Privacy Policy – Habits Hero

Last updated: August 12, 2026

This privacy policy describes how Habits Hero collects, uses, retains and protects the personal data of users of its website, web application and iOS and Android mobile applications.

Habits Hero is an application designed to help users create, track and build habits, manage daily tasks and to-dos, track their progress and receive reminders or notifications.

We are committed to processing personal data in accordance with the General Data Protection Regulation (GDPR) as well as applicable French data protection legislation.

1. Data controller

The controller responsible for processing personal data is:

Julien Da Costa – Sole proprietor6 Rue Frédéric Chopin - Trèbes 11800 - France

Website: https://habits-hero.fr/

Contact e-mail: support@habits-hero.fr

Data protection e-mail: admin@habits-hero.fr

2. Personal data collected

The data processed depends on the features used.

2.1. User account data

When creating or using a Habits Hero account, we may process in particular:

• your e-mail address;
• your name, nickname or username when provided;
• your internal user identifier;
• information required for authentication;
• information relating to your Free, Premium or any future plan;
• the account creation date;
• certain login or activity dates;
• data required to secure your session.

When passwords are used, they are never stored in plain text.

3. Habit-related data

Habits Hero allows users to create and track their habits.

We may therefore retain in particular:

• the name of the habit;
• its optional description;
• the days on which it is active;
• the tasks associated with this habit;
• their frequency;
• the completion history;
• the status assigned to each task.

The available statuses may include in particular:

• Completed: the task was successfully accomplished;
• Absent: the user was not able to perform the task;
• Issue: an obstacle prevented it from being completed;
• Failed: the task was not completed.

This data enables the tracking and statistics features to function.

4. Progression, levels and experience

Habits Hero includes a progression and gamification system.

We may process in particular:

• the number of completed tasks;
• the number of failed tasks;
• success streaks;
• statistics associated with your habits;
• your level;
• your experience;
• experience gains and losses;
• your daily, weekly or other statistics available in the application, depending on the period.

For example, Habits Hero may:

• award 25 experience points when a task is marked as completed;
• deduct 25 experience points when a task is marked as failed.

These calculations are performed automatically as part of the application's normal operation.

5. Daily reports

Habits Hero may generate summary reports relating to your activity.

These reports may notably contain:

• completed tasks;
• failed tasks;
• the summary of the day;
• experience gained;
• experience lost;
• certain progression statistics.

This information is calculated from the data recorded in your account.

6. To-dos

Habits Hero also includes an independent task management feature of the To-do type.

When you create a To-do, we may retain in particular:

• its title;
• its optional description;
• its status;
• its creation date;
• its due date;
• its reminders;
• its alarms;
• the information required to trigger them.

7. Data freely entered by the user

Certain fields in Habits Hero allow free text entry.

You may therefore voluntarily enter personal information there.

However, Habits Hero is not intended to collect special categories of sensitive data such as:

• medical data;
• information relating to your health;
• your political opinions;
• your religious beliefs;
• your sexual orientation;
• biometric data;
• or any other data that is particularly sensitive within the meaning of the GDPR.

We recommend that you do not enter such information in the titles or descriptions of habits and to-dos, except where strictly necessary for your own use.

8. Technical data

When you use Habits Hero, certain technical data may be automatically processed.

This may notably include:

• your IP address;
• the operating system used;
• the type of device;
• the version of the application;
• the browser used;
• the language of the application;
• your time zone;
• the date and time of certain logins;
• information relating to sessions;
• technical logs;
• error messages;
• information required to diagnose technical problems.

This information is mainly used to maintain, secure and improve the operation of the service.

9. PostHog – Logs and error monitoring

Habits Hero uses PostHog, a third-party service for error monitoring, technical diagnostics and logging.

PostHog allows our team to detect malfunctions in Habits Hero, identify errors, understand their context and resolve technical issues more quickly.

In this context, the following data may be transmitted to PostHog:

• your username;
• your IP address;
• your time zone;
• the language used, notably French or English;
• certain information relating to the application;
• certain information relating to the device or browser;
• the technical context of an error;
• the messages and technical traces required for diagnostics.

