Privacy Policy
HabitNode
Privacy Policy
Privacy-First Design: HabitNode stores the majority of your data locally on your device using an encrypted Hive database. Cloud features including the Global Leaderboard, Google Drive Backup, and Social Chat are entirely optional and require your explicit consent before activation. You remain in full control of your data at all times.
By downloading, installing, or using HabitNode, you agree to this Privacy Policy. If you do not agree, please discontinue use of the App immediately.
1. Information We Collect
1.1 Data Stored Locally on Your Device
The following data is stored exclusively on your device using the Hive encrypted local database and is never transmitted to our servers unless you explicitly enable a cloud feature:
- Profile Information: Display name and avatar emoji (optional)
- Habit and Routine Data: Habit names, descriptions, categories, schedules, goals, priorities, notes, completion records, study targets, and progress logs
- Study Sessions: Pomodoro timer data, study routine schedules, session history, and study targets
- Personal Notes: Note titles, content, tags, and timestamps
- Missed Habit Reflections: Optional reasons provided when skipping a habit used locally for smart reminders only
- Achievement Data: Badges earned, XP points, level progress, and streaks
- App Preferences: Theme mode, notification settings, sound settings, and alarm configurations
1.2 Data Stored in the Cloud (Optional and User-Initiated)
ð Global Leaderboard (Opt-In Required)
If you voluntarily join the global leaderboard, the following data is stored in Google Cloud Firestore: display name, avatar emoji, total XP score, current level, number of habits created, Firebase Authentication UID (not visible to other users), country code, opt-in status, and timestamps.
✅ You may opt out or permanently delete your cloud profile at any time via Settings, Leaderboard, Opt Out or Delete Profile.
☁️ Google Drive Backup (User-Initiated)
When you enable Google Drive backup, your habit data is encrypted and uploaded exclusively to your private Google Drive appDataFolder. This folder is invisible to other apps and accessible only by you and HabitNode.
ðŽ Social Chat Feature (Optional, Account Required)
Chat messages are transmitted over encrypted channels (HTTPS/TLS) and stored in Google Cloud Firestore. Messages remain stored until you delete them manually or until account deletion.
Your rights: Delete/Clear History, Unsend Messages, Block Users, Report Users
ð Your private conversations are never shared with advertisers or any external third parties.
1.3 Account Information (Google Sign-In)
When you sign in with Google, we receive your Google email address, display name, profile photo URL, and unique Firebase Authentication UID. This data is used solely for authentication and cloud feature access. It is never sold or shared with advertisers.
1.4 Third-Party Services Used
| Service | Provider | Purpose | Data Sent |
|---|---|---|---|
| Google AdMob | Google LLC | Banner advertisements | Anonymous ad identifiers |
| Unity Ads | Unity Technologies | Interstitial and rewarded ads | Anonymous ad identifiers |
| Firebase Authentication | Google LLC | Secure Google Sign-In | Email, UID, display name |
| Cloud Firestore | Google LLC | Leaderboard profiles and chat | Display name, XP, messages |
| Google Drive API | Google LLC | Backup and restore | Encrypted habit data |
| Firebase Cloud Messaging | Google LLC | Push notifications | FCM device token |
| Google Play Billing | Google LLC | In-app purchases | Transaction data only |
1.5 Data We Do NOT Collect
HabitNode does not collect, request, or process any of the following:
2. How We Use Your Information
- Local Data: Habit tracking, smart reminders, push notifications, analytics, achievements, study mode, TTS voice, sound effects. All processed on-device
- Cloud Data (Optional): Global leaderboard rankings, peer chat, Google Drive backup, and cross-device sync
- Advertising: Displaying relevant ads via Google AdMob and Unity Ads using anonymous identifiers
- AI Notifications: Behavioral science-based motivational push notifications. All logic processed locally
- Authentication: Verifying identity for cloud features via Firebase Authentication
- In-App Purchases: Processing Pro subscription transactions via Google Play Billing
3. Data Storage and Security
Local Storage
All on-device data is stored in a Hive encrypted local database. Encryption keys are stored securely on your device and are never transmitted.
Cloud Storage
Leaderboard profiles and chat messages are stored in Google Cloud Firestore with server-side Firestore Security Rules. Google Drive backups are encrypted before upload and stored in your private appDataFolder.
Security Measures
- HTTPS / TLS encryption for all data in transit
- Hive AES encryption for data at rest
- Firebase OAuth 2.0 token-based authentication
- Firestore Security Rules. Users can only access their own data
- Regular security reviews and dependency updates
4. Chat Message Retention Policy
Chat messages sent through HabitNode Social Chat feature are stored in Google Cloud Firestore indefinitely until the user manually deletes them or their account is removed.
| Feature | How It Works |
|---|---|
| Encryption | All messages transmitted over HTTPS/TLS encrypted channels |
| Storage Duration | Until user manually deletes or account is removed |
| Delete Chat History | Immediate and permanent removal from Firestore servers |
| Unsend Message | Immediately removed from Firestore. No longer visible to any party |
| Block User | Blocked user is hidden from feed, chat, and profile views |
| Third-Party Access | Never shared with advertisers or external parties |
5. Android Permissions Explained
Required Permissions
Optional Permissions (User-Granted)
Permissions NOT Used
⏰ USE_FULL_SCREEN_INTENT. Why We Use It
This permission is used exclusively for the habit alarm system. When a scheduled habit alarm fires, the app displays a full-screen alert that bypasses the lock screen with a TTS voice announcement, sound, and haptic feedback. The bypass is active only during the alarm and is disabled immediately after dismissal or snooze. This is a core habit-reminder feature and poses no ongoing security risk.
6. Advertising
HabitNode displays advertisements through Google AdMob (banner ads) and Unity Ads (interstitial and rewarded ads). Advertising identifiers are anonymous and are used in accordance with Google and Unity respective privacy policies.
