Privacy Policy — Habiduo

Last updated: August 2026

This policy explains how the Habiduo application ("the app") handles user data. Data controller: FlorestaDev (the app developer). Contact: support@habiduo.app.

1. Use without an account (local data)

You can use Habiduo anonymously: your habits, progress and settings are stored only on your device and are not sent to any server.

2. Google sign-in and cloud backup

If you choose to sign in with your Google account, the app uses Google Firebase services and processes the following data:

• Account identifiers (email address, display name, user ID) via Firebase Authentication, to identify you and link your data.
• Habit data and settings (names, progress, streaks, categories and preferences) stored as a backup on Cloud Firestore, so they can be restored after a reinstall or on another device.

In this case the data leaves your device and is stored on Google/Firebase servers.

3. DUO mode (sharing with a partner)

If you enable DUO mode and share a habit with a partner, that shared habit's data (name, progress, completion status) is visible to the partner you are linked with, to allow comparison and a shared streak. Habits you do not share remain private.

4. Notifications and sharing

• Local notifications: if you enable reminders, they are generated on your device; no data is sent to us.
• Push notifications (DUO "pokes"): if you connect with a partner, the app uses Firebase Cloud Messaging to deliver a push when your partner sends you a "poke". A messaging token is stored in Cloud Firestore for this purpose.
• Image sharing: when you use the "Share" feature, the app generates an image of your results and opens the system share menu. Where you send it is your choice; we neither receive nor store those images.

5. Advertising

The app shows ads through Google AdMob (Google Mobile Ads SDK). To serve and measure ads, AdMob may access your device's Advertising ID and related data and may share it with Google as an advertising partner. On first launch the app displays a consent request (Google UMP): in regions such as the EEA and UK you can choose whether to allow personalized ads. You can reset or delete the Advertising ID from your device's Android settings. Premium users do not see ads.

6. In-app purchases (Premium)

The app offers optional paid subscriptions (monthly, yearly) and a one-time lifetime purchase (Premium) through Google Play Billing. Payments are processed by Google Play; we do not receive or store your payment details. Google provides the app only with the purchase status needed to unlock premium features. You can manage or cancel a subscription from the Google Play Store.

7. Purposes and legal basis

Data is processed to provide the app's features (saving, backup, synchronization, sharing with a partner), to deliver ads, and to enable in-app purchases. The legal basis is your consent (voluntary sign-in and, where applicable, ad consent) and performance of the requested service.

8. Retention and deletion

Local data remains until you delete it or uninstall the app. Cloud data is kept while your account stays linked. You can:

• use the "Delete all data" option in settings;
• sign out of your Google account;
• request deletion of the data associated with your account by writing to the contact address above.

9. Sharing with third parties

We do not sell your data. Your data is processed by the following providers:

• Google / Firebase (Authentication, Cloud Firestore, Cloud Messaging): cloud infrastructure for sign-in, backup and push notifications.
• Google AdMob: to serve and measure ads; may receive the Advertising ID for advertising purposes.
• Google Play Billing: to process in-app purchases and subscriptions.

See Google's privacy policy: policies.google.com/privacy.

10. Security

Access to cloud data is protected: each user can read and write only their own data, through Firestore security rules and Firebase authentication.

11. Children

The app is not directed to children under 13 and does not knowingly collect their data.

12. Your rights

Under the GDPR you may request access, rectification, deletion or portability of your data, and withdraw consent, by writing to the contact address.

13. Changes

We may update this policy. The date at the top indicates the latest revision.

14. Contact

For any request: support@habiduo.app.