Privacy Policy
Changes in this version: the Founding Patron number and what other sect members can see, and what is kept about a Founding Patron purchase after you delete your account (sections 3, 4, 8, 9 and 13).
1. Who we are
Habit Cultivator (“the App”) is developed and operated by Andrija Bogdanović, an individual developer based in Serbia (“we”, “us”, “the developer”).
For the purposes of the EU General Data Protection Regulation (GDPR), we act as the data controller for the personal data described in this policy.
2. Summary (the short version)
3. What data we collect
3.1 Account data
There are two kinds of account, and the difference matters for your privacy.
Guest account (the default). When you open the App for the first time, an account is created for you with no identity attached — no email address, no password, no name we asked you for. It exists only so your progress can be stored and synchronised.
⚠️ A guest account can only be reached from the device that created it. The session key never leaves your phone and we have no way to identify you, restore your account, or connect you to it. Uninstalling the App, or signing out, permanently destroys a guest account and its data. The App states this before you continue as a guest.
Named account. If you add an email address and password — either at the start, or later from inside the App — the following is added. Your account identifier does not change and nothing is migrated: it is the same account.
3.1b Purchase data (if you buy Patron)
We never receive or store your card number, bank details or billing address — payment is handled entirely by Apple or Google.
3.2 App content you create
All of the following is data you produce by using the App:
3.3 Data stored only on your device
Some information never leaves your phone: onboarding and tutorial progress flags, which celebrations and guidance you have already seen, the currently selected theme, your widget preference, and the identifiers of the reminders scheduled locally on your device. This data is removed when you uninstall the App.
Your device also keeps a local copy of data that is in your account — your disciplines, your Chronicle, your Elder letters and your Perfect-Day reflections — so that the App opens and works without a connection. A local copy is not a separate collection: the same data is described in sections 3.1 and 3.2, and it is removed when you delete your account or uninstall the App.
3.4 What we do not collect
We do not collect: precise or approximate location, contacts, photos or media, microphone or camera data, health or fitness platform data (Apple Health / Google Fit), advertising identifiers, browsing history, or biometric data.
We use no analytics SDK, no advertising SDK and no third-party crash-reporting service. (RevenueCat is used only to manage purchases — it is not an analytics or advertising service.)
If we ever add analytics, we will update this policy and — where required by law — ask for your consent first.
3.5 Error reports
⚠️ “No crash-reporting SDK” is not the same as “no crash data”, so we say this plainly: we do record our own error reports.
When the App hits an error it did not expect, it sends us the error message, the technical stack trace, which screen you were on, the App version and the platform, linked to your account identifier. It goes to our own database and to no one else — there is no third-party service involved.
Errors that are a normal part of using an app — no connection, an expired session, a wrong password, an email already in use — are not reported.
We use these reports for one purpose: to find and fix faults. They are deleted together with your account (section 9).
4. How we use your data
We process your data to:
We do not use your data for profiling, automated decision-making with legal effect, or third-party advertising. The App may use your own progress inside the App — for example a breakthrough, or tapping a locked theme — to choose when to mention its own Patron tier; that decision is made in the App and is never shared with anyone.
5. Legal basis (GDPR)
6. Service providers (processors)
We use a small number of providers. They process data on our instructions and are bound by data-processing agreements.
We do not sell personal data, and we do not share it with data brokers or advertisers.
7. International transfers
Your account data and habit content are stored in the European Union (Paris, France).
Some providers listed above (Expo, RevenueCat, Apple, Google) are based in the United States. Where personal data is transferred outside the EU/EEA, the transfer is protected by the European Commission’s Standard Contractual Clauses and/or the EU–US Data Privacy Framework, as applicable to that provider.
8. How long we keep data
9. Deleting your account and data
You can delete your account at any time:
In the App: Profile → Settings → Delete account. You will be asked to confirm; the action is permanent. This works for both kinds of account and is the fastest route.
Guest accounts: signing out of a guest account deletes it, because the session on your device is its only credential — there would be no way to sign back in. The App asks you to confirm this separately, and it requires a network connection so that the account is really removed from our database and not merely lost to you.
By email: write to hello@habitcultivator.com from the email address of the account. We will verify and complete the deletion within 30 days.
⚠️ The email route cannot work for a guest account, because there is no email address attached to it and we have no other way to verify that the account is yours. For a guest account, deletion is done in the App (Delete account, or signing out). If you have already lost access to the device, the account will be deleted automatically only if it was never used (section 8); otherwise, please contact us and we will explain what is and is not possible — we would rather tell you that than pretend we can identify you.
Deletion removes your profile, disciplines, completion history, events, focus sessions, items, sect membership and pacts. Anonymous aggregate records that cannot identify you (for example a sect’s total daily score) may remain. A report you made, or a report about your content, may be kept for up to 90 days after it is resolved, with the account reference removed, so that we can act on abuse and show what we did (retention for security and abuse prevention). The record of a Founding Patron purchase, with its seal number if one was given, is kept without any link to your account, and that number is never issued again (section 8).
Uninstalling the App alone does not delete your account, because your data is stored in your account, not only on the device.
Step-by-step deletion instructions.
10. Your rights
If you are in the EU/EEA (and, in substance, wherever you live) you have the right to:
To exercise any right, email hello@habitcultivator.com. We respond within 30 days, free of charge.
⚠️ If you use a guest account, we cannot identify you — there is no email address, no name and no device identifier that we hold. That is a deliberate consequence of collecting as little as possible, but it also means we cannot verify a request that arrives by email. Access, portability and erasure for a guest account are therefore exercised inside the App, from the device that holds the account. Adding an email address (Profile → Bind account) makes the email route available and does not change your account or its data.
11. Security
We protect your data with: encrypted transport (TLS/HTTPS) for all communication, encryption at rest by our database provider, hashed passwords (we never store plaintext), and row-level security rules that ensure each account can only read and write its own data — except for the limited sect information you choose to share by joining a sect.
No system is perfectly secure. If a data breach occurs that is likely to result in a risk to your rights, we will notify the competent supervisory authority and affected users as required by law.
12. Children
Habit Cultivator is not directed to children under 13 (or under 16 where local law requires a higher age), and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
13. Other users can see some information
Sect. If you join or create a sect, other members can see: your cultivator name, your realm/rank, your Qi for the week and for today, whether you achieved a Perfect Day, any equipped title, and your Founding Patron number if you hold one.
Duel Pact. The other participant sees your cultivator name and whether you sealed at least one discipline each day of the pact — not which disciplines.
Dual Cultivation (Dao Bond). This is the only feature where another user can see your discipline names. If you accept or offer a bond, your partner can see:
You are told this before the bond is created, and you can sever the bond at any time, which immediately stops all sharing. Only one bond can exist at a time.
Never shared with any other user, in any feature: your email address, your Dao statement, your Perfect-Day reflections, your habit notes/triggers, your purchase history (apart from the Founding Patron number and any title you choose to equip, described above).
Reporting and hiding. In a sect, a pact or a Dao Bond you can report a name, a sect notice or a partner’s visible disciplines, and you can hide another person so that their name and notices no longer appear to you. A report stores a copy of the reported text as it was at that moment, the kind of content, the account it concerns and your account as the reporter. We review reports and act on them (removing content, removing a member, suspending an account); the reported person is not told who reported them. Hiding someone is visible only to you; it also prevents a new pact or bond between the two of you and ends an active bond.
14. Changes to this policy
If we change this policy materially — for example if we add analytics, or change where data is stored — we will update the “Last updated” date and, for significant changes, notify you inside the App before the change takes effect.