Privacy Policy
Last updated: 10/2/2025
Introduction
At Z3st Habits ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our habit tracking application and services.
Information We Collect
Information You Provide
- Account Information: Email address, password, and profile information when you create an account
- Habit Data: Information about your habits, routines, and progress tracking
- Usage Data: How you interact with our application features
- Communication: Messages you send to us through support channels
Automatically Collected Information
- Device Information: IP address, browser type, operating system, and device identifiers
- Usage Analytics: Pages visited, features used, and time spent in the application
- Performance Data: Application performance metrics and error reports
How We Use Your Information
We use the collected information to:
- Provide and maintain our habit tracking services
- Personalize your experience and adapt habit recommendations
- Improve our application and develop new features
- Send you important updates and security notifications
- Provide customer support and respond to your inquiries
- Analyze usage patterns to improve our services
Data Security
We implement industry-standard security measures to protect your personal information:
- End-to-end encryption for sensitive data transmission
- Row-level security policies in our database
- Regular security audits and penetration testing
- Secure authentication using Supabase Auth
- Automatic session management and token rotation
Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With Your Consent: When you explicitly agree to share information
- Service Providers: With trusted third-party services that help us operate our application (e.g., Supabase for database, Stripe for payments)
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In the event of a merger, acquisition, or sale of assets
Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request your data in a portable format
- Restriction: Request restriction of how we process your information
- Objection: Object to processing based on legitimate interests
Data Retention
We retain your personal information only as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you delete your account, we permanently delete your personal information within 30 days, except where retention is required by law.
Cookies and Tracking
We use cookies and similar tracking technologies to enhance your experience:
- Essential Cookies: Required for basic application functionality
- Analytics Cookies: Help us understand how you use our application
- Preference Cookies: Remember your settings and preferences
You can control cookie settings through your browser preferences.
Third-Party Services
Our application integrates with trusted third-party services:
- Supabase: Database and authentication services
- Stripe: Payment processing for premium subscriptions
- Vercel: Application hosting and deployment
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information during international transfers.
Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through our application. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at privacy@z3st.app.
GDPR Compliance
For users in the European Union, we comply with the General Data Protection Regulation (GDPR). This includes providing you with control over your personal data and ensuring lawful processing.