← Back to Home

Privacy Policy

Last Updated: August 2, 2026

Habit Doom is owned and operated by Richard Andrews Thattil, an individual based in Mumbai, Maharashtra, India ("we", "us", or "our").

At Habit Doom, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App") and website. By using the App or website, you consent to the practices described herein.

1. Information We Collect

1.1 Information You Provide

Habit Doom is designed with privacy in mind. We do not require you to create an account or provide personal information to use the App. The App stores the following data locally on your device:

• Habit names and configurations you create
• Check-in records and completion history
• Streak data and calendar information
• App selections for locking
• Reminder and notification preferences
• App settings and configuration preferences
• Check-in photos, if you enable Anti-Cheat

This data is stored exclusively on your device and is never transmitted to our servers.

Home-screen widgets read this same on-device data. No data leaves your device.

1.2 App Blocking Access

iOS: Apple Screen Time API. Habit Doom uses Apple's Screen Time API (Family Controls framework) to block apps you select. This access is strictly limited to:

• Blocking apps and app categories you explicitly choose
• Unlocking apps when you complete your habits
• Managing shield configurations for blocked apps

Important: Habit Doom cannot see what you browse, type, or view. We cannot access your browsing history, messages, emails, photos, or any personal content within apps. The Screen Time API only allows us to block or unblock apps, nothing more. App blocking behaviour may vary across iOS versions and device configurations, and we do not guarantee 100% blocking effectiveness.

Android: Accessibility Service and Usage Access. Habit Doom uses an Android Accessibility Service to detect which app has just come to the foreground, so that an app you have chosen to lock can be interrupted. You enable it explicitly in system Settings and can disable it at any time.

The service is configured to the minimum scope required:

• It cannot read screen content (canRetrieveWindowContent="false")
• It observes only window-state-change events (typeWindowStateChanged), effectively just the package name of the app that came to the foreground
• It is declared as not an accessibility tool (isAccessibilityTool="false"), because it is used for digital wellbeing rather than as assistive technology

Important: Habit Doom cannot see what you type, browse, or view on Android. It cannot read messages, emails, form fields, passwords, or any in-app content. No data observed by the accessibility service is stored or transmitted. It is used momentarily, in memory, to decide whether to show the block screen.

Habit Doom separately uses Android's Usage Access permission (PACKAGE_USAGE_STATS), which you grant in system Settings, to show your own screen-time statistics inside the App. This data is read on-device and is never transmitted.

App blocking on Android depends on the accessibility service remaining enabled; you can turn it off in system Settings at any time. Blocking effectiveness may also vary across Android versions and device manufacturers, and we do not guarantee 100% blocking effectiveness.

1.3 Analytics Data (PostHog)

We use PostHog, a product analytics platform, to understand how users interact with the App and website. Analytics events are not linked to your name, email address, or any account, because the App has no accounts. They are grouped only by a random identifier that PostHog generates and stores on your device.

PostHog collects:

• Feature usage patterns (e.g., which screens are visited, buttons tapped)
• App performance metrics (e.g., load times, crash-free sessions)
• General device information (e.g., device type, OS version, screen size)
• Session duration and frequency of use
• Your IP address, which is recorded with each event
• An approximate location derived from that IP address, including country, region, city, postal code, time zone, and approximate coordinates

About the location data. This is derived from your network connection, not from your device's location services. The App does not request location permission and never accesses GPS or your precise location. The accuracy is typically city-level, in the region of 5 to 20 kilometres, and for some connections only the country can be determined. It is used to understand which regions the App is used in.

PostHog does NOT collect:

• Your name, email address, or any personal identifiers
• Your habit names, check-in data, or streak information
• The names of apps you choose to lock or unlock
• Any content you create or view within the App

Depending on your jurisdiction, an IP address and an IP-derived location may be treated as personal data. We do not use either to identify you, and we do not attempt to link them to a real-world identity.

This analytics data is used solely to improve the App experience, identify bugs, and understand which features are most valuable to users.

1.4 Camera and Check-in Photos (Anti-Cheat)

Anti-Cheat is optional and off by default. If you turn it on, Habit Doom asks you to take a photo when you check in, as proof you actually did the habit.

• Photos are captured in-app only and stored locally on your device. They are never uploaded to our servers or shared with any third party.
• To compare a new photo against your own earlier photos for that habit, the App computes a mathematical representation (an "embedding") of the image entirely on your device, using an on-device model bundled with the App. No image or embedding leaves the device, and no cloud or third-party image-recognition service is used.
• You can delete check-in photos at any time from within the App, and uninstalling the App removes them permanently.
• The camera is used solely for this feature. It is never accessed in the background.

1.5 Permissions We Request on Android

Habit Doom does not request QUERY_ALL_PACKAGES. To let you pick apps to block, it queries only apps that have a launcher icon, which is the narrower, privacy-preserving approach.

