Legal
Privacy Policy
Your privacy matters to us. This policy explains what data Habit Tracker ("the App"), developed by qbito, collects and how it is used. The App uses Google Firebase for all user accounts, including guest (anonymous) sessions.
1. Firebase & All User Sessions
The App is powered by Google Firebase (firebase.google.com/support/privacy), a service provided by Google LLC. Firebase is used in all cases:
- Guest mode (no sign-in): Firebase Authentication automatically creates an anonymous account. Your habit data, streaks, settings, and preferences are stored in Firebase Firestore under that anonymous identity. No email or password is required.
- Full account (email, Google Sign-In, or Apple Sign-In where available): your email address and external sign-in identifier are linked to your account. All habit data is stored in Firebase Firestore and Firebase Storage (if you upload attachments), enabling backup and multi-device access.
You can delete your account and associated data at any time from the App's account screen. You can also submit a deletion request through our account deletion page.
2. Analytics & Crash Reporting
The App uses the following Firebase services to help us understand usage and improve stability:
- Firebase Analytics: collects usage events such as screens visited and features used. While you are signed in, events may be associated with your internal Firebase user identifier. We do not send habit names, habit descriptions, survey answers, or message contents as analytics events.
- Firebase Crashlytics: automatically collects crash reports containing device model, OS version, app version, stack traces, diagnostic logs, and the internal Firebase user identifier used to investigate failures. Habit content is not intentionally included.
3. Profile, Support & User Content
You may optionally provide a display name and profile photo. If you send a bug report, feature request, or support message, we store the title, description, conversation, status, optional attachments, and optional diagnostic information you choose to include. Support data is linked to your internal account identifier so you can view replies in the App.
4. In-App Surveys & Diagnostic Data
From time to time the App may invite you to complete an optional in-app survey. Your answers are stored in Firebase Firestore and linked to your account. To help us interpret responses and reproduce issues (for example during closed testing), each submitted survey also includes a snapshot of basic technical information about your device and app installation:
- platform (Android / iOS), app version and build number;
- operating system version (for example "Android 14");
- device brand and model (for example "samsung SM-G991B");
- app language / locale and whether you currently have an active premium subscription.
This information is technical and diagnostic in nature. We do not collect advertising identifiers, persistent device IDs, precise location, or any other data that uniquely fingerprints your device. Completing a survey is always optional, and this technical snapshot is only attached when you choose to submit one.
5. Push Notifications
If you grant notification permission, the App uses Firebase Cloud Messaging (FCM) to deliver reminders. A device token is generated by FCM and stored in Firebase to allow delivery of notifications to your device. This token is refreshed periodically. Habit reminder schedules and habit names are handled locally by the App. For support conversations, the current token may be stored with your support thread so we can notify you about replies.
6. Purchases & RevenueCat
Premium purchases are processed by Google Play or the Apple App Store and managed through RevenueCat. RevenueCat receives an internal App User ID, product and entitlement information, purchase history, subscription status, store, currency, and related transaction metadata. We do not receive your full payment-card details.
7. Email Contact
If you contact us by email, your email address and message are used solely to respond to your inquiry. We do not share this information with third parties.
8. Service Providers & App Stores
We use Google Firebase for authentication, database, file storage, analytics, crash reporting, push notifications, and cloud functions; RevenueCat for subscription management; and Google Play or the Apple App Store for app distribution and payment processing. These providers process data under their own privacy terms. We do not sell your personal data.
9. Data Retention & Deletion
Account data is retained while your account exists. Deleting the account removes the Firebase Authentication account, habits, categories, profile, survey responses and drafts, support conversations and attachments, per-user statistics, install-attribution record, and RevenueCat customer profile. An active mobile-store subscription is not cancelled automatically; cancel it separately in Google Play or the App Store.
Aggregated statistics that no longer identify or relate to your account may remain. Store transaction records may also be retained by Google or Apple under their own legal and accounting obligations. To request deletion outside the App, use our account deletion page or email support@qbito.app.
10. Children's Privacy
The App is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
11. Data Security
All data is stored in Firebase, which uses industry-standard encryption in transit (TLS) and at rest. Your device's built-in security (passcode, biometrics) additionally protects the app on the device level.
12. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be published on this page with an updated "last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.
13. Contact
If you have questions about this privacy policy, please contact us at contact@qbito.app.