Privacy Policy

Habacus is made by Ascension Labs ("Ascension Labs," "we," "us"). This policy applies to the Habacus app and this website. If something here ever stops matching what the app actually does, treat the app's behaviour as a bug report against this document, not the other way round — and please tell us.

Account information. Habacus uses Auth0 to handle sign-up and login. Depending on how you sign in, this means we hold your name, email address, and an authentication identifier issued by Auth0. We don't see or store your password — Auth0 does.

Habit and log data. The habits you create (names, icons) and the days you mark as done are synced to our backend so your data is available across sessions and devices, not only stored on your phone.

Profile information. Your username, display name, and any bio you add.

Friends and social activity. Friend requests, accepted connections, reactions, encouragement notes, and nudges you send or receive through the Friends feed.

Contacts (optional). If you choose to use "find friends from contacts," the app requests permission to read your device contacts so it can check which of them already use Habacus. This only happens if you trigger it, and it's used solely to suggest matches — we don't build a permanent copy of your address book on our servers.

App preferences. Theme, accent colour, frame material, text size, and haptics settings, so your Habacus looks and feels the way you left it.

Standard technical data. Basic diagnostic and device information (like crash logs or app version) that most apps collect to keep things running.

To run the core product — sliding a bead, keeping your history, syncing it across devices, and showing your rolling consistency. To power the Friends feed and nudges. To respond when you contact us. To fix bugs and improve the app. We do not use your data to serve ads, and we do not sell your personal information to third parties, brokers, or advertisers.

Habacus's Friends feature shares your completed habits with people you've accepted as friends. Right now, that sharing is all-or-nothing: once someone is an accepted friend, they can see all of your habits and whether you've completed them today. Per-habit privacy toggles and per-friend targeting (so you could share "gym" with everyone but keep "therapy" private, for instance) are on our roadmap but are not built yet. Until they are, please only add habits you're comfortable with any accepted friend seeing. We'd rather tell you this plainly now than have it be a surprise later.

We share data with the service providers that make Habacus work: Auth0 (authentication), our application hosting/backend provider, and standard infrastructure vendors (e.g. crash reporting, error monitoring). These providers process data on our behalf and under contract — they don't get to use it for their own purposes. We may also disclose information if required by law, to protect the rights and safety of our users, or in connection with a merger, acquisition, or sale of assets (in which case we'd tell you).

We keep your account and habit data for as long as your account is active. You can delete individual habits at any time in the app. To delete your account entirely, use the "reset all data" option in Settings or email us at hello@habacus.app and we'll remove your account and associated data from our systems, subject to any legal retention obligations.

Habacus is not directed at children under 13 (or the minimum age required in your country to consent to data processing without parental approval), and we don't knowingly collect data from children under that age. If you believe a child has created an account, contact us and we'll remove it.

Ascension Labs and its service providers may process your information in countries other than the one you live in. Where that happens, we rely on the safeguards required by applicable law (such as the UK and EU standard contractual clauses) to protect your data in transit and at rest.

We use industry-standard measures — encrypted connections, credential storage via your device's secure keychain, and access controls on our backend — to protect your data. No system is perfectly secure, and we can't guarantee absolute security, but we treat this seriously and will tell you if something goes wrong.

Depending on where you live (including under the UK GDPR and EU GDPR), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing relies on it. To exercise any of these, email hello@habacus.app. If you're in the UK or EU and unhappy with our response, you also have the right to lodge a complaint with your local data protection authority (the ICO, if you're in the UK).

If we change what we collect or how we use it, we'll update this page and adjust the "last updated" date above. For material changes, we'll try to give you a more direct heads up in the app.

Questions, concerns, or a data request? Reach us at hello@habacus.app.