a device identifier and is not used to track you across other apps.

3. How We Use Your Information

  • Provide and maintain the Service, including habit tracking and home screen widgets
  • Authenticate your identity and manage your account
  • Sync habit data across your devices and home screen widgets
  • Send push notifications and reminders you have configured
  • Analyze app usage and crashes to improve reliability, where you have consented (via Firebase Analytics and Crashlytics)
  • Protect the Service against abuse (via Firebase App Check)
  • Respond to support requests

4. Third-Party Services

We use the following third-party services that may collect and process your data according to their own privacy policies:

  • Google Firebase: Authentication (sign-in and anonymous accounts), Cloud Firestore (storing and syncing your habit data), Cloud Messaging (notifications and widget refresh), App Check (abuse protection), and — with your consent — Analytics and Crashlytics
  • Apple: Sign in with Apple (identity) and the App Store (app distribution) on iOS
  • Google: Google Sign-In (identity) and Google Play (app distribution) on Android

These providers process your data as our service providers and under their own privacy policies. We do not sell your personal information and we do not use it to track you across other companies' apps or websites.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • With the third-party service providers listed above, solely to operate the Service
  • With your explicit consent
  • To comply with legal obligations or court orders
  • To protect our rights, privacy, safety, or property, or that of our users

6. Data Storage and Security

  • Your habit data is stored in Google Cloud Firestore, hosted on Google's secure infrastructure, and access is restricted to your own account by server-side security rules
  • On your device, sign-in tokens are held in the platform's encrypted secure storage (Apple Keychain on iOS), and a local cache lets the app and widgets work offline
  • All communication with our servers is encrypted in transit using HTTPS/TLS
  • Session tokens expire automatically and are refreshed securely, and requests are validated with Firebase App Check

Our servers are operated by Google Firebase and may be located in the United States, the European Union, or other regions. By using the Service you consent to your information being transferred to and processed in these locations, safeguarded by appropriate contractual and technical measures.

7. Your Rights

Depending on where you live, you may have rights under laws such as the EU/UK GDPR and the California Consumer Privacy Act (CCPA). These include the right to:

  • Access, update, or correct your personal information
  • Export a portable copy of your data — you can do this yourself from within the app (Profile → Privacy & Data → Export My Data)
  • Delete your account and all associated data — directly in the app (Profile → Delete Account) or by contacting us (see our Data Deletion Policy)
  • Opt out of push notifications via your device settings
  • Withdraw consent for analytics and crash reporting at any time
  • Use the app as a guest without providing your name or email

We do not sell your personal information, so there is no need to opt out of a sale. To exercise any right, contact us at info@baruzotech.com.

Your Choices and Consent

Analytics and crash reporting are optional and are gated behind your consent. Where required by law (for example, in the European Economic Area and the UK), we ask for your consent before collecting this data; elsewhere you may opt out. Until you consent, these features stay off and no analytics or diagnostic events are sent.

Tracking:We do not currently track you across apps and websites owned by other companies, and we do not use your data for advertising. If this ever changes, we will ask for your permission first through Apple's App Tracking Transparency on iOS, and tracking will stay off unless you allow it.

Data Retention

We keep your personal information for as long as your account is active. When you delete your account, your profile, habit data, device registrations, and notification tokens are permanently removed from our systems, as described in our Data Deletion Policy. We may retain limited information for longer where necessary to comply with legal obligations or resolve disputes; any such data is minimized and, where possible, anonymized.

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page, updating the "Last updated" date, and optionally sending a notification through the app.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at info@baruzotech.com.