- Pro subscribers see zero advertisements. Ad SDKs are not loaded for Pro users
- You may opt out of personalized ads via Android Settings, Google, Ads, Opt out of Ads Personalization
- Advertising data is never linked to your habits, notes, or personal profile
7. In-App Purchases
HabitNode offers an optional Pro subscription processed exclusively through Google Play Billing:
- Monthly Plan: Local pricing applies per region
- Yearly Plan: Local pricing applies per region
- HabitNode does not store, process, or have access to your payment card details
- All billing is handled entirely by Google Play. Governed by Google Terms of Service
- Pro features include: Ad-free experience, unlimited habits, advanced analytics, priority cloud sync, and exclusive badges/themes
8. User-Generated Content (UGC)
Publicly visible (only if you opt into the Leaderboard): Display name, avatar, XP score, level, country, and number of habits created.
Never publicly shared: Actual habit names, descriptions, notes, personal messages, or email address.
⚠️ Content Moderation
Usernames and chat messages must not contain offensive, harmful, or illegal content. Violations may result in account suspension. Users may: Report offensive content, Block users, Unsend messages, Delete chat history, Opt out of the leaderboard entirely.
Age Restriction: The leaderboard and chat features are available only to users aged 13 years and older.
9. Children Privacy (COPPA)
HabitNode is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information through our App, please contact us immediately at vhirsupport@gmail.com. We will delete the data within 48 hours of verification.
10. Data Retention and Deletion
| Data Type | Retention Period | How to Delete |
|---|---|---|
| Local habit data | Until app is uninstalled | Settings, Reset All Data |
| Leaderboard profile | Until opt-out or deletion | Settings, Leaderboard, Delete Profile |
| Chat messages | Until user deletion | Chat Screen, Clear History or Long-press, Unsend |
| Google Drive backups | Until manual deletion | Google Drive App, Manage Backups |
| Firebase account data | Until account deletion | Email vhirsupport@gmail.com |
ðŠðš GDPR Right to Erasure
EU/UK users may submit a data deletion request by emailing vhirsupport@gmail.com with the subject line: "GDPR Data Deletion Request, HabitNode". All personal data will be permanently deleted within 30 days.
11. Data Sharing and Disclosure
We do not sell, trade, rent, or share your personal data for marketing or commercial purposes.
Limited data sharing occurs only in these circumstances:
- Public Leaderboard (opt-in only): Display name, avatar, XP score, and level are visible to other users
- Chat Messages: Visible only to the conversation participants
- Advertising Partners: Anonymous, non-personal ad identifiers only (AdMob, Unity Ads)
- Google Play: Transaction data for purchase verification only
- Legal Compliance: If required by law, court order, or to protect rights and safety
12. Your Rights and Choices
- Access and Export: View all your data within the App or export via Google Drive Backup
- Correct: Edit your profile, habits, and settings directly within the App
- Delete Local Data: Settings, Reset All Data
- Delete Cloud Profile: Settings, Leaderboard, Delete Profile
- Opt-Out of Leaderboard: Settings, Leaderboard, Opt Out
- Delete Chat History: Chat Screen, Clear History
- Unsend a Message: Long-press message, Unsend
- Block a User: User Profile, Block
- Opt-Out of Personalized Ads: Android Settings, Google, Ads, or upgrade to Pro
- Withdraw Consent: Disable cloud backup, sign out, or opt out of leaderboard at any time
- GDPR / CCPA Request: Email vhirsupport@gmail.com. Response within 7 business days
13. Third-Party Services and International Data Transfers
Each third-party service used by HabitNode is governed by its own privacy policy:
- Google AdMob: policies.google.com/privacy
- Unity Ads: unity.com/legal/privacy-policy
- Firebase / Firestore / Google Drive: firebase.google.com/support/privacy
- Google Play Billing: play.google.com/about/play-terms
Data may be stored on Google Cloud Platform servers located globally. All international data transfers comply with applicable regulations including GDPR (EU/UK), CCPA (California), and COPPA (USA).
14. Legal Compliance
- GDPR - General Data Protection Regulation (European Union / United Kingdom)
- CCPA - California Consumer Privacy Act (United States)
- COPPA - Children Online Privacy Protection Act (United States)
- IT Act 2000 - Information Technology Act (India)
- Google Play Developer Policy - Data Safety, UGC, and Billing requirements
- Google Play Families Policy - Age-appropriate content and data handling
15. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in the App or applicable law. For significant changes, we will notify you via in-app notification, email, or a prominent notice on this page. The "Effective Date" at the top of this document reflects the date of the most recent revision. Continued use of HabitNode after any changes constitutes your acceptance of the updated policy.
16. Contact Us
ðŽ
17. Summary at a Glance
| Topic | Summary |
|---|---|
| Data Collected | Habits, notes, settings (local); username, score, chat (cloud, optional only) |
| How It Used | Habit tracking, leaderboard, peer chat, backup, advertising, authentication |
| We Never Sell Your Data | ✅ Confirmed. Never sold or rented |
| Chat Privacy | Encrypted, user-controlled deletion, unsend, block, report |
| Chat Retention | Until user manually deletes or account is removed |
| Permissions | No camera, microphone, GPS, contacts, or SMS |
| Lock Screen Alarm | Active only during alarm. Disabled immediately after |
| Your Rights | Access, edit, export, delete, block, report, opt-out, withdraw consent |
| Security | HTTPS/TLS, Hive AES encryption, Firestore Rules, OAuth 2.0 |
| Compliance | GDPR, CCPA, COPPA, Google Play Policy, IT Act 2000 |
| Contact | vhirsupport@gmail.com. Response within 7 business days |
User Comments