Privacy Policy

HabitGame is operated by Lewis Forder, trading as HabitGame, in the United Kingdom. For the personal data described in this policy, Lewis Forder (trading as HabitGame) is the data controller — meaning we decide how and why your data is processed. Contact us any time at support@myhabitgame.app.

• Account details — your name and email address, and your login credentials (passwords are stored only as secure hashes by our authentication provider; we never see your password).
• Tracking data you enter — your habits and completions, diet and meal logs, weight entries, and finance budgets and transactions.
• Support messages — anything you send us when you contact support.
• Technical data — basic device, browser and usage information (including IP address) used for security and to understand how the app is used.

Payment details are handled entirely by Paddle (see section 4) — we never see or store your card details.

• Providing the service — creating your account, saving and syncing your tracking data across devices (legal basis: performance of our contract with you).
• Security and fraud prevention — protecting accounts and the service (legal basis: legitimate interests).
• Improving the product — understanding usage and fixing issues (legal basis: legitimate interests).
• Customer support — responding to you (legal basis: contract and legitimate interests).
• Marketing — only where you have given consent, which you can withdraw at any time.

• Hosting and database provider — your account and tracking data is stored securely with Supabase, our hosting and database provider.
• Paddle (Merchant of Record) — Paddle.com Market Limited processes the sale of your subscription, payments, tax compliance and invoicing. Paddle is the merchant of record for your purchase and processes your payment data under its own privacy policy.
• Professional advisers — such as accountants or lawyers, where necessary.
• Authorities — where we are required to do so by law.

We do not sell your personal data to anyone.

Some of our service providers (including our hosting provider) may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as an adequacy decision or standard contractual clauses.

We keep your data for as long as your account is active. When data is no longer needed — for example after you delete your account — it is deleted or anonymised. You can ask us to delete your data at any time (see section 7).

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased.
• Restrict or object to our processing of your data.
• Receive your data in a portable format.
• Withdraw consent at any time (where we rely on consent).

To exercise any of these rights — including requesting a deletion or an export of your data — email us at support@myhabitgame.app. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords and strict access controls.

HabitGame uses only essential cookies and browser local storage — for example to keep you signed in and remember your preferences (like your theme). We do not use advertising or third-party marketing cookies, so there is nothing to opt out of beyond what your browser already controls.

If we change this policy, we will update the "last updated" date above and, for significant changes, let you know in the app or by email.