Privacy Policy

Who we are

Habbi (also referred to as Hability) is a social habit app. This Privacy Policy describes how we handle information when you create an account and use the app.

Account information

We collect the email address, username (handle), password hash, and display name you provide at sign-up. You may also add a bio, location label, profile photo, and banner. We store a timezone so habit days and streaks stay correct.

Photos, video, and posts

When you post a habit update or set a profile or habit image, we upload that photo or video to our media storage (Cloudflare R2) and keep the object until you delete the post or your account. Camera and photo-library access stay on your device until you choose something to upload.

Comments and mentions

If you comment on a post, we store the comment text, who wrote it, which post it belongs to, and any reply relationship. Mentions in comments may notify the mentioned person.

Friends, blocks, and reports

We store friend requests and friendships so your feed and profile work as expected. If you block someone, we store that relationship to hide their content from you. If you report a post, profile, or comment, we store the report details so we can review safety issues.

Contacts

If you invite friends from your address book, contacts are read on-device so you can send an invite. We do not upload your contacts or match them on our servers.

Notifications and devices

If you enable push notifications, we store an Expo push token and device platform so we can send alerts such as friend requests, comments, and related updates.

Crash, diagnostics, and product analytics

The app sends crash reports and limited diagnostic or product-analytics events to Sentry. We turn off session replay and strip emails, tokens, and request bodies before upload. We do not sell this data.

How we use information

We use the information above to:

• Operate Habbi accounts, habits, posts, comments, and feeds
• Send the notifications you enable
• Keep the service secure and investigate abuse reports
• Improve reliability through crash and diagnostic data

Sharing

We use service providers that process data on our behalf, including Cloudflare (media storage and CDN), Fly.io (API hosting), database and cache providers, Expo (push delivery), and Sentry (crash/diagnostics). We do not sell your personal information.

Account deletion

In the app: Settings → Account management → Delete account. This signs you out and queues deletion. We remove or anonymize your login, profile, posts, photos, avatars, banners, comments, push tokens, friendships, and related app data. We may keep limited report records for safety or legal reasons.

Contact

Questions about privacy: see our Support page or email support@joinhabbi.com.