Privacy Policy

We are committed to protecting your privacy and ensuring the security of your personal information. This policy explains how we collect, use, and safeguard your data when you use Habit Saga.

Last Update: November 2025

1. Information We Collect

1.1 Personal Information

When you use Habit Saga, we collect the following personal information:

Data Type Purpose Legal Basis
Name Account identification, personalization Contract performance
Email Address Account creation, communication, support Contract performance
Habit Data App functionality, progress tracking, analytics Contract performance
Usage Analytics App improvement, feature development Legitimate interest
Subscription Data Payment processing, subscription management Contract performance

1.2 Automatically Collected Information

  • Device information (type, operating system, version)
  • App usage statistics and performance data
  • Crash reports and error logs
  • IP address and general location (country/region)

2. How We Use Your Information

2.1 Primary Uses

  • Provide App Services: Enable habit tracking, progress monitoring, and gamification features
  • Account Management: Create and maintain your user account
  • Personalization: Customize your experience and provide relevant content
  • Communication: Send important updates, notifications, and support responses
  • Subscription Management: Process payments and manage premium features

2.2 Analytics and Improvement

  • Analyze app usage patterns to improve functionality
  • Identify and fix technical issues
  • Develop new features based on user behavior
  • Ensure app security and prevent fraud

3. Third-Party Services

3.1 Firebase (Google)

We use Google Firebase for:

  • Authentication: Secure user login and account management
  • Cloud Firestore: Secure data storage and synchronization
  • Analytics: App usage insights and performance monitoring
  • Crashlytics: Error reporting and app stability improvement

Firebase processes data in accordance with Google's Privacy Policy. Data may be transferred to and processed in countries outside Switzerland, including the United States, under Google's data protection measures.

For further informations, please visit: Firebase-privacy

3.2 RevenueCat

We use RevenueCat for subscription management:

  • Processing in-app purchases and subscriptions
  • Managing subscription status and renewals
  • Providing subscription analytics

RevenueCat processes subscription data in accordance with their Privacy Policy and maintains appropriate data protection standards.

For further informations, please visit: RevenueCat-privacy

4. Data Storage and Security

4.1 Data Location

Your data is primarily stored on Google Firebase servers, which may be located in various countries including the United States and European Union. All data transfers comply with applicable data protection laws and Google's international data transfer mechanisms.

4.2 Security Measures

  • End-to-end encryption for data transmission
  • Secure authentication protocols
  • Regular security audits and updates
  • Access controls and monitoring
  • Data backup and recovery procedures

4.3 Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

  • Account Data: Until account deletion or 3 years of inactivity
  • Habit Data: Until account deletion or upon user request
  • Analytics Data: Aggregated and anonymized after 26 months
  • Support Communications: 3 years for quality assurance

5. Your Rights

Under Swiss data protection law and GDPR (where applicable), you have the following rights:

5.1 Access and Portability

  • Request access to your personal data
  • Receive a copy of your data in a portable format
  • Export your habit data from the app

5.2 Correction and Deletion

  • Correct inaccurate personal information
  • Delete your account and associated data
  • Request erasure of specific data categories

5.3 Control and Objection

  • Restrict processing of your data
  • Object to data processing for legitimate interests
  • Withdraw consent for optional data processing
  • Opt-out of marketing communications

6. Children's Privacy

Habit Saga is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

7. International Data Transfers

As we use international service providers (Google Firebase, RevenueCat), your data may be transferred to and processed in countries outside Switzerland. We ensure that:

  • All transfers comply with Swiss data protection laws
  • Adequate protection measures are in place
  • Service providers maintain appropriate data protection standards
  • Standard contractual clauses or adequacy decisions govern transfers

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

  • Notify you of significant changes through the app or email
  • Update the "Last Updated" date at the top of this policy
  • Provide a summary of key changes when applicable
  • Obtain your consent for material changes that affect your rights

9. Contact Information

Data Controller

DafflonMedia
Chemin des Colombettes 42
1740 Neyruz
Switzerland

Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact us:

Email: Contact Form
Response Time: We will respond to your inquiry within 30 days

Data Protection Authority

If you have concerns about our data handling practices, you may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC):

Website: www.edoeb.admin.ch

10. Consent and Agreement

By using Habit Saga, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with any part of this policy, please do not use our app or services.

For users in the European Economic Area: Your use of our services constitutes consent to the data processing described in this policy, where consent is the legal basis for processing.