La política de privacidad y los términos de servicio se ofrecen solo en inglés. La navegación del sitio permanece en el idioma que haya elegido.

Privacy Policy

Habisun Privacy Policy

Effective Date: May 20, 2026
Last Updated: July 1, 2026

This Privacy Policy explains how Habisun collects, uses, shares, protects, and retains personal information when you use the Habisun mobile application, websites, backend APIs, and related services (collectively, the “Services”).

1. Scope

Habisun is a family task, habit, reward, and parent-child collaboration service. The Services are intended to be managed by parents or legal guardians. Child profiles and child-facing experiences are controlled by a parent or guardian account.

This Policy applies to users in the countries and regions where we make the Services available. It is designed for international markets and should be read together with our Terms of Service. If you do not agree with this Policy, please do not use the Services.

2. Information We Collect

We collect only information that is reasonably necessary to provide, secure, maintain, and improve the Services.

2.1 Account and Authentication Information

When you create or access an account, we may collect:

• email address;
• display name;
• authentication provider identifiers, such as Firebase Auth user ID, Google sign-in ID, or Apple sign-in ID;
• login status, account creation time, account update time, and locale;
• parent PIN status and related security metadata, such as failed attempt count and lockout time. We store PIN verification data in protected form and do not store your plain-text PIN.

2.2 Family, Parent, and Child Profile Information

Parents or guardians may create and manage family data, including:

• family membership, parent/guardian role, and child role;
• child nickname or display name;
• child avatar, profile image, icon choice, birthday or age group, and preferred form of address;
• family invitations, invitee email address, invitation status, and family membership status;
• preferences such as language, theme, notification settings, and app mode.

Please do not add sensitive information about a child unless it is necessary for your family’s use of the Services.

2.3 Task, Habit, Reward, Wish, Achievement, Challenge, and Activity Data

To operate core features and V2 enhancements, we process data such as:

• task definitions, schedules, recurrence rules, reminders, task categories, assignments, quadrant markers (important/urgent), and favorites;
• task completion records, review status, proof notes, reviewer notes, optional proof images, and optional voice proof;
• parent-recorded voice task instructions, child-submitted voice wish reasons, and other voice attachment metadata linked to tasks or wishes;
• reward templates, inventory, redemption history, task-bound rewards and direct redemption records, coin balances, ledger entries, and streak bonus records;
• wish requests, descriptions, parent review messages, and related reward conversion records;
• custom achievement/badge definitions, unlock progress, system badge overrides, and bindings to tasks or categories;
• challenge (goal) definitions, activation status, completion progress, and linked rewards;
• focus sessions, growth reports (including category stats, quadrant analysis, focus data, reward/achievement/streak trends), messages, in-app notifications, and read status;
• AI growth plan data: behavior or habit descriptions, clarification Q&A, draft and revision content, phase tasks, completion-rate statistics, AI review suggestions, and reward binding/grant records;
• daily task list / quadrant board export and share preferences (for example privacy masking options and selected templates).

2.4 Images, Voice, and Uploaded Files

If you upload, capture, record, or generate related content, we may process:

• profile avatars for parents or children;
• task proof images;
• reward images, custom achievement icons, or other family images;
• voice attachments (such as task completion proof, parent task instructions, or wish reasons), including audio files and duration metadata;
• file metadata needed to store, compress, transcode, deliver, play, or delete content;
• daily task list or quadrant share images and exported PDFs generated in the App (primarily on your device; if you save to the photo library or share through the system sheet, processing follows your chosen action on the device or in apps you select).

We use these files only for purposes you select in the App and related family features.

2.5 AI Feature Data

When you use paid AI features such as AI growth plans, phase AI reviews, or AI suggestions in reports, we may process:

• behavior descriptions, clarification answers, revision feedback, and phase feedback you provide or confirm;
• contextual information such as age group and task completion rates related to a plan (to generate suggestions, not for cross-user profiling or advertising);
• AI-generated plan drafts, task suggestions, review text, and safety-filter results;
• server-side AI call logs for quota management, debugging, security review, and quality improvement (which may include prompts, model response summaries, token usage, latency, and errors).