This data is used in order to:

• identify errors;
• reproduce certain bugs;
• diagnose malfunctions;
• improve the stability of Habits Hero;
• strengthen the security of the application;
• ensure the technical maintenance of the service.

Legal basis: Habits Hero's legitimate interest in ensuring the security, stability, maintenance and proper functioning of its services.

PostHog acts as a technical service provider in connection with this processing.

PostHog's documentation confirms that its SDKs may process user data and, depending on the configuration used, IP addresses.

Information transmitted to PostHog is retained for the period configured in our PostHog account.

PostHog retention period: 30 days.

We strive to limit the information sent to PostHog to only the data useful for diagnosing technical problems.

10. Push notifications and Firebase Cloud Messaging

Habits Hero may send push notifications when you have authorized them.

They may notably be used to:

• remind you of a habit;
• remind you of a task;
• notify you of the due date of a To-do;
• trigger an alarm;
• display certain information relating to your progress or your account.

Habits Hero notably uses Firebase Cloud Messaging (FCM), provided by Google, to deliver notifications.

In this context, Google may process certain technical data such as:

• a Firebase installation identifier;
• a notification token;
• the APNs token on iOS;
• the device model;
• the language;
• the time zone;
• the operating system version;
• the application identifier;
• the application version.

Firebase states that Cloud Messaging notably uses installation identifiers to determine which devices to send messages to.

You can disable notifications at any time from your device settings.

11. Subscriptions and in-app purchases

Habits Hero notably offers:

Free plan

Access to Habits Hero's features within the limit of the number of habits provided by this plan.

Premium plan

Full access to Habits Hero, notably including an unlimited number of habits.

Other plans or offers may be introduced in the future.

When you subscribe via the mobile application, payment may be directly processed by:

• Apple App Store;
• Google Play.

In this case, Apple or Google manage banking and payment information in accordance with their own terms and privacy policies.

Habits Hero may receive certain information required to manage your subscription, notably:

• confirmation of a purchase;
• the existence of a subscription;
• its status;
• its start date;
• its expiration date;
• its renewal;
• its cancellation;
• information required to restore a purchase;
• the rights associated with your plan.

Since payment is entirely processed by Apple or Google, Habits Hero does not receive your complete bank card information.

12. Purposes of processing

Personal data is mainly used for the following purposes.

Account creation and management

We use your information in order to:

• create your account;
• authenticate you;
• maintain your session;
• manage your preferences;
• secure access to your account.

Legal basis: performance of the contract.

Operation of habits

We use your data to:

• save your habits;
• manage their scheduling;
• record task statuses;
• display your history;
• generate your statistics.

Legal basis: performance of the contract.

To-do management

Your data is used to:

• create and save your To-dos;
• manage their due dates;
• manage their reminders and alarms.

Legal basis: performance of the contract.

Progression management

We use data related to your activity in order to:

• calculate your experience points;
• determine your level;
• calculate your statistics;
• generate your progression reports.

Legal basis: performance of the contract.

Notifications

We process the technical information required to send you the notifications you have authorized.

Maintenance and diagnostics

We notably use PostHog and certain technical logs to:

• diagnose errors;
• fix bugs;
• monitor the stability of the application.

Legal basis: legitimate interest.

Security

Certain technical data is processed in order to:

• protect accounts;
• detect abnormal behavior;
• protect infrastructure;
• combat abuse.

Legal basis: legitimate interest.

Compliance with legal obligations

Certain information may be processed or retained when required by law.

Legal basis: legal obligation.

13. Mandatory or optional nature of data

Certain data is necessary for Habits Hero to function.

For example, certain account-related information is essential to create an account and synchronize your information.

Information entered in habits and To-dos is generally optional and depends on your personal use of the application.

Where the provision of data is mandatory, being unable to provide it may make certain features unavailable.

14. Data recipients

Your personal data is only accessible to the people and service providers who need access to it to ensure Habits Hero functions properly.

These recipients may notably include:

• the Habits Hero team;
• technical administrators;
• Habits Hero's hosting provider;
• PostHog, for logging, diagnostics and error monitoring;
• Google Firebase / Firebase Cloud Messaging, for sending notifications;
• Apple, notably in connection with the App Store and in-app purchases;
• Google, notably in connection with Google Play and certain Firebase services;
• other service providers strictly necessary for the application to function;
• administrative or judicial authorities where the law requires us to transmit certain information to them.

