Draft. This page is published for review and is not yet in effect. It has not been reviewed by legal. Questions: support@habitius.app.

Habitius Privacy Policy

Habitius by Trellis Labs · Effective [draft: not yet in effect]

Habitius helps you build a habit with a daily plan, a check-in and an AI coach. This policy explains what we collect, why, who we share it with and the choices you have. It is written to be read, not skimmed; if anything is unclear, write to support@habitius.app.

In short. We collect what the app needs to work: your habit plan, your check-ins and, if you turn on AI coaching, the messages and answers you give the coach. We never sell your data. AI features only run after you agree to them in the app, and you can turn them off at any time. You can delete your account and all of its data from the Profile tab.

Who is responsible

Trellis Labs, [legal: company address], is the controller of the personal data described here. Contact: support@habitius.app.

What we collect

Data	Where it comes from	Why
An account identifier	Created when you first open the app, before you sign up. It is random and not derived from your device.	To keep your plan, progress and purchases together, including before you create an account.
Email address and password	Only if you create an account.	Sign-in, password reset and account recovery. Passwords are stored hashed by our authentication provider.
Onboarding answers	The habit you chose, your motivation, the time of day that is hardest and your triggers.	To build your plan.
Your plan, check-ins and progress	Created as you use the app.	To show your plan, today's mission and your progress, and to time your reminders.
Coach messages, plan feedback and Help Now requests	Written by you, only when AI coaching is on.	To answer you, revise your plan and suggest support.
Your AI consent decision	The screen where you agree to or decline AI processing, and the version of the text you saw.	So we can prove what you agreed to and stop sending data the moment you withdraw.
Subscription status	From the App Store or Google Play, through our subscription service.	To unlock paid features and restore purchases. We never see your card or bank details.
Crash reports	Generated when the app fails.	To fix bugs. Reports carry no account identity, no message text and no request contents.
Usage events	Which screens and features are used, if analytics are enabled in a given release.	To understand what works. Without personal identifiers.
Device region	Your device's locale setting.	To show crisis resources for your region in Help Now.

We do not collect your precise location, contacts, photos or health records, and we ask you not to share passwords, medical records or other people's private details with the coach.

AI coaching and your consent

Your plan, the coach and the personalised part of Help Now are produced by an AI model from our provider, Anthropic. Nothing is sent to the provider until you agree to AI processing on the consent screen in the app. When you agree, your onboarding answers, the messages you write to the coach, your plan feedback and your Help Now requests are sent to the provider to generate the response. The provider processes that data on our behalf; it is kept as long as needed to provide the feature and handled under the provider's terms that apply to our account.

You can turn AI processing off at any time in Profile. Nothing further is sent after that; your plan and progress stay saved on your account; breathing exercises and the crisis lines keep working without AI.

Habitius is a wellness app. It is not therapy, not medical advice and not a crisis service. If you are in danger, use the emergency number for your country; Help Now in the app lists it.

Safety screening

To keep the coach safe, messages are checked for signs of crisis before and after the AI answers. When such signs appear, the app shows crisis resources instead of, or alongside, a coach reply. These checks run on our servers and are not used for anything else.

Who we share data with

Anthropic, our AI provider, receives the AI inputs described above, only with your consent.
Supabase hosts our database and sign-in. Data is stored in [to confirm: production database region].
RevenueCat tracks subscription status against your account identifier; Apple and Google handle the payment itself.
Sentry receives crash reports, stripped of identity and contents.
Fly.io runs our servers; request logs are kept for 7 days.

We never sell your data, and we do not share it with advertisers. We disclose data only when the law requires it.

How long we keep it

Your plan, progress, messages and account data: until you delete your account.
Server request logs: 7 days.
Crash reports: kept by the crash service for its standard period, without identity.
Subscription records: as long as the store and tax law require, under your account identifier only.

Your choices and rights

Delete your account in the Profile tab; the data is removed immediately. Guests can delete their data the same way. The steps are also at https://habitius.app/delete-account, with an email route if you no longer have the app.
Turn AI off in Profile at any time.
Reminders are local notifications you switch on and off in Profile.
Access, correction and portability: write to support@habitius.app and we will send you a copy of your data or correct it.
Depending on where you live you may also have the right to object to or restrict processing and to complain to a supervisory authority.

Deleting your account does not cancel a subscription. Cancel it with Apple or Google first; the deletion page has the links.

Children

Habitius is not intended for people under [legal: minimum age]. We do not knowingly collect data from them; if you believe we have, write to us and we will delete it.

Security

Data travels over HTTPS only. Access to the database is restricted by row-level rules so that each account can read only its own data. Backups of the app's data are not included in device backups.

Changes

When this policy changes in a way that matters, the app will ask you to review the new text before AI features continue. The effective date at the top always tells you the current version.

Contact

Trellis Labs, [legal: company address] · support@habitius.app