Privacy policy

HABIT OS is operated by Hareesh V Das, Kozhikode, Kerala, India (“we”, “us”). This policy explains what personal data we process when you use HABIT OS, why, and the rights you have under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”).

Data we collect

• Account data: your name, email address, mobile number, profile photo (optional), timezone and password (stored only as a secure hash by our authentication provider).
• Habit data: the habits you create, schedules, reminders, daily entries, notes, and the reports we generate from them.
• Purchase data: name, email, mobile number, amount, coupon, payment status and Razorpay order and payment IDs. Card, UPI and bank details are entered directly with Razorpay and never reach our servers.
• Notification data: your channel preferences, your WhatsApp consent and when you gave it, and delivery records.
• Technical data: sign-in sessions, the dates you were active, IP address for security and rate limiting, and basic device and browser information.

Why we use it

• To provide the service: tracking, analytics, grades, and daily, weekly and monthly reports.
• To process your purchase and activate your access.
• To send reminders and reports on the channels you choose.
• To keep accounts secure, prevent abuse and fix problems.
• To provide support and, where you allow it, product updates.

We process your data on the basis of your consent and to perform the contract you enter into when you purchase. We do not sell your personal data and we do not use your habit data for advertising.

Who processes it for us

We use trusted service providers (“data processors”) who process data only on our instructions:

• Supabase: database, authentication and file storage.
• Vercel: application hosting.
• Razorpay: payment processing.
• Resend: transactional email.
• Meta (WhatsApp Business Platform): WhatsApp messages, only if you opt in.

Some of these providers may store or process data outside India, with appropriate safeguards.

Administrator access

Our authorised staff can view account and performance information to provide support, investigate problems and understand how the product is used. Every such access is logged.

How long we keep it

We keep your data while your account is active. If you delete your account, it is permanently erased 30 days after your request. You can cancel within that window. We keep purchase records for as long as tax and accounting law requires.

Your rights

• Access and portability: download all your data from Settings → Your data.
• Correction: edit your profile and entries at any time.
• Erasure: delete your account from Settings → Your data.
• Withdraw consent: turn off email or WhatsApp notifications any time in Settings.
• Nomination: you may nominate a person to exercise these rights on your behalf in the event of death or incapacity, by writing to us.
• Grievances: contact our grievance officer below. If you are not satisfied, you may approach the Data Protection Board of India.

Cookies

We use only essential cookies to keep you signed in. We do not use advertising or cross-site tracking cookies.

Security

Your data is encrypted in transit, isolated per account at the database level, and accessible only to you and authorised administrators. No system is perfectly secure. If a breach affects you, we will notify you and the authorities as the law requires.

Children

HABIT OS is intended for users aged 18 and over. Anyone under 18 may use it only with verifiable consent from a parent or guardian.

Changes

If we make material changes to this policy, we will notify you by email or in the app before they take effect.

Contact and grievance officer

Hareesh V Das, Kozhikode, Kerala, India. Email: hareeshvdasofficial@gmail.com. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.