We do not disclose your data to third parties for independent commercial purposes without an appropriate legal basis.

15. Sale of data

Habits Hero does not sell its users' personal data.

In particular, we do not sell:

• your habits;
• your To-dos;
• your progression;
• your usage history;
• your personal information;
• your technical data.

16. Advertising and profiling

Habits Hero does not use its users' habits or To-dos to create advertising profiles intended to be sold to advertisers.

We do not transmit the content of your habits or To-dos to advertising networks for the purpose of offering you targeted advertising.

Should this policy change, this privacy policy would be updated and any consent mechanisms required would be put in place.

17. Data hosting

The various technical components of Habits Hero are hosted with several providers.

Backend server

The Habits Hero backend server is hosted with:

Hetzner Online GmbH Industriestr. 25 91710 Gunzenhausen Germany

The server used by Habits Hero is a VPS located in the Hetzner data center in Nuremberg, Germany.

This server notably handles the operation of the API and the processing of requests required to use Habits Hero.

Database

The main Habits Hero database is hosted with:

Hostinger

This database notably contains the data required for the service to function, such as:

• information relating to user accounts;
• habits and their settings;
• tasks and their statuses;
• To-dos;
• statistics;
• levels and experience points;
• information required for the operation of Habits Hero's various features.

Location of the database server: [COUNTRY / HOSTINGER DATACENTER TO BE COMPLETED].

Additional technical service providers

Certain technical data may also be processed by specialized service providers used by Habits Hero, notably:

• PostHog, for error monitoring, logs and technical diagnostics;
• Google Firebase / Firebase Cloud Messaging, for delivering push notifications;
• Apple, when certain features or transactions are carried out via the Apple ecosystem;
• Google, when certain features or transactions are carried out via Google Play or Firebase services.

The processing carried out by these service providers is described in the corresponding sections of this privacy policy.

18. Data transfers outside the European Economic Area

Certain service providers used by Habits Hero are international companies and may process certain data outside the European Economic Area.

This may notably concern certain services provided by:

• Google;
• PostHog;
• Apple.

Where international transfers are carried out and a specific legal mechanism is required, these may notably rely on:

• an adequacy decision of the European Commission;
• standard contractual clauses;
• or any other mechanism authorized by the GDPR.

The GDPR provides for several mechanisms governing data transfers to countries located outside the EEA.

19. Retention period

Habits Hero only retains personal data for the period necessary for the purposes for which it is used.

The CNIL points out that personal data must be retained only for the period necessary to achieve the purpose for which it was collected.

User account

Data related to the account is retained for as long as the account remains active.

Habits, To-dos and progression

This information is retained for the entire duration of the account's use so that the user can access their history and statistics.

It is deleted or anonymized when the account is deleted, unless otherwise required by law.

Technical logs

Technical logs are retained for a limited period necessary for security and diagnostic purposes.

Period: 30 days.

PostHog data

Events and information transmitted to PostHog are retained in accordance with the retention period configured in the PostHog account.

Period: 30 days.

Transactions

Certain data relating to purchases, invoices or transactions may be retained for the periods provided for by applicable accounting or tax regulations.

Backups

Certain deleted information may temporarily remain in technical backups until they are rotated or automatically deleted.

20. Data security

We implement reasonable technical and organizational measures to protect personal data.

These measures notably include, depending on the systems involved:

• encryption of communications via HTTPS/TLS;
• authentication mechanisms;
• secure session management;
• access restrictions;
• server protections;
• database access control;
• backups;
• technical logging;
• error monitoring;
• security updates;
• measures to prevent unauthorized access.

Despite these measures, no IT service can guarantee an absolute level of security.

21. Automated decision-making

Certain Habits Hero actions are performed automatically to ensure the service functions properly.

This notably concerns:

• the calculation of experience;
• the calculation of levels;
• the calculation of statistics;
• the calculation of streaks;
• the generation of daily reports.

This processing does not produce a legal decision concerning you and does not have a similarly significant effect within the meaning of the GDPR.

