HabitStrider

Privacy Policy

Last updated: 7 October 2026

HabitStrider is run by Jayakumar Harikrishnan, an individual. A planner holds someone's life, so we collect only what the service needs, never sell your data, and use no advertising or analytics trackers.

What we collect

  • Account: e-mail address, password (stored only as a secure hash; none if you only use Google sign-in), time zone, week-start setting, display name, theme.
  • Your planner: tasks, categories, daily plans, time blocks, habits and their history, reviews.
  • Pro: your plan, subscription status and dates, and Razorpay's subscription id. Payment details stay with Razorpay.
  • Security logs: sign-in events kept by our authentication provider; server error reports without personal content.
  • IP addresses: processed by Supabase Auth (our authentication provider) when you sign in, and by Cloudflare for the bot check on the forms listed below.

How we use it

To provide HabitStrider to you, to keep it secure, to process Pro payments, and to send account e-mails. Your planner content is private: only you can see it. We don't use it for advertising or sell it.

Service providers (processors)

  • Supabase — Database and sign-in (stores your account and everything you add). Location: Mumbai, India.
  • Vercel — Hosting of the website and app servers. Location: app servers in Mumbai, India (bom1); static files are also served from Vercel's global network.
  • Postmark — Account e-mails (confirmation, password reset). Location: United States.
  • Sentry — Error reports from our servers, scrubbed of e-mail addresses, tokens and request data. Location: European Union.
  • Cloudflare — Turnstile bot check on the sign-in, sign-up, forgot-password, resend-confirmation, change-password and delete-account forms. Cloudflare processes your IP address for this check. Location: Global network.
  • Razorpay — Payments for Pro. Razorpay collects your payment details; we never see or store card numbers. Location: India.
  • Google — "Continue with Google" sign-in, only if you choose it. Google confirms who you are and shares your e-mail address and name with us; we receive no other Google data and don't access your Google account. Location: Global network.

Cookies

Only essential cookies: your sign-in session (HttpOnly), your theme, a short-lived note that a checkout is in progress, and a short-lived marker (dp_recovery, 15 minutes) set when you open a password-reset link so only that session can set a new password. No tracking or advertising cookies.

Your choices and rights

  • Download all your data as JSON: Settings → Privacy & data.
  • Delete your account and your planner data: Settings → Privacy & data. An active Pro subscription is cancelled immediately; the unused part of the paid period is not refunded.
  • What can remain after you delete your account: sign-in audit entries kept by our authentication provider, payment records (see Billing records below), and database backups until they expire on our provider's schedule.
  • Other requests or complaints: our Grievance Officer, Harikrishnan J, harirovio@gmail.com. We acknowledge complaints within 24 hours and resolve them within 15 days.

How long we keep data

  • Account data (your account and everything in your planner): as long as your account exists.
  • Billing records: Razorpay keeps payment records as the law requires, and we keep our own accounting records of payments for 8 years. These are separate from your planner data, so deleting your account does not remove them.
  • Error logs: up to 90 days.

Contact

Jayakumar Harikrishnan, CRAN 45, Tagore Lane, Ponekkara Road, Edapally, Ernakulam, Kerala 682024, India, harirovio@gmail.com. See also Contact.