Privacy Policy

1. Overview and Core Philosophy

Private Habit ("the Application") is engineered from the ground up as a local-first, privacy-respecting habit tracker. Unlike conventional mobile applications, Private Habit does not operate remote servers, does not maintain user accounts, does not collect personal identity information, and does not sell or share data with advertising or data broker networks.

2. Data Collection and Processing

The Application generates and processes data exclusively on your physical mobile device. This data includes:

• Habit Definitions: Names, descriptions, icons, color codes, and categories chosen by the user.
• Schedules and Reminders: Target frequencies, scheduled days of the week, and preferred notification reminder times.
• Completion Logs: Historical timestamps indicating when a habit was completed, skipped, or undone.
• Application Preferences: Theme settings (Light, Dark, AMOLED), biometric lock preference, and notification permissions.

3. Data Storage and Sandbox Security

All habit data is recorded in a local SQLite database managed by the Drift framework and placed strictly within the private application directory allocated by the mobile operating system:

• Android: Stored under /data/data/com.privatehabit.private_habit/app_flutter/private_habit.sqlite. Sandboxed by Android File-Based Encryption (FBE) and protected by Linux kernel UID isolation. System auto-backup is explicitly disabled (android:allowBackup="false") to prevent silent extraction into unencrypted cloud drives.
• iOS: Stored within the application's isolated sandboxed Documents folder, protected by Apple's Data Protection hardware enclave (Class C complete protection when device is locked).

4. Cryptographic Backup & Recovery

Private Habit provides a user-initiated export mechanism designed with authenticated symmetric cryptography:

• Algorithm: AES-256-GCM (Galois/Counter Mode).
• Key Derivation: PBKDF2-HMAC-SHA256 with 100,000 iterations, utilizing a 128-bit cryptographically secure random salt generated on your device.
• Zero-Knowledge Principle: The encryption key is derived entirely on your device and destroyed immediately following file creation. There is no master key, recovery backdoor, or cloud escrow. If you forget your backup passphrase, the backup cannot be recovered.

5. Operating System Permissions and Purpose

6. Third-Party Libraries and SDKs

Private Habit audits all code dependencies. The application includes ZERO tracking libraries, analytics suites, or ad networks:

• ❌ No Google Analytics / Firebase Analytics
• ❌ No Crashlytics / Sentry / Telemetry logging
• ❌ No Facebook / Meta / Adjust / AppsFlyer SDKs
• ❌ No Advertising networks
• ✅ Locally bundled assets (Google Fonts runtime downloading is completely disabled)

7. User Data Rights: Export, Purge, and Deletion

Under global privacy regulations (including GDPR Article 17 and CCPA), users have the right to inspect, export, and delete their data at any time:

• Instant Deletion: Users can tap Settings → Privacy & Security → Reset All Data to completely wipe the local SQLite database and restore the application to a pristine state.
• Application Uninstallation: Uninstalling the app permanently purges all application sandbox files from the physical device.

8. Policy Updates and Contact Information

If this Privacy Policy is updated, the revision date at the top will be modified accordingly. For any privacy inquiries, technical audits, or verification requests, please contact: