Last updated: April 6, 2026

Privacy Policy

The HabitReach team ("we", "us") sets out below how we handle your personal information in connection with our service.

Article 1 (Information We Collect)

We collect the following information:

  • Account information: Name, email address, and profile image URL obtained via Google authentication
  • Access logs: IP address, browser type, and access timestamps

About habit, task, and check-in data: This data is not stored on HabitReach's servers. It is saved directly to a private app folder in your own Google Drive (BYOS model). We have no access to this data.

Google API Scope: We use Google's "drive.appdata" scope (https://www.googleapis.com/auth/drive.appdata) to sync your habit and task data across devices. This scope only grants access to a private, app-specific hidden folder and does not allow access to any of your regular Google Drive files.

Article 2 (Google API Services User Data Policy Compliance)

HabitReach's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google API Services User Data Policy

Specifically, we limit our use of Google user data ("Google User Data") as follows:

  • Limited purpose: Google User Data is used solely to provide or improve the core features of the service (cross-device data sync). It will not be used for any purpose beyond what the user has consented to.
  • No advertising use: We do not use Google User Data to serve ads or for ad targeting.
  • No third-party transfer: We do not transfer or sell Google User Data to third parties beyond what is necessary to provide the service.
  • No human reading: We do not allow humans to read Google User Data except as necessary for security, legal compliance, or support where the user has explicitly permitted it.
  • Data minimization: We request only the minimum scopes necessary for the service and do not access data beyond what is required.

Article 3 (Purpose of Use)

We use collected information for the following purposes:

  • Providing, operating, and improving the service
  • Responding to inquiries
  • Identifying and addressing Terms of Service violations
  • Analyzing usage in statistical or anonymized form
  • Sending maintenance notices and important announcements

Article 4 (Sharing with Third Parties)

We do not share personal information with third parties except when: you have given consent, required by law, or necessary to protect life, body, or property when obtaining consent is not feasible.

Article 5 (Third-Party Services)

We use the following third-party services:

Google OAuth / Google Drive
Used for login authentication and as the storage destination for habit, task, and check-in data (stored in the user's own Google Drive)
View policy →
Supabase
Used to manage user authentication records and push notification subscriptions
View policy →
Stripe
Used for payment processing (paid plans)
View policy →

Article 6 (Use of Cookies)

We use cookies and similar technologies for the following purposes:

  • Maintaining login state: Used to manage authentication sessions.
  • Advertising: We may use advertising services from third-party providers (such as Google AdSense). These providers may use cookies to deliver ads based on your past visits to this and other sites. For Google's use of advertising cookies, see Google Advertising Policy.
  • Analytics: We may use access analytics tools to improve our service.

You can disable cookies in your browser settings, though some features may become unavailable. To opt out of advertising cookies, visit this page.

Article 7 (Data Retention and Deletion)

Habit, task, and check-in data is stored in your own Google Drive and is not held by us. You can delete this data directly from Google Drive's app data management page. Google Account Permissions page — revoking HabitReach's access will delete all data stored in the app-specific folder.

When you delete your account, your profile and notification settings held by us will be deleted immediately.

Article 8 (Your Rights)

You have the right to request access, correction, deletion, or suspension of use of your personal information held by us. Please contact us via our contact page.

Article 9 (Changes to This Policy)

This Policy may be updated to reflect changes in law or our practices. For significant changes, we will endeavor to notify you via the service or your registered email. The updated Policy takes effect upon publication on this page.