Privacy policy

Who is responsible

[Operator: name, address, email]

For questions about privacy, write to [privacy contact: email].

Your account

You sign in with an account that is not managed by Habitville itself but by our sign-in service [domain of the sign-in service]. The same account works for all our apps. It holds your name, your email address, your password (as a hash only), a profile picture if you upload one, your language and your time zone.

When you sign in, Habitville receives a copy of it: name, email address, profile picture, language, time zone and whether you are an admin, along with the time of your first and your latest sign-in. We need the time zone so that your day begins at midnight where you are and reminders arrive at the right time.

What Habitville stores

• Habits: name, emoji, colour, kind (tick off, count, timer, avoid), goal and unit, time of day or time, rhythm, the randomly chosen plant, pauses and the day you created it.
• Check-ins: for every day you enter: the date, the value (done, an amount or minutes), whether it was a slip, whether the day was filled in later, and when you did it.
• Notes: the text you write for a day.
• Images: an image you upload for a day is made smaller in your browser already and stored on the server in two sizes (at most 800 and 2000 pixels on the longer side). We do not keep the original. The file's metadata, such as where and when it was taken and with which camera, is removed. When you replace or remove an image, it is deleted from the server.
• Settings: whether and when you want to be reminded in the evening, and whether you have finished the introduction.
• Challenges: title, description, the shared habit, duration, and who joined, left or was removed, and when.
• Reports: when you report a post: who reported what, and when.

Habits can say a lot about you

A habit like “take medication” or “no alcohol” can reveal something about your health or other very personal matters. We do not evaluate such information or sort it into categories. It is visible to you alone unless you share the habit by link or do it in a challenge. So think about which habits you share and what you call them.

[legal basis for information that may concern health, e.g. consent under Art. 9(2)(a) GDPR, and how it is obtained]

Who can see what

• By default: only you see your habits, check-ins, notes and images.
• A habit shared by link: whoever knows the link sees that one habit without signing in: name, emoji, colour, plant, rhythm and goal, the overview of the last weeks with pauses and streak, and all notes and images of that habit. Your name, your other habits and the time of your check-ins are not visible. When you switch sharing off, the link stops working at once; switching it on again creates a new link.
• Challenge: members see of each other the name from the account, the plant, the days done, and notes and images, each for the challenge's habit only and only from the day of joining. Your other habits stay hidden. When someone joins, the other members get a notification with the first name.
• A challenge's invitation link: whoever knows the link sees, without signing in, the challenge's title, description, habit and duration, and of its members the first name, the plant and the days done. Notes and images are for members only.
• Reported posts: when a member reports a post, Habitville's admins see it together with your name and the name of the person who reported it. They can remove the post (note and image) or take a member out of the challenge.
• Admins and operation: in the app, admins see the list of accounts (name, email address, roles, sign-up date) and reported posts, and no other content. Whoever runs the server has technical access to the database and the images; we only use it where operating the service or finding an error requires it.

Images are kept in a store that cannot be reached from the internet directly. The app serves them through signed links that expire after a few minutes and are only handed to people who may see the image. Links created by sharing are long and random; still, whoever passes such a link on also passes on the access.

Reminders and notifications

You only get notifications if you allow them on a device. We then store, for that device, the address and the keys your browser creates for it, and the browser's identification. Notifications are delivered through the service of the browser's maker (for example Apple, Google or Mozilla). Their content, such as the names of the habits still open in the evening, is transmitted encrypted and only decrypted on your device. The service learns that, and when, your device receives a message from Habitville.

Cookies and storage in the browser

• a cookie for your sign-in and, while signing in, one for that process
• a cookie for the chosen language
• in your browser's storage: who was signed in last (so the app starts without a connection), a running timer, and whether you closed the hint about installing
• the app itself, so that it starts quickly and without a connection

All of this is needed for the app to work. There are no cookies for advertising or analysis, and no embedded content, fonts or scripts from third parties.

Newsletter

If you enter your email address on the start page, you get a mail with a confirmation link. The subscription only counts once you have confirmed it. We store the address, the app you subscribed for and the time of confirmation. Every mail contains a link to unsubscribe. After unsubscribing we delete the address and keep only a check value for 30 days, so that nobody can have mails sent to you again during that time.

Mails are sent through: [email provider and its seat]

Error reports and logs

When an error occurs in the app, it sends a report to an error collection (GlitchTip) that we run ourselves. It contains the error message, the place in the program, the address of the page and the kind of browser. Your IP address is not passed on with it. Nothing is sent without an error. Reports are deleted after [retention of error reports, 30 days by default].

The server logs every request with its method, address, status code and duration. To limit abuse it counts, briefly and in memory, how many requests come from an IP address or an account. [web server logs: content (IP address?) and retention]

Where the data is kept

[hosting: provider, location of the server, data processing agreement]

[backups: provider, location, retention]

The app contains a link to “Buy me a coffee”. Data only goes there when you click the link; that provider's terms then apply.

Legal bases

[legal bases per kind of processing: account and app functions, notifications, newsletter, error reports, logs]

Export and deletion

• Export: in the settings, “Export my data” downloads one file with your habits, pauses, check-ins with their notes, your challenges and your settings. Images are listed in it, but not included.
• Deleting single things: you delete a habit on its page, with all its check-ins, notes and images. Notes and images of single days can be removed at any time.
• Deleting everything in Habitville: “Delete my Habitville data” in the settings removes at once all your habits, check-ins, notes, images, settings, memberships, reports and notification subscriptions, and the copy of your account data in Habitville. A challenge you started goes on to the member who has been in it the longest, or ends if nobody else is in it. In backups the data remains until those expire.
• Deleting the account: your account with the sign-in service stays. To delete the account as well, write to us: [contact for account deletion]

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw a consent at any time. You can also complain to a data protection supervisory authority: [competent supervisory authority]