App privacy
This privacy policy explains which personal data the HabitBuddy app processes, for what purposes and to whom it is disclosed. The Swiss Federal Act on Data Protection (FADP) governs; where the EU General Data Protection Regulation (GDPR) applies, it applies in addition.
Last updated: October 5, 2026
Controller
The controller for data processing in the app is Salt Studios, c/o Samuele Colacino, Mitteldorfstrasse 16B, 5442 Fislisbach, Switzerland. For questions about data protection and to exercise your rights, contact us at info@habitbuddy.ch.
Which data we process
• Account: email address, username, optionally first and last name; when signing in with Google, also the profile data Google provides. • Onboarding: your answers on first launch (motivation, preferred frequency, habit experience). • Your content: habits, tasks, completions, streaks, statistics, your buddy, items you own, coin balance and transactions, settings (language, theme, reminder time). • Social features: followers and people you follow, follow requests, nudges and high-fives sent and received, and feed entries. • Device: your device's push token, if you allow notifications. • Advertising: advertising ID and consent status, if you use the free version. • Consent: the version and time at which you accepted this privacy policy and the terms of use. We do not process health or location data.
Purposes
We process this data to provide your account, to store your habits and progress and show them across devices, to enable the social features, to send you notifications, to fund the free version through advertising, to keep the app stable and to be able to prove your consent.
Sign-in via Clerk
Sign-up and sign-in are handled by the service Clerk (Clerk, Inc., USA). Clerk stores your sign-in data (email address, username, password hash or Google link) and issues the session. Our server stores no passwords, only a reference to your Clerk account. Clerk also stores your onboarding answers with your account.
Visibility to other users
Your username and your buddy (look, mood, level) are visible to other users in search and in follower lists. Who you follow and who follows you is visible to the people involved. Your habits, tasks and statistics are not visible to other users.
Push notifications
If you allow notifications, we store your device's push token. Notifications (e.g. nudges and high-fives from friends) are delivered via the Expo push service (650 Industries, Inc., USA) and Firebase Cloud Messaging (Google). You can turn notifications off at any time in the app or in your system settings.
Advertising (Google AdMob)
The free version shows ads from Google AdMob (Google Ireland Ltd. / Google LLC). This may involve processing your device's advertising ID, IP address and device data. Where required by law, we ask through Google's consent dialog (UMP) whether personalized ads may be shown; without consent you only receive non-personalized ads. You can change or withdraw your choice at any time in the app under “Me” → “Ad privacy”. Premium users see no ads.
Crash reports and usage statistics (Firebase)
To fix errors we use Firebase Crashlytics (Google). After a crash, technical details such as device model, operating system, app version and error trace are transmitted. Firebase Analytics (Google) records usage events in the app only with your consent.
Our server
We store the app's data (account reference, content, social features, settings, consent) on servers we operate ourselves. The connection between the app and the server is encrypted (HTTPS).
Consent and legal bases
Before first use, you actively accept this privacy policy and the terms of use in the app. We store the version of the texts and the time of your acceptance with your account. If the texts change materially, we ask you again. Where the GDPR applies, we base processing on performance of the contract (providing the app), on your consent (personalized ads, usage statistics, push) and on our legitimate interest (secure and stable operation).
Disclosure abroad
Clerk, Google and Expo may process data in the USA and other countries. Where these providers are certified under the Swiss-U.S. or EU-U.S. Data Privacy Framework, this counts as adequate protection; otherwise we rely on the providers' standard contractual clauses.
Retention and deletion
We keep your data as long as your account exists. You can delete your account at any time in the app under “Me” → “Delete account” or by email; your account and all related content are then permanently deleted (details on the “Delete account” page). Data held by Google, Clerk and Expo is removed according to their retention periods.
Data security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, such as encrypted transfer and access restrictions. Absolute protection is not possible.
Your rights
You have the right to access, rectify, delete and receive your data and, where the GDPR applies, to restrict processing and to object. You can withdraw any consent at any time with effect for the future: advertising under “Me” → “Ad privacy”, push in the settings, and your acceptance of this policy by deleting your account. Write to us at info@habitbuddy.ch. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or a competent supervisory authority in the EU.
Minors
The app is not directed at children under 13. If you are under 16, you need your parents' consent to use it.
Changes
We update this privacy policy when the app or the law changes. For material changes we ask for your consent again in the app. The version published here applies.