Privacy Policy

1. Who we are

HabitFund is operated by Shibu Yohannan trading as Vital River (hello@vitalriver.net, vitalriver.net). We are the data controller for personal data collected through the HabitFund app.

2. What data we collect

• Identity data: display name, email address, Google account ID (if Google Sign-In used), Firebase UID.
• Financial data: savings pot balance, transaction history (amounts and dates), financial value assigned to each habit, Pro subscription status.
• Behaviour data: habits created (name, frequency, streak), daily check-in records, XP and points, challenges and endeavours.
• Preference data: Daily Reflection settings, Today's Intention entries, name display format, app preferences.

3. How we use your data

We use your data solely to provide the HabitFund service: to create and maintain your account, display your habits and savings, calculate streaks and XP, and restore your data when you return. We do not sell your data. We do not share it with advertisers. We do not use it for any purpose beyond running the app.

4. Third-party data processors

• Google Firebase (Google LLC): user authentication and data storage. Servers in Europe. Privacy policy at firebase.google.com/support/privacy.
• Google Sign-In (Google LLC): optional authentication. Accesses email, display name, and Google account ID. Privacy policy at policies.google.com/privacy.

All processors operate under GDPR-compliant agreements.

5. Legal basis for processing

• Contract: to deliver the service you signed up for.
• Legitimate interests: to maintain security and prevent fraud.
• Consent: for optional features such as Daily Reflections.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, all data is permanently deleted within 24 hours. We do not retain backups of deleted accounts beyond 30 days.

7. Your rights under UK GDPR

You have the right to: access your data, correct inaccurate data, erase your data, restrict processing, receive your data in a portable format, and object to processing.

To exercise any right, email hello@vitalriver.net with subject "Data request — [your right]". We respond within 30 days.

You may also complain to the Information Commissioner's Office at ico.org.uk.

8. Account and data deletion

• In-app: Settings → Delete my