22. Cookies and local storage

The Habits Hero website and web application may use cookies, local storage mechanisms or similar technologies.

They may notably be used to:

• ensure authentication;
• maintain a session;
• secure the account;
• remember certain preferences;
• ensure the service functions properly.

Strictly necessary cookies may be used without prior consent where applicable regulations allow it.

If Habits Hero implements non-essential trackers, notably for advertising or audience measurement purposes requiring consent, an appropriate consent mechanism will be put in place.

23. Communications and e-mails

Habits Hero may send you certain messages required for the service to function.

This may notably include:

• messages relating to your account;
• security notifications;
• information relating to your subscription;
• important information concerning the service.

If Habits Hero implements an optional newsletter or marketing communications, these will be managed in accordance with the rules applicable to electronic prospecting.

24. Minors

Habits Hero does not intend to knowingly collect personal data from minors under conditions contrary to applicable regulations.

Where the consent of a legal representative is legally required, Habits Hero may implement specific measures to obtain this authorization.

A legal representative who believes that a minor has provided data inappropriately may contact us to request that it be reviewed or deleted.

25. Your rights

In accordance with the GDPR, you may, depending on the circumstances, have the following rights:

• right of access to your data;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw your consent where processing is based on it;
• right to define directives regarding the fate of certain data after your death, where French law allows it.

To exercise these rights:

support@habits-hero.fr

We may ask you for information to verify your identity where reasonable doubt exists.

Requests are processed within the timeframes provided for by regulations. The CNIL points out that the data controller generally has a maximum period of one month to respond to a request to exercise rights.

26. Account deletion

You may request the deletion of your Habits Hero account and the data associated with it.

This request may be made:

• directly from Habits Hero's settings when this feature is available;
• or by e-mail to support@habits-hero.fr.

Deleting the account results in the deletion or anonymization of data that is no longer necessary, subject to legal retention obligations.

Important regarding subscriptions

Deleting your Habits Hero account does not necessarily cancel your App Store or Google Play subscription.

If you have a subscription taken out with Apple or Google, you must also cancel it from the corresponding service.

27. Complaint to the CNIL

If you believe that your rights have not been respected, you may lodge a complaint with:

Commission Nationale de l'Informatique et des Libertés – CNIL

3 Place de Fontenoy TSA 80715 75334 Paris Cedex 07 France

Website: www.cnil.fr

28. Changes to this policy

Habits Hero may update this privacy policy to reflect:

• new features;
• new service providers;
• regulatory changes;
• technical changes;
• new subscription plans;
• changes in how data is used.

The last update date is shown at the top of this page.

Where changes are significant, we may also inform users through the application or by any other appropriate means.

29. Third-party services

Habits Hero currently notably uses the following third-party services:

PostHog

Purpose: error diagnostics, logs, stability monitoring and maintenance.

Data that may be transmitted:

• username;
• IP address;
• language;
• time zone;
• technical data and context relating to errors.

Google Firebase / Firebase Cloud Messaging

Purpose: delivery of push notifications.

Data that may be processed:

• installation identifier;
• notification token;
• language;
• time zone;
• information relating to the device and the application.

Apple

Purpose:

• distribution of the iOS application;
• management of purchases and subscriptions made via the App Store.

Google Play

Purpose:

• distribution of the Android application;
• management of purchases and subscriptions made via Google Play.

The privacy practices of these companies are also governed by their respective policies.

30. Contact

For any questions regarding this policy or the processing of your personal data:

Habits Hero

Website: https://habits-hero.fr/

E-mail: support@habits-hero.fr

Data protection: admin@habits-hero.fr

Data controller:

Julien Da Costa – Sole proprietor6 Rue Frédéric Chopin - Trèbes 11800 - France

Applicable law and international users Habits Hero is operated from France.

The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable French legislation.

Habits Hero may be accessible from other countries. Where applicable local legislation grants users additional rights regarding the protection of personal data, Habits Hero respects these rights to the extent that this legislation applies to it.

Users may contact Habits Hero at admin@habits-hero.fr for any question or request relating to their personal data.

© 2026 Habits Hero. All rights reserved.