Skip to content
HabiLand
PrivacyTerms of Use

Privacy Policy

This policy explains what data HabiLand uses, why we need it, and how you can exercise your rights.

Last updated: September 1, 2026
In plain languageLearn how we handle your data and the rules for using HabiLand.
On this pageWho is responsibleData we useWhy we use this dataServices that help usHow long we keep dataYour rightsSecurityChanges to this policy

Who is responsible

HabiLand is the controller of the personal data processed to provide the app and determines why it is used. For privacy questions, requests, or complaints, contact suporte@habiland.com.

Data we use

We process only the data needed to run the service:

  • Account and identity: email address, username, internal identifiers, and Google sign-in identifiers if you choose that option.
  • Product use: habits, quests, completions, schedules, preferences, progress, rewards, companion customizations, and reflections you select.
  • Security and operation: sessions, technical logs, IP address, browser or device information, sign-in attempts, and events needed to prevent fraud and abuse.
  • Notifications: preferences and technical delivery identifiers, only when you enable this feature.
  • Premium subscription: when billing is enabled, customer and subscription identifiers, plan, status, and billing period. HabiLand does not store your full card number.
  • Support: messages and records of actions requested through support.

Aggregated usage metrics.We measure onboarding completion and drop-off, return visits after 1, 7, and 30 days, and the app's economy. Aggregated totals that do not identify individuals may be kept indefinitely. These metrics do not include the content of your habits.

Why we use this data

We use data to create and protect your account, synchronize your routine, record actions, calculate progress and rewards, personalize your companion, provide support, process Premium when available, meet legal obligations, prevent fraud, and keep the service secure and reliable.

Legal bases may include performance of a contract, compliance with legal or regulatory obligations, the lawful exercise of rights, legitimate interests supported by an impact assessment, and consent where required by law, particularly for optional features.

Services that help us

We do not sell personal data. We may use processors to operate parts of the service, always limited to the agreed purpose:

  • Supabase: authentication and database services.
  • Vercel: application hosting and delivery.
  • Resend: transactional email delivery.
  • Google: authentication, only if you choose this method.
  • Stripe: checkout, billing, and the subscription portal when paid Premium is activated.

Some providers may process data outside Brazil. In these cases, we use contractual mechanisms and measures consistent with Brazil's General Data Protection Law (LGPD). Each provider also has its own privacy notices. When making payments, see the Stripe Privacy Policy.

How long we keep data

Your account, habits, purchases, and progress remain available while you use the service. Security records, including IP addresses, are automatically deleted after one year. When you request account deletion, you have 30 days to restore it by signing in again and confirming restoration. After that deadline, your data and Premium access are permanently deleted, and your subscription is cancelled. Records that must be retained are kept only for the applicable period, with restricted access.

Your rights

You may request confirmation of processing and access, correction, information about sharing, portability where applicable, anonymization, blocking or deletion, objection to processing, review of automated decisions, and withdrawal of consent.

In the app, under Settings → Privacy, you can export your data or request account deletion. You can also contact suporte@habiland.com. We may verify your identity before fulfilling a request to protect your account.

If you are not satisfied, you may contact Brazil's National Data Protection Authority (ANPD) or consumer protection agencies.

Security

We use technical and organizational controls, including encrypted communications, protected sessions, access controls, account isolation, security logs, and restricted administrative panels. No system is completely immune to incidents. We will notify affected individuals and the ANPD when required by law.

Changes to this policy

We may update this policy when the service, legislation, or our providers change. Material changes will be highlighted in HabiLand before they take effect. The latest version and date will remain available on this page.

HabiLand
suporte@habiland.comBack to home