Privacy Policy

TheoryCraft, a French société par actions simplifiée unipersonnelle (SASU) registered under number 107 873 754, is the controller of personal data processed for HabitScaler.

Privacy requests may be sent to [email protected] or to TheoryCraft, 59 rue de Ponthieu, 75008 Paris, France.

Habit names, units, targets, schedules, progress logs, reminders, profile details, preferences, and onboarding state are stored locally on your device by the mobile application unless a feature explicitly states otherwise.

Normal app use does not require a HabitScaler account, and TheoryCraft does not receive your local habit records merely because you create or update them in the app.

When device backup is enabled, Android's backup service or Apple's iCloud device backup may include local HabitScaler data and restore it on a compatible device. The platform provider controls that device backup under your store-account and device settings.

Clearing HabitScaler data removes local scales, logs, reminders, and profile information from that device. It does not remove copies already shared with other people, delete a platform-managed device backup, or cancel an app-store subscription.

When you create a shared plan link, the plan name, unit, starting value, progression, cap, and schedule are encoded in the URL. Anyone with the link can read that configuration and open its public preview.

Opening a shared plan link sends the requested URL and standard connection and security data, such as the access time, IP address, and browser or device information, to the public website.

Share cards and text are passed to the device sharing tools and any destination you choose. Those destinations process shared content under their own privacy practices.

HabitScaler uses RevenueCat and the applicable app store to offer purchases, verify entitlements, restore purchases, and determine subscription status.

Purchase data can include a pseudonymous identifier used to associate purchase status with the app installation or store account, the purchased product, entitlement status, purchase and expiration dates, renewal state, storefront, and transaction information needed to provide paid access. HabitScaler does not receive full payment-card details.

The public website uses essential session and security technologies and can load Google Tag Manager and Google Analytics when configured. Depending on the configured tags, Google may receive device and browser information, referring and visited pages, timestamps, identifiers, approximate location, and network information.

Browser storage can remember interface preferences and acknowledgement of the cookie notice. More information is available in the Cookie Policy.

Local data is processed on your device to provide the planning, reminder, history, projection, and sharing features you request. Purchase and entitlement data is processed to perform the paid service contract, restore access, prevent billing errors, and protect the service against fraud.

Limited security, analytics, and diagnostic data is processed for our legitimate interests in protecting, measuring, debugging, and improving HabitScaler. Transaction and tax records are processed to meet legal obligations.

Data is disclosed only as needed for the relevant feature. Providers can include RevenueCat and Google Play or Apple App Store for purchases, Google or Apple for device backups, Hetzner for the public website, and Google for public-site tags and analytics.

Some providers may process data outside France or the European Economic Area. Where required, those transfers rely on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism.

Local habit data remains on your device, and potentially in a platform-managed device backup, until you delete it or change the relevant backup settings.

Purchase and entitlement records are retained for as long as needed to provide and restore paid access, resolve disputes, prevent fraud, and meet legal obligations. Billing, invoice, and transaction records may be retained for up to 10 years where required by French accounting or tax law.

Security and application logs are retained only for the period reasonably needed to diagnose incidents, protect the service, and meet legal obligations.

HabitScaler limits the server-side data needed for the product and uses encrypted transport, access controls, input validation, and security logging. No device, backup, network, or online service can guarantee absolute security.

You can clear local app data, manage device backups, control notifications, avoid sharing plan links, restore purchases, cancel subscriptions through the applicable store, and ask us to remove server-side personal data.

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. Where processing relies on consent, you may withdraw that consent without affecting earlier processing.

You may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL) or another competent data-protection authority. We may verify your identity before completing a request.

HabitScaler does not sell personal data and does not use local habit records for cross-context behavioral advertising.

We may update this Privacy Policy as HabitScaler, its providers, or legal requirements change. The date at the top identifies the current version. Material changes will be communicated through an appropriate channel.

Questions or privacy requests may be sent to [email protected] .