Privacy Policy

Effective date: February 28, 2026

Pact ("we", "our", "the app") is a habit-tracking app that helps you build better habits with friends. Your privacy matters to us. This policy explains what data we collect, why, and how we handle it.

1. Data We Collect

Account Information

• Email address (from Apple Sign In, Google Sign In, or email signup)
• Display name and avatar (provided by you or your sign-in provider)
• Username (chosen by you)

Habit Data

• Habits you create (name, emoji, schedule, description)
• Completion logs (dates and optional notes)

Social Data

• Groups you create or join
• Habit completions shared with your groups
• Leaderboard rankings (opt-out available)

Device Information

• Push notification device tokens (for delivering notifications)
• Your timezone (for accurate scheduling and streaks)

2. Data We Do NOT Collect

• We do not use third-party analytics or tracking SDKs
• We do not collect your location
• We do not sell or share your data with advertisers
• We do not track you across other apps or websites

3. How We Use Your Data

• Provide the service: Sync your habits across devices, display streaks, and power group features
• Notifications: Send habit reminders and group activity updates you've opted into
• Social features: Show your display name, avatar, and habit progress to members of groups you join

4. What Other Users Can See

When you join a group, other group members can see:

• Your display name and avatar
• Habits you've added to the group (not your private habits)
• Your completion activity and streaks for group habits
• Your leaderboard ranking (unless you opt out)

Your email address, private habits, notification preferences, and timezone are never visible to other users.

5. Data Storage and Security

• Your data is stored securely on Supabase (hosted on AWS)
• All data is transmitted over HTTPS/TLS encryption
• Authentication tokens are stored in your device's Keychain
• Database access is protected by row-level security — users can only access their own data and data from groups they belong to

6. Data Retention and Deletion

• Your data is retained as long as your account is active
• You can delete your account at any time from the Settings screen in the app
• When you delete your account, all your data is permanently removed from our servers, including your profile, habits, completions, and group memberships

7. Children's Privacy

Pact is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you through the app. The effective date at the top of this page indicates when it was last updated.

9. Contact Us

If you have questions about this privacy policy or want to request data deletion, contact us at:

moodysamkary@gmail.com

← Back