AI features require parent confirmation before tasks or suggestions are published. We do not use children’s personal information to train public general-purpose AI models unless we obtain your explicit consent and comply with applicable law.

2.6 Device, App, and Technical Information

We may automatically collect or receive:

• device model, operating system, app version, platform, language, and region settings;
• device notification token, such as Firebase Cloud Messaging token, when notifications are enabled;
• device name or similar diagnostic device information where available;
• IP address, request metadata, server logs, API route, timestamps, and error logs;
• crash, performance, and diagnostic information;
• analytics events about product usage, such as feature usage, screen flows, subscription events, and app stability signals.

2.7 Purchase and Subscription Information

Habisun may offer paid subscription plans through Apple App Store, Google Play, and RevenueCat. We may process:

• product ID, entitlement ID, billing cycle, subscription status, purchase time, expiration time, renewal status, refund or revocation status;
• RevenueCat customer identifiers and app user identifiers;
• app store transaction metadata needed to verify and maintain paid access.

We do not collect or store full payment card numbers. Payment processing is handled by the applicable app store or payment platform.

2.8 Website Cookies and Similar Technologies

Our website uses cookies and similar technologies as described below. When you first visit our website, we show a cookie banner that lets you accept, reject, or customize optional cookies. You can change your choice at any time using Cookie settings in the website footer.

2.8.1 Strictly Necessary Cookies

These cookies are required for basic website operation. They do not require your consent under applicable cookie laws. We do not use them for advertising.

2.8.2 Analytics Cookies (Google Analytics 4)

With your consent, we use Google Analytics 4 (GA4), provided by Google LLC, to understand how visitors use our website (for example, pages viewed, approximate region, device type, and referral source). We load Google Analytics only after you opt in through our cookie banner or cookie settings. We configure GA4 with IP anonymization where supported.

Google may process website usage data on our behalf according to Google’s privacy policy. Google Analytics uses cookies such as _ga and related identifiers. You can withdraw consent at any time through Cookie settings, which stops further analytics collection and removes analytics cookies where technically possible. You can also manage cookies through your browser settings.

Legal basis (where GDPR/UK GDPR applies): consent for analytics cookies.

Retention: analytics data is retained according to our GA4 property settings and Google’s standard retention options.

3. App Permissions We Request

Habisun requests device permissions only when needed for a feature. You can grant or deny permissions through your device settings. If you deny a permission, the related feature may not work, but the rest of the Services may remain available.

Habisun does not request precise location, contacts, calendar, SMS, phone call, or health data permissions in the current version.

4. How We Use Information

We use personal information for the following purposes:

• create, authenticate, secure, and maintain accounts;
• provide family management, child profiles, tasks, habits, rewards, wishes, achievements, challenges, quadrant boards, growth reports, export/share, AI growth plans, and notifications;
• sync data across devices and family members;
• process, store, transcode, play, and deliver images, voice, and other in-app content you choose;
• generate plan suggestions, phase reviews, and report insights through parent-confirmed AI features;
• process subscriptions, entitlements, renewals, cancellations, refunds, and app store events, and gate Pro/Premium features by plan;
• provide customer support and respond to privacy requests;
• improve app reliability, performance, safety, usability, and product quality;
• detect, prevent, and investigate fraud, abuse, security incidents, policy violations, and technical issues;
• comply with law, enforce our Terms, and protect our rights, users, and Services.

5. Legal Bases for Processing

Depending on your location, we rely on one or more legal bases:

• Contract necessity: to provide the Services you request.
• Consent: for optional permissions, notifications, certain analytics choices, and child-related processing where consent is required.
• Legitimate interests: to secure, debug, improve, and protect the Services, provided those interests are not overridden by your rights.
• Legal obligations: to comply with applicable laws, tax, accounting, consumer protection, app store, and safety requirements.
• Parental authorization: for child profile and child-related family data managed by a parent or legal guardian.

6. Children and Family Privacy

Habisun is designed for families and is intended to be controlled by parents or legal guardians. Children should use the Services only under the supervision and authorization of a parent or legal guardian.

We do not knowingly allow children to create independent parent accounts. Child profiles are created and managed by a parent or legal guardian. We do not knowingly collect personal information directly from children under 13 in the United States, or under the age at which parental authorization is required in the EEA, United Kingdom, Japan, Korea, or other applicable jurisdictions, without appropriate parent or guardian authorization.

Where laws such as COPPA, GDPR/UK GDPR child consent rules, the UK Age Appropriate Design Code, Japan’s APPI, Korea’s PIPA, or comparable children’s privacy rules apply, we aim to provide age-appropriate protections, minimize child data collection, avoid targeted advertising to children, and rely on a parent or guardian for child profile creation and management.

Parents or legal guardians may request access, correction, deletion, or restriction of child profile information by using in-app controls or contacting us at support@habisun.com. If we learn that we collected child personal information without required authorization, we will take reasonable steps to delete or de-identify it.

7. Sharing and Disclosure

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use children’s personal information for targeted advertising. We share information only as reasonably necessary for the Services, legal compliance, security, or business operations.

7.1 Service Providers

We use third-party service providers to operate the Services. These providers process personal information only as instructed by us and under confidentiality and security obligations.

Key categories include:

• Cloud infrastructure, authentication, databases, storage, and API services (such as Firebase/Google, Supabase, and Cloudflare) — to store and sync family data, host images and voice files, and run backend services.
• Subscription and purchase platforms (RevenueCat, Apple App Store, Google Play) — to manage subscriptions and validate in-app purchases.
• Error monitoring and diagnostics (Sentry) — to detect crashes and improve reliability.
• AI model providers — for AI features (growth plans, reviews, and suggestions). Requests are routed securely through backend services (such as OpenRouter). We can switch underlying model providers at any time. We send only the minimum necessary context and do not send data that directly identifies children directly to AI providers.

We require service providers to use the information only for the purposes we authorize and to apply appropriate safeguards.

7.2 Legal, Safety, and Business Disclosures

We may disclose information:

• to comply with law, court orders, subpoenas, government requests, or app store compliance requirements;
• to protect users, children, families, our Services, and the public from fraud, abuse, security threats, or harm;
• to enforce our Terms and other agreements;
• in connection with a merger, acquisition, financing, reorganization, asset sale, or similar business transaction, subject to appropriate protections.

8. International Transfers

The Services use global cloud providers and app platforms. Your information may be processed in countries or regions outside where you live, including the United States, the European Economic Area, the United Kingdom, Japan, Singapore, and other locations where our service providers operate.

Where cross-border transfer rules apply, we use appropriate safeguards such as contractual protections, data processing agreements, standard contractual clauses, adequacy mechanisms, transfer impact assessments where required, and technical and organizational security measures.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining account records, resolving disputes, enforcing agreements, meeting legal obligations, preventing abuse, and preserving security. When personal information is no longer necessary, we delete, de-identify, or anonymize it according to our technical and legal retention practices.

Typical retention practices include:

• account and family data: retained while your account or family workspace is active;
• child profile, task, reward, wish, achievement, challenge, voice attachment, AI plan, and activity data: retained while needed for family use and sync unless deleted by a parent or through account deletion;
• uploaded images and voice attachments: retained while linked to active family content or until deleted, subject to backups and technical deletion cycles;
• AI call logs: retained for a limited period reasonably necessary for quota auditing, security review, and quality improvement;
• subscription records: retained as needed for entitlement verification, accounting, dispute handling, and legal compliance;
• crash, analytics, and server logs: retained for a limited period reasonably necessary for security, diagnostics, and service improvement;
• deleted account data: deleted, anonymized, or isolated according to our account deletion workflow, except where retention is legally required or necessary for security, fraud prevention, or dispute resolution.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including:

• encrypted transport where supported;
• protected local storage and encrypted local database techniques where implemented;
• access controls for backend systems;
• authentication token verification;
• service provider controls and secret management;
• monitoring, logging, and incident response procedures;
• deletion and de-identification workflows where appropriate.

