Privacy Statement for the Habyte Mobile Apps

We at Habyte value privacy and giving users control over their personal data. That is why we designed Habyte from the start with the protection of your privacy in mind and the aim to let you choose how and to which extend your data is shared.

This privacy statement applies to our mobile apps for the Android and iPhone operating systems.

Responsible Person / Data Controller

The Habyte Android and iPhone apps ("Habyte") are provided by a team which is externally represented by Stefan Blamberg ("Team Habyte" or "we" in the following). He also acts as the controller in terms of the European Union's General Data Protection Regulation (GDPR).

Contact information:

Stefan Blamberg
Augartenstra├če 74
68165 Mannheim
Germany

E-Mail: privacy@habyte.app

General functionality of the apps and data processed on your device

Habyte helps you build good or break bad habits in your life by allowing you to create recurring goals and tracking your progress towards them. With several integrations and automations the apps are able to validate locally on your device whether you achieved your goals to take the process of daily manual progress logging off your shoulders. The data used for this can be provided by your Operating System or device (e. g. location, usage time for specific apps) or other apps and services (e. g. fitness app integrations).

Habyte processes the raw data that is used for evaluating the achievement of your goals (like your realtime device location or general app usage statistics) only on your device. The Habyte apps will only access such information if you explicitly create automations which rely on these data sources.

Usage of location data

We provide the option to automate the tracking of your habits via the device location. For example if your goal is to go to the gym a certain number of times or for a certain duration, you can configure the location of your gym and Habyte will track when you are there. If this feature is enabled, Habyte will access your location in the background in order to track your habits even when the app is closed.

To protect your personal data, Habyte uses geofencing techniques and will never create full location profiles. Geofences are boundaries around a specified location which allow us to notice when you enter or leave the enclosed area without observing your exact location.

We locally store the following information about geofences:

  • center of the tracked location including latitude, longitude and the name of the location selected via the Google Places API during the habit creation
  • radius of the tracked area
  • timestamps when you entered the geofence
  • durations you spent inside the tracked area
  • information about the habit associated with the geofence

Habyte will only access your location if you use the location automation feature and after you granted the required permissions. You can disable the location tracking at any time by switching off the location automation on the habit detail screen or by revoking the permissions in your device settings. You will see all automatically tracked events in the habit details and can remove single entries or remove all entries by deleting the habit.

Google Maps SDK and Google Places API

For location automations Habyte uses the Google Maps SDK and the Google Places API.

When creating a new habit you can input a location name into a search field. Your input will be send to the Google Places API to suggest locations to your query. Also in the process of creating a habit with location automation a map is shown that is provided by the Google Maps SDK. Habyte passes your location at the time of the habit creation to the SDK so the map shows your current location in the initial state. As soon as you select a suggested location Habyte will send the coordinates of this location to the Google Maps SDK to let the map preview the selected location instead of your current location.

Whenever you display the automation configuration of a Habit after the creation Habyte uses the Google Maps SDK to display a preview of the targeted location. Habyte sends the coordinates of your configured location to the Google Maps SDK in order to achieve this.

Google Maps SDK and Google Places API are services provided by Google Ireland Limited who may transfer the received data to the United States of America. The legal basis for this data processing is the consent that you give when creating a location automation for the first time.

Usage Analytics

On the first start of Habyte we ask you for consent to gather usage information. We are grateful if you consent because this collected data helps us to spot problems and further improve our apps. You will not have any disadvantages if you decide not to share any usage data and can revoke your consent at any time.

If you give your consent Habyte will send usage information coupled with identifiers to your device and Habyte installation to the Firebase Analytics service provided by Google Ireland Limited. The usage information can contain the time and country you use the app from and the general screens you use and actions you perform in the app. When creating a habit we capture whether you complete the app creation and which category, habit type and which automation type you choose in the process. More detailed information on the habits is not collected in this context.

Google will keep this information for up to 14 months and processes the information outside of the European Union and the European Economic Area, i. e. the United States of America. Legal basis for the processing is your given and revokable consent (Art. 6 para. 1 lit. a. EU-GDPR). You can change the setting whether usage information is collected using the toggle on the profile screen.

Synchronization

To facilitate using Habyte across multiple devices and to recover your data after you reinstalled the app or lost your phone, we plan to add synchronization functionality to Habyte. We will never analyze your personal habit data or use it for marketing purposes besides the data stated in the usage analytics section.

If you decide to use this feature and register an account with us, data sent to our servers may include:

  • your created habits with their general and their automation configuration (everything that you supply when creating a new habit)
  • logs that show the progress you made towards a habit (log entries). Depending on the habit type, this includes exact quantities, timestamps and time measurements.

If you decide to use this feature the data processing takes place on the basis of your given consent (Art. 6 para. 1 lit. a. EU-GDPR). You can revoke your consent at any time by contacting us using the information provided above.

Crash Reporting

If Habyte crashes on your device, something went horribly wrong that we need and want to fix. To notice those crashes we implemented Crash Reporting mechanisms in Habyte.

In the event of an app crash Habyte sends a crash report to servers of the Firebase Crashlytics service which is provided by Google. These crash reports contain stack traces, mini memory dumps and an identifier for your installation.

Google retains this data for 90 days and may transfer the data to the United States of America. Legal basis for the Crash Reporting is our interest in fixing fatal errors and improving the app which we consider a legitimate interest in terms of Art. 6 para. 1 lit. f. EU-GDPR.

Your Rights

You have a right to:

  • obtain confirmation from us to whether we process your data. If that is the case you have a right to obtain information on the data processing according to Art. 15 GDPR,
  • have incomplete or wrong information completed or corrected according to Art. 16 GDPR,
  • request deletion of your data according to Art. 17 GDPR and the restriction of processing of your data according to Art. 18 GDPR,
  • obtain your personal information we process in a structured, commonly used and machine-readable format according to Art. 20 GDPR,
  • revoke your consent to data processing according to Art. 21 GDPR and
  • not to be subject to a decision based solely on automated processing according to Art. 22 GDPR.

You also have a right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Final Remarks

Please reach out to us if you have any questions or concerns.

Android, Firebase, Crashlytics, Google, Google Maps and Google Places are trademark of Google LLC.
iPhone is a trademark of Apple Inc., registered in the U.S. and other countries.