Privacy Policy

Last Updated: May 27, 2026

At HabitUp ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://habitup.io/ and use our mobile or web applications (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the Service includes:

• Personal Data: Personally identifiable information, such as your name, email address, and account credentials, which you voluntarily provide to us when you register for an account or contact support.
• Application Data (User Content): Data related to your use of the Service, such as habits, routines, timestamps, logs, and completion history that you input to track your progress.
• Derivative Data: Information our servers automatically collect when you access the Service, such as your IP address, browser type, operating system, access times, and the pages you viewed directly before and after accessing the Service.

2. Use of Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

• Create and manage your personal account.
• Provide, operate, maintain, and improve the functionality of the Service.
• Process your transactions and subscriptions via our Merchant of Record.
• Respond to your customer service requests, feedback, and support inquiries.
• Send you administrative information, such as updates, security alerts, and technical notices.
• Monitor and analyze usage and trends to improve user experience.

3. Disclosure and Sharing of Your Information

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share information we have collected about you in certain situations, primarily to provide the Service:

• Third-Party Service Providers: We share data with third-party vendors who perform services for us or on our behalf, including hosting services, database management, and analytics providers.
• Payment Processing (Paddle): All payments are processed securely by our online reseller and Merchant of Record, Paddle.com. Paddle will collect your billing information, payment details, and location data to process transactions, prevent fraud, and handle tax compliance. Paddle's use of your personal information is governed by their own Privacy Policy.
• Legal Obligations: We may disclose your information where we are legally required to do so to comply with applicable law, governmental requests, a judicial proceeding, or court order.

4. Data Security

We use reasonable administrative, technical, and physical security measures (such as encrypted connections and secure database backups) to help protect your personal information. However, please be aware that no security measures are perfect or impenetrable, and no method of data transmission over the internet can be guaranteed against any interception or other type of misuse.

5. Data Retention

We will retain your personal information and application data only for as long as is necessary for the purposes set out in this Privacy Policy, or until you request its deletion. If you delete your account, your data will be permanently removed from our active databases, though some derivative/anonymized data or logs may remain in our backup systems for a limited period strictly for disaster recovery purposes.

6. Your Data Protection Rights (GDPR / CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• The right to access, update, or delete the information we have on you.
• The right of rectification (to correct inaccurate information).
• The right to object to or restrict our processing of your personal data.
• The right to data portability (to receive a copy of your data in a structured format).

To exercise any of these rights, please contact us using the contact details provided below.

7. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect or solicit personal information from anyone under the age of 13. If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

• By email: [email protected]