No system is completely secure. If you believe your account or family data has been compromised, contact us immediately.

11. Your Choices and Rights

Depending on your location, you may have rights to:

• access personal information we hold about you;
• correct inaccurate information;
• delete personal information;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent, including website analytics cookies through Cookie settings on www.habisun.com;
• receive a copy of certain information in a portable format;
• opt out of sale, sharing, or targeted advertising where applicable. We do not sell personal information or share it for cross-context behavioral advertising;
• appeal a privacy request decision where applicable;
• lodge a complaint with a privacy or data protection authority.

You may exercise rights through in-app settings where available or by contacting support@habisun.com. We may need to verify your identity and authority, especially for family or child data requests.

12. Managing Permissions, Notifications, and Account Deletion

You can manage app permissions in your device settings. You can manage push notifications in the App or operating system settings. You can manage subscriptions through Apple App Store or Google Play account settings.

You can request account deletion in the App where available or by contacting us. Account deletion may remove or anonymize account, family, and child profile data, subject to legal, security, backup, and technical limitations. If a family has multiple parents or guardians, deletion may affect family access and shared content.

13. Regional Privacy Notices

13.1 EEA, United Kingdom, and Switzerland

If GDPR, UK GDPR, or Swiss data protection law applies, you may have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and complaint to a supervisory authority.

Where we rely on legitimate interests, those interests include service security, debugging, fraud prevention, product improvement, and operating a family productivity service. Where we process child-related information, we rely on parent or guardian authorization and other applicable legal bases. Where legally required, we will maintain an EU, UK, or local representative or provide other required local contact details.

13.2 United States State Privacy Laws

If a state privacy law such as the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applies to you, the categories of personal information we may collect include identifiers, customer records, commercial information, internet or electronic network activity, coarse location inferred from network metadata where applicable, audio/visual information you upload such as images and voice recordings, inferences related to preferences, and sensitive personal information such as account login credentials, child data where provided, or AI feature inputs.

We use and disclose these categories for the purposes described in this Policy. We do not sell personal information or share it for cross-context behavioral advertising. We do not knowingly sell or share personal information of consumers under 16.

13.3 Canada, Japan, Korea, Australia, and Other Regions

Where privacy laws such as Canada’s PIPEDA, Japan’s APPI, Korea’s PIPA, Australia’s Privacy Act, or similar laws apply, we handle personal information according to the transparency, purpose limitation, access, correction, security, retention, cross-border transfer, and complaint-handling requirements that apply to the Services.

14. App Store and Google Play Disclosures

Apple App Store privacy labels and Google Play Data Safety disclosures are intended to summarize data practices. This Policy provides a fuller explanation. We aim to keep store disclosures, in-app notices, SDK behavior, and this Policy consistent. If you notice an inconsistency, please contact us at support@habisun.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the App, website, app store listing, email, or other reasonable means, and update the “Last Updated” date. Your continued use of the Services after the effective date means you acknowledge the updated Policy.

16. Contact Us and Data Controller

The legal entity responsible for the Services is Voxria Tech. Voxria Tech is the data controller of your personal information unless a different role is stated for a specific feature or region.

For privacy questions, rights requests, support, or formal legal notices, contact us:

Habisun Privacy Team
Legal entity: Voxria Tech
Email: support@habisun.com
Website: www.habisun.com
Formal notice details: available upon verified request where required by law.