HabbitonLast updated: October 18, 2026
This policy explains what data the Habbiton iOS app processes and why. The data controller is Burak Bilcen (Türkiye). Questions: support@gethabbiton.com.tr.
In short
- We show no ads, we don't sell your data, and we don't track you across apps.
- We use no third-party analytics or advertising tools.
- You can delete your account and all your cloud data from inside the app.
Data we collect
Account details. Your email address and account ID when you sign in with email and password, with Apple or with Google. If you hide your email with Sign in with Apple, we receive Apple's relay address.
Habit data. The habits you create (name, icon, colour, target, schedule, reminder time), your daily progress, goals, trophies and coach preference. These are stored with your account so they sync across your devices.
Coach output. Suggestions and reports the smart coach writes for you. Only the latest 50 suggestions and 24 reports per account are kept; older ones are deleted automatically.
Purchase status. Whether you have Premium. Apple takes the payment; we never see your card details.
Technical data. When the app connects to our servers and the subscription service, details such as your IP address, device model, iOS version and app version are processed in those providers' logs to run the service and keep it secure. We don't use them to identify you, build a profile or show ads.
Who we share data with
We use these service providers to run the app:
- Supabase: the cloud database where account and habit data is stored, and the sign-in service.
- RevenueCat: manages subscription status. It receives your account ID and the purchase records from Apple, not your email.
- OpenRouter and the AI model provider: when the smart coach writes a suggestion or report, your habit names (up to 60 characters) and a progress summary are sent to this service. The app asks for your permission before doing so; if you decline, or later turn it off in Settings, suggestions are written on your device only. Your email and name are not sent. We request providers that don't retain the data or use it to train models. If the service is unreachable, suggestions are written on your device.
- Apple and Google: only if you choose to sign in with them, for signing in.
We only work with providers that protect your data as well as this policy does and process it only to provide their service to us. Their servers may be located outside Türkiye; your data is transferred abroad only for the purposes above.
Security
All connections between the app and the servers are encrypted (TLS). In the database, each account can reach only its own data. Your sign-in session is kept in the iPhone Keychain.
Data that stays on your device
Reminder notifications are scheduled on your device. Widgets and the Lock Screen timer read their data from the app group on your device. Your language and theme preferences also stay on your device.
Retention and deletion
We keep your data while your account is open. Settings ➔ Account ➔ Delete Account permanently deletes your account and all the data stored in the cloud. Deleting your account does not cancel an App Store subscription; manage it in your iPhone Settings. You can export your data as CSV or JSON from Settings at any time.
How we collect data and on what legal basis
We collect data electronically while you use the app, from what you enter and from what the app sends automatically.
- Account, habit data and sync: to perform our contract with you, that is, to provide the app.
- Purchase status: to perform the contract and meet our legal obligations.
- Data sent to the AI service for the smart coach: your explicit consent, which you can withdraw at any time.
- Technical data: our legitimate interest in keeping the service secure.
Your rights
Under Türkiye's Personal Data Protection Law (KVKK, Article 11) and, where it applies, the EU GDPR, you can ask whether your data is processed, request information and a copy, ask for correction or deletion, object to processing, withdraw consent, and learn which third parties receive your data. Send requests to support@gethabbiton.com.tr; we reply within 30 days. If you're not satisfied with our answer, you can complain to Türkiye's Personal Data Protection Authority (KVKK) or the data protection authority where you live.
Children
Habbiton is not directed at children under 13, and we don't knowingly collect data from them.
Changes
If we change this policy, we'll publish the new version on this page and update the date.