Habits privacy policy.

Privacy Policy for Habits

Effective Date: October 24, 2026 Last Updated: October 24, 2026 App Name: Habits Organisation: StyxStudio Private Limited

1. Introduction

Welcome to Habits, a mobile and Wear OS companion application developed by StyxStudio Private Limited ("we", "our", "us").

Habits is designed as a local-first app. Your data is stored on your device by default. You can optionally enable cloud sync to mirror your data to a cloud backend.

This policy describes how Habits processes data; optional access is requested in context.

2. Information We Collect

We collect and process only the data needed to provide Habits features.

A. Data You Enter in the App

Depending on the features you use, Habits may store:

- Medicine and intake data (medicines, schedules, intake logs) - Reminders and tasks - Notes and journal entries - Food logs and blood glucose readings - Workouts and weight entries - Habits, habit completions, and goal settings - Expenses and budget entries - Events/calendar entries - Optional profile display name

B. Account and Cloud Sync Data (Optional)

If you enable cloud sync, we process:

- Email address and password (for account authentication) - Your synced app records - Sync metadata (record IDs, timestamps, delete markers)

C. Images and Other Assets

If you attach photos (for example in medicines, notes, journal, or food logs), those assets are:

- Stored locally on-device - Uploaded to cloud storage only when cloud sync is enabled and you are signed in

D. Location Data (Optional)

If you choose location-enabled features, Habits may process location information you capture (for example, food/event/journal context). Location access is optional and permission-based.

E. Device/Technical Data

To operate correctly, the app may use limited technical data such as:

- Device/platform type and OS behavior needed for notifications, alarms, and compatibility - App version and error context for debugging

Habits does not use advertising SDKs or sell your personal data.

F. Energy, Sleep and Health Connect

Your energy check-ins, manual sleep intervals, routine preferences/completions and reflections stay in a separate device-local store. If you choose Connect on Android 14 or later, Habits requests read-only sleep access and reads sessions from the previous 28 days while the phone app is open. Sessions include start/end time, record identity and source app. Habits does not request health writes or background health reads. Manual entry remains available without this permission.

Imported sessions support sleep timing/history, source selection and local correction. They are not added to existing Supabase sync or legacy exports. Disconnect removes imported copies, keeps manual entries and does not delete original records in Health Connect. Revoke permission separately in Android Health Connect settings. Revocation alone leaves previous cached copies visible until disconnect.

G. Paired Wear OS Companion

Google Play Services Data Layer transfers the latest sleep fact/source/date, current routine and current-day energy/completion between your paired devices. It does not send bulk sleep history. Watch actions are stored locally until the phone confirms or rejects them; the phone retains action receipts for retry protection and prunes old receipts when new actions arrive. Health Connect data is not used for advertising, credit, insurance decisions or sale to data brokers.

The new energy store, watch cache/outbox and routine alarm preferences are excluded from Android cloud backup/device-transfer rules. Original records in Health Connect remain governed by Android and their source app. Existing legacy records may still be included in platform backups according to device settings. Watch copies refresh when devices reconnect and the phone app is open; removing phone imports does not remotely erase an offline watch immediately.

3. How We Use Your Information

We use data to:

- Deliver core functionality (tracking, reminders, timeline, insights) - Sync your data across devices (when cloud sync is enabled) - Sync selected companion data between phone and Wear OS - Maintain reliability (notifications, alarms, sync conflict handling) - Improve product quality and fix issues

We do not sell, rent, or trade your personal information.

4. Local-First and Cloud Sync

Local-First Default

By default, Habits keeps your data on your device.

Optional Cloud Sync

When enabled, cloud sync mirrors supported records and assets to the cloud backend. Current implementation: Supabase.

Cloud sync currently supports records for medicines, intake logs, journal, notes, reminders, food logs, blood glucose, events, expenses, budgets, workouts, weight, habits, habit completions, and insight goal settings, plus associated image assets where applicable.

5. Third-Party Services

Habits currently uses the following third-party infrastructure/services:

- Supabase (optional cloud sync, authentication, storage) Privacy Policy: https://supabase.com/privacy

- Google Play Services (app update delivery, Android/Wear connectivity infrastructure)

- Platform location/geocoding providers via device OS APIs when you choose location features

Habits does not currently use Firebase analytics/crash products in the app implementation.

6. Data Sharing

We share data only with service providers required to operate the app features you choose (for example, optional cloud sync or platform services). We do not share raw personal data with advertisers or data brokers.

7. Data Storage, Security, and Transfers

We apply reasonable safeguards, including secure transport (for networked sync) and authenticated access controls where applicable.

No digital system can guarantee absolute security. You are also responsible for keeping your device and account credentials secure.

If cloud sync is enabled, data may be processed in infrastructure regions used by our cloud provider.

8. Data Retention and Deletion

Local Data

Local data remains on your device until you delete entries, clear app data, or uninstall the app.

Cloud Data (If Enabled)

Cloud data is retained while your synced account remains active, unless deleted earlier.

You can request account/data deletion by contacting: privacy@styx.studio. The in-app Cloud Sync screen and Privacy & your data screen provide a Request account deletion action. It opens an email draft to privacy@styx.studio; you choose whether to send it. Request deletion of your Habits account and its associated cloud records/assets using your account email. We may verify account ownership before deleting it. A request is not immediate deletion; we confirm the outcome. You can make the same request from outside the app by emailing that address. Signing out alone is not deletion.

Deleting a cloud account does not automatically remove local records on every phone/watch. Disconnect removes imported sleep copies; Android app storage controls can clear local data, and uninstalling removes app-local stores. Health Connect originals must be managed in Health Connect or the source app. Pending watch data may remain until its local app data is cleared or it reconnects.

Signing out of cloud sync does not by itself guarantee immediate deletion of previously synced cloud records.

9. Permissions

Habits may request permissions including:

- Read-only sleep access in Health Connect (optional, foreground only) - Notifications and exact alarms - Boot/restart scheduling support - Vibration/wake lock - Location (optional) - Camera/gallery access (optional image attachments) - Wear/phone connectivity permissions where required by Android/Wear OS

You can manage permissions in device settings at any time.

Wellness Information

Habits is for personal wellness and record keeping. It is not a medical device and does not diagnose, treat, cure or prevent medical conditions. Consult a qualified healthcare professional about symptoms, medication or treatment. Reminders and sleep intervals are not clinical monitoring or emergency services.

10. Children’s Privacy

Habits is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe such data has been provided, contact us and we will take appropriate steps.

11. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your data. You can exercise requests by contacting us at privacy@styx.studio.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be reflected by revising the Effective Date/Last Updated date in this file and in-app surfaces where applicable.

13. Contact Us

StyxStudio Private Limited Email: privacy@styx.studio Location: Kerala, India