Privacy Policy

Last updated: 26 July 2026 · Effective date: 26 July 2026

1. Who We Are

HappyHabit is operated by InnovateLabs, based in Kilcock, Co. Kildare, Ireland. We are the data controller for all personal data collected through the HappyHabit mobile application and website (happyhabit.org).

Contact: happyhabit.support@gmail.com

2. Data We Collect

We collect the following information when you use HappyHabit:

• Account information: Parent email address, display name, encrypted password
• Children's profiles: First name, age, and an avatar selected from our built-in avatar library — entered by the parent
• App activity: Tasks created, completed tasks, star balances, rewards, bonus stars, setbacks, school calendar events
• Device information: Push notification token (to send reminders), device type (iOS/Android)
• Kids View PIN: A 4-digit PIN set by the parent for the children's view — stored in encrypted form
• School calendar data: Event titles, dates, reminder preferences entered by the parent
• PDF import logs: Number of pages processed and events extracted when using the school calendar PDF import feature
• Crash reports: Anonymised crash and error reports via Sentry to help us fix bugs
• Family invite codes: Temporary 5-digit codes generated to share app access with a partner — expire after 15 minutes

3. AI-Assisted School Calendar Import

HappyHabit offers an optional feature that lets a parent upload a photo or PDF of a school calendar to automatically extract event details. When you use this feature:

• The uploaded PDF or image is sent to Anthropic (Claude AI) for processing, solely to extract event details such as dates, titles, and times
• The uploaded file itself is not stored after processing — it is discarded once the AI has returned the extracted results
• Only the confirmed calendar events you choose to import, along with basic usage metadata (such as upload count and date), are saved to your account

4. How We Use Your Data

• To provide and operate the HappyHabit service
• To send push notifications for school event reminders and task completions
• To process school calendar PDFs using AI (Anthropic Claude API) — PDFs are processed in real time and not stored
• To track subscription plan limits (Free, Pro, Ultra, Ultimate)
• To monitor app stability and fix crashes via Sentry
• To respond to your support requests

5. Legal Basis for Processing (GDPR)

We process your data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Contract performance: Processing necessary to provide the HappyHabit service you signed up for
• Legitimate interests: Crash reporting and app stability monitoring
• Consent: Push notifications (you can withdraw consent at any time via device settings)

6. Children's Data

HappyHabit is designed for parents and guardians. Children do not create accounts. All children's profile data (name, age, avatar) is entered by the parent and stored under the parent's account.

The Kids View mode allows children to view their tasks and rewards using a 4-digit PIN set by the parent. Children do not have independent accounts and cannot modify their own data.

We do not knowingly collect data directly from children under 13. If you believe a child has provided data without parental consent, please contact us at happyhabit.support@gmail.com and we will delete it promptly.

7. Third-Party Services

We use the following trusted third-party services:

• Supabase (supabase.com) — database, authentication, and cloud storage. Data stored in EU region. Privacy Policy
• Anthropic (anthropic.com) — AI processing for school calendar PDF import. PDFs are processed in real time and not retained by Anthropic beyond the API request. Privacy Policy
• Sentry (sentry.io) — crash reporting and error monitoring. Anonymised stack traces only. Privacy Policy
• Google Firebase / FCM — push notification delivery. Privacy Policy
• Expo / EAS — app build and distribution infrastructure. Privacy Policy

We only share your data with third parties where necessary to provide a feature you use (for example, sending calendar import files to Anthropic for AI processing, or storing data with Supabase), or where legally required. We do not share your data with advertisers or data brokers, and we do not sell your data.

8. Data Retention

• Account data is retained for as long as your account is active
• If you delete your account, all personal data is permanently deleted within 30 days
• PDF import logs are retained for the current school year only
• Crash reports are retained for 90 days
• Family invite codes expire after 15 minutes and are deleted after use

9. Data Security

• All data is transmitted over HTTPS/TLS encryption
• Data at rest is encrypted using AES-256 via Supabase
• Passwords are hashed using bcrypt and never stored in plain text
• Row-Level Security (RLS) ensures users can only access their own data
• API keys and secrets are never stored in the app — all sensitive operations go through secure server-side functions
• 4-digit Kids View PINs are stored in encrypted form

10. Your Rights (GDPR)

As a user in the European Union, you have the following rights:

• Right of access: Request a copy of all data we hold about you
• Right to rectification: Correct inaccurate data via app settings
• Right to erasure: Delete your account and all associated data
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw push notification consent via device settings at any time

To exercise any of these rights, contact us at happyhabit.support@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Data Protection Commission Ireland at dataprotection.ie.

11. Push Notifications

HappyHabit uses push notifications to send school event reminders and task completion alerts. You can enable or disable notifications at any time through your device settings. We use Google Firebase Cloud Messaging (FCM) for Android notification delivery.

12. Cookies

The HappyHabit mobile app does not use cookies. The HappyHabit website (happyhabit.org) does not use tracking cookies or analytics cookies. No cookie consent banner is required.

13. International Data Transfers

Your data is stored in Supabase infrastructure in the EU. When using the PDF import feature, data is temporarily processed by Anthropic (US-based) under Standard Contractual Clauses compliant with GDPR Article 46.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of HappyHabit after changes constitutes acceptance of the updated policy.