Privacy Policy
What we collect, and what we don't
Last updated 8 September 2026
Habit League is run by Mayeul Huber, an individual based in France, who is the data controller for the purposes of the GDPR. This policy describes the app as it is actually built, not a generic template.
The short version
- There is no advertising in Habit League, and no advertising identifiers.
- There are no third-party analytics or tracking SDKs. The charts you see in the app are computed from your own data on our own database.
- We do not sell your data, and we do not share it with data brokers.
- Some of what you log is visible to the other members of your league. That is the point of the product, and it is described below.
What we collect
| Data | Why |
|---|---|
| Email address | To create your account, sign you in, and send you account emails such as confirmation and password reset. |
| Display name | It identifies you to the other members of your league. |
| Time zone | Scoring runs on your local day. Without it, a ritual logged at 11pm could land on the wrong day. |
| Your leagues and your role in them | To show you the right league and to know who may administer it. |
| Your rituals, the days you schedule them on, and each day you log | This is the content of the app. It produces your XP, your streak, your rank and your charts. |
| Your votes on proposed pillars | A league decides its pillars by majority vote. |
| Notification preferences and, if you allow notifications, a push token for your device | To send only the notifications you asked for, to the right device. |
| Subscription status | To know whether your account has access to the paid features. |
| Failed attempts to redeem an access code | A short-lived record, kept purely to stop someone guessing codes by brute force. |
What we never receive
We never see your password: authentication is handled by our provider, and passwords are stored hashed. If you sign in with Apple we receive only what Apple passes on, and if you use Apple's private relay we never see your real email address. We never receive your payment card, your billing address or any part of your payment method: purchases are handled entirely by Apple.
What your league can see
Habit League is a social accountability app, so some of your activity is deliberately visible to the other members of the leagues you join: your display name, your rituals and the pillars they sit under, whether you logged a given day, your XP, your streak and your position in the standings. Your email address is not shown to other members.
Who processes data on our behalf
| Provider | Role |
|---|---|
| Supabase | Database, authentication and hosting. Data is stored in the United States (region us-east-1). |
| Apple | Sign in with Apple, and all subscription purchases and renewals. |
| RevenueCat | Keeps track of subscription status. It receives your account identifier, not your email or your habit data. |
| Expo, and Apple's push service | Delivery of push notifications, if you enable them. |
| Resend, using Amazon SES | Delivery of account emails such as confirmation and password reset. |
| Vercel | Hosting of this website. These pages set no cookies and run no analytics. |
Because our database and several providers are in the United States, your data is transferred outside the European Economic Area. Those transfers rely on the standard contractual clauses offered by each provider.
Why we are allowed to hold it
Under the GDPR we rely on the performance of our contract with you for everything the app needs in order to work, on your consent for push notifications, which you can withdraw at any time in the app or in your phone settings, and on our legitimate interest in keeping the service secure for the short-lived record of failed code redemptions.
How long we keep it
We keep your data for as long as your account exists. When you delete your account, your profile, your rituals, your logs, your votes and your league memberships are deleted along with it. Records of failed code redemptions are kept for a few days at most. Some providers keep their own technical logs for a short period under their own policies, and Apple keeps its own record of your purchases independently of us.
Your rights, and how to use them
You may ask for a copy of your data, ask us to correct it, ask us to delete it, object to a particular use, or ask for it in a portable form. You can also complain to the CNIL, the French data protection authority.
Deleting your account
You can delete your account yourself, from inside the app: open Profile, then Delete account. It is immediate and it cannot be undone. Deleting your account does not cancel a subscription bought through Apple, because only Apple can do that. Cancel it in your iPhone settings, under your name, then Subscriptions. If you would rather we did it for you, write to us and we will act within one month.
Children
Habit League is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.
Changes
If this policy changes in a way that matters, we will update the date at the top of this page and, where the change is significant, tell you in the app.
Contact
Write to mayeul@habitleague.io.