Privacy Policy

Last updated: September 5, 2026

Overview

HabitUnlock ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our app.

Information We Collect

Website Visitors

The website uses cookie-free analytics by default when browser storage is available: PostHog counts page visits and App Store download clicks, and Vercel counts page visits. One Analytics preferences choice in the footer turns both off. Global Privacy Control, Do Not Track, or unavailable browser storage also keeps both off. Google Analytics is no longer used on the website. Website session recording and advertising trackers are disabled.

• Website analytics — page paths and App Store download clicks, with browser and device information. Query strings and incoming referrer URLs are excluded from our configured pageview properties.
• Local preferences — when browser storage works, your website analytics choice is saved on this device for up to 180 days; calculator settings may also be saved in your browser. These settings do not require analytics.
• IP address — used to service requests, protect against abuse, and derive approximate geographic location; HabitUnlock does not store raw IP addresses in its app deletion rate-limit records

Legacy Referral & Early-Access Information

HabitUnlock is available on the App Store, the app does not require an email account, and referral rewards are currently paused. If you previously joined the waitlist or use an existing confirmation or referral link, we may retain or process:

• Email address — to confirm the legacy signup and send permitted product communications
• Signup timestamp — to preserve the historical signup record
• Referral source — to understand how you found us
• Referral code — a unique identifier for your personal referral link
• Referred by — tracks who referred you, if applicable (referral code only, not email)
• Historical queue position — calculated from signup time and referral activity

App Usage

When you use the HabitUnlock app, we collect:

• Optional Apple Health data (only after you grant permission) — step count, exercise time, stand time, and workout records used for walking progress and an optional workout auto-complete feature. Health data is processed locally on your device and is never sent to HabitUnlock, PostHog, Sentry, or RevenueCat.
• Pseudonymous analytics — feature interactions, app performance, device type, operating-system and app versions, coarse location, and a randomly assigned installation identifier (sent to PostHog). Analytics are not used for third-party advertising or tracking.
• Subscription data — subscription status, product, purchase and entitlement timestamps, and a pseudonymous customer ID (managed by Apple and RevenueCat)
• Diagnostics — crash reports, performance measurements, and limited diagnostic breadcrumbs associated with a pseudonymous installation ID (processed by Sentry)
• App integrity and deletion-security records — an App Attest key identifier and public key, assertion counter, app/build validation fields when supported by the operating system, an attestation receipt only when independently verified, a hashed recovery secret, and the pseudonymous RevenueCat and PostHog identifiers bound to that installation. These records are used only to verify genuine app requests and prevent one installation from deleting another installation's data.
• Local preferences — habits, streaks, achievements, and settings (stored on your device only)

Important: We do not have access to which specific apps you use or block. Screen Time data is processed locally by Apple's framework.

Email Communications

By signing up for updates, you agree to receive:

• Confirmation or service messages for a legacy waitlist signup
• Product updates and health tips (maximum 2 per month)

You can unsubscribe at any time using the link in any email.

How We Use Your Information

We use collected information to:

• Provide and improve the HabitUnlock app experience
• Understand how features are used so we can make them better
• Manage subscriptions and process purchase validation
• Send you updates about launches and product improvements
• Maintain and respond to legacy waitlist and referral records while rewards are paused
• Respond to your inquiries

Third-Party Services

We use the following third-party services:

Website

• PostHog — cookie-free website analytics for page visits and App Store download clicks, subject to the website analytics preference and browser privacy signals
• Vercel — cookie-free website pageview analytics, subject to the same website analytics preference and browser privacy signals
• Supabase — database provider (securely stores referral / contact information)
• Resend — email delivery service (processes email address for sending communications)

Mobile App

• PostHog — pseudonymous product analytics (feature usage, app performance, device info, coarse location, and installation ID). To diagnose bugs and improve usability, the app uses PostHog's session replay feature, which captures a masked visual recording of how you interact with the app's screens. All text you enter, all images, and sensitive views — including the Screen Time app picker — are fully masked before the recording is created, so we never see your keystrokes, your photos, or which apps you choose to block. These recordings are used solely for product improvement and bug diagnosis, are never sold or used for advertising, and you can disable them by turning off analytics in the app's Settings.
• Sentry — crash reporting and performance monitoring. Receives pseudonymous crash reports, performance measurements, and selected diagnostic breadcrumbs; no Apple Health data or Screen Time app selections are included.
• Apple Search Ads (AdServices) — install attribution provided by Apple (campaign ID, keyword ID, and anonymous ad-interaction data) so we can measure which sources bring new users. This uses Apple's AdServices framework; it does not use the advertising identifier (IDFA) and does not track you across other apps or websites.
• RevenueCat — subscription management and purchase validation (anonymous customer ID, subscription status, purchase history)
• Apple HealthKit — reads health data with your permission (data stays on-device)
• Apple App Attest — verifies that sensitive deletion requests originate from a genuine, unmodified HabitUnlock installation on supported Apple hardware
• Supabase — stores the minimal App Attest, deletion-binding, challenge, and abuse-prevention records needed to provide secure account-data deletion
• Apple Screen Time API — app blocking (processed locally by Apple)
• Apple App Store / StoreKit — payment processing (handled entirely by Apple)

We do not sell, trade, or rent your personal information to any third party. App analytics and diagnostics use pseudonymous installation identifiers rather than your name or contact information and are not used to track you across other companies' apps or websites.

Cookies & Tracking Technologies

The website does not use analytics cookies. When browser storage is available, cookie-free PostHog and Vercel analytics are on by default unless you turn them off in Analytics preferences or your browser sends Global Privacy Control or Do Not Track. If storage is unavailable, website analytics stays off. Turning analytics off stops future collection and cancels pending browser analytics requests where possible; it cannot retract data already received by a provider. If you turn analytics back on after turning it off, collection resumes on the next page load. Your website choice is saved on this device for up to 180 days when storage works and is separate from the iPhone app’s analytics setting. Essential hosting and security request logs are not controlled by the website analytics choice.

Data Retention

• On-device data — retained until you delete the app
• Analytics data — retained for up to 12 months
• Subscription data — retained as needed to provide and restore subscription access and according to Apple and RevenueCat retention obligations
• Active App Attest and deletion bindings — retained while needed to authenticate an installation's deletion request. On successful deletion, the Apple receipt and vendor identities are scrubbed immediately. The minimal key identifier, public key and counter are kept as an idempotency tombstone so a retried deletion cannot be mistaken for a new installation; that tombstone becomes eligible for removal 30 days after the deletion and is removed the next time the app requests an App Attest challenge. There is no separate scheduled cleanup job, so if no such request is made the tombstone can persist beyond 30 days.
• Referral / contact data — retained until you request deletion

Data Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest. However, no method of transmission over the internet is 100% secure.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request deletion of your data
• Unsubscribe from our emails at any time
• Opt out of app analytics and masked session replay in HabitUnlock Settings
• Revoke HealthKit permissions at any time in iOS Settings

To exercise these rights, contact us at privacy@habbitunlock.com.

Children's Privacy

Our services are intended for users 13 years and older. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or through our website.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

privacy@habbitunlock.com