2. How We Use Your Information

We use the limited information we collect for the following purposes:

• App functionality: Your locally stored data powers the core habit tracking and app locking features
• Product improvement: Analytics data helps us fix bugs, improve performance, and prioritise new features
• Aggregated insights: We may analyse aggregated analytics data to understand usage trends

We do not use your data for advertising, profiling, or any purpose unrelated to improving the App.

3. Data Storage and Security

Your personal habit data is stored locally on your device. On iOS this uses Apple's standard data storage mechanisms; on Android it is held in an on-device database. This data:

• Never leaves your device
• Is protected by your device's built-in security features (encryption, screen lock or passcode, biometrics). This protection is provided by the operating system rather than applied by us.
• Is permanently and irrecoverably deleted when you uninstall the App, including any check-in photos, or when you reset or lose your device

Your data may be included in device backups (iCloud or local backups on iOS, Google backup on Android) if you have those enabled. We do not access these backups.

Analytics data collected by PostHog is stored on PostHog's secure infrastructure. PostHog maintains industry-standard security measures including encryption in transit and at rest. For more information, see PostHog's Privacy Policy.

4. Payments and Financial Data

Apple processes all payments for Habit Doom subscriptions and purchases. We do not collect, store, or have access to your credit card number, bank account details, or any other financial information. All payment data is handled entirely by Apple through your Apple ID account. For details on how Apple handles your payment information, see Apple's Privacy Policy.

On Android, all payments are processed by Google Play Billing through your Google account. We do not collect, store, or have access to your card number, bank details, or any financial information. For details on how Google handles your payment information, see Google's Privacy Policy.

5. Data Sharing and Third Parties

We do not sell, rent, trade, or otherwise share your personal data with any third party. The only third-party services we use are:

• PostHog: for product analytics as described in Section 1.3
• Apple Screen Time API: for app blocking functionality, governed by Apple's privacy policies
• Apple In-App Purchases: for subscription and payment processing on iOS, governed by Apple's privacy policies
• Google Play Billing: for subscription and payment processing on Android, governed by Google's privacy policy
• Google Play In-App Review: used to show the optional in-app rating prompt on Android

We do not use advertising networks, data brokers, social media tracking pixels, or any other third-party data collection services. Specifically, Habit Doom does not use Firebase, Google Analytics, advertising SDKs, or any cross-app tracking.

6. Cookies and Tracking Technologies

Our website may use essential cookies for basic functionality. PostHog may use first-party cookies or local storage for session tracking, grouped by the random device identifier described in Section 1.3. We do not use third-party tracking cookies or cross-site tracking technologies.

7. Children's Privacy

Habit Doom is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided personal information through our App, please contact us immediately so we can delete such information.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

• Access: All habit data is stored locally on your device and accessible through the App at any time
• Deletion: You can delete individual habits, or delete all data by uninstalling the App
• Modification: You can edit or archive habits at any time through the App
• Data portability: Your habit data remains on your device under your full control

For EU/EEA residents (GDPR), UK residents (UK GDPR), and California residents (CCPA/CPRA): you have rights including the right to information about how data is processed, to object to processing, and to lodge a complaint with a supervisory authority. Beyond the analytics described in Section 1.3, we collect no personal data at all, so most of these rights are satisfied by default.

There is one limitation we would rather state plainly than gloss over. Analytics events are associated only with a random identifier that PostHog generates and stores on your device. It is never shown to you, and it is not linked to your name, email address, or any account, because the App has no accounts. The practical consequence is that if you ask us to delete your analytics data, we have no way to determine which records are yours, and neither do you. We cannot verify or fulfil such a request, and we prefer to say so rather than promise something we cannot deliver. This situation is anticipated by Article 11 of the GDPR, which provides that where a controller is not in a position to identify a data subject, the access and erasure rights do not apply, and the controller is not obliged to collect additional information purely to make identification possible.

What you can do instead: uninstalling the App stops all further analytics collection immediately, and existing analytics events are deleted automatically within 12 months (see Section 9). For any other question, or to exercise the rights that do apply, contact us at unmanaged5057@gmail.com.

9. Data Retention

Local habit data persists on your device until you delete it or uninstall the App. Analytics data is retained by PostHog for a maximum of 12 months, after which it is automatically deleted.

10. International Data Transfers

Analytics data processed by PostHog may be transferred to and stored in jurisdictions outside your country of residence. PostHog implements appropriate safeguards for international data transfers in compliance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. For significant changes, we may also provide notice within the App. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

12. Compliance

This Privacy Policy is designed to comply with:

• Apple's App Store Review Guidelines and App Tracking Transparency requirements
• Google Play Developer Program Policies, including the User Data policy, the Permissions and APIs that Access Sensitive Information policy, and the AccessibilityService API requirements
• General Data Protection Regulation (GDPR) — EU/EEA
• UK General Data Protection Regulation (UK GDPR)
• California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA)
• Children's Online Privacy Protection Act (COPPA)
• Other applicable privacy laws and regulations

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Habit Doom — owned and operated by Richard Andrews Thattil
Mumbai, Maharashtra, India
Email: unmanaged5057@gmail.com

By using Habit Doom, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of information as described herein.