Personal Information:

• Name and email address (via Google login)
• Profile picture (if provided by Google)

Usage Data:

• Your created habits (title, description, target frequency)
• Daily entries (which habit was completed when)
• Settings (language, sharing preferences)
• Achievements and level progress

Technical Data:

• IP address (for security and error analysis only)
• Browser type and version
• Usage times and click behavior in the app

We use your data exclusively for the following purposes:

• Providing the app: Store and display your habits
• Personalization: AI coach analysis based on your progress
• Community features: Show your progress to others (only if you enable it)
• App improvement: Anonymized usage statistics for optimization
• Security: Detection and prevention of abuse
• Communication: Important updates or security notices (very rarely)

We do NOT use your data for:

• Personalized advertising
• Selling to third parties
• Tracking outside the app

We NEVER share your data, except:

• With your permission: If you enable the community function, others see your name and daily progress (not your specific habits)
• Technical service providers: Base44 (hosting platform) and Google (authentication) have technical access but are contractually bound to confidentiality
• Legal obligation: Only if legally required (e.g., court order)

No sharing with:

• Advertising companies
• Data brokers
• Social media platforms
• Other commercial third parties

We employ state-of-the-art security measures:

• Encryption: All data is transmitted encrypted (HTTPS/SSL)
• Access control: Only you can view and edit your own habits
• Secure authentication: OAuth 2.0 via Google (no passwords on our servers)
• Regular backups: Your data is regularly backed up
• EU servers: Your data is stored on servers in the EU (GDPR compliant)
• Minimal data retention: We only store what's necessary

You have the right at any time to:

• Access: Know what data we have stored about you
• Rectification: Have incorrect data corrected
• Erasure: Completely delete your account and all your data (via Profile → Privacy Settings)
• Data portability: Export your data as a JSON file (via Profile → Export Data)
• Objection: Object to data processing
• Restriction: Restrict processing

How to exercise your rights:

• Go to Profile → Privacy Settings
• Or contact us via the feedback form

• Active accounts: As long as your account is active
• After account deletion: All personal data is irreversibly deleted within 30 days
• Anonymized statistics: Anonymous usage statistics (without personal reference) may be retained longer to improve the app
• Legal retention obligation: In rare cases, we must retain certain data longer (e.g., in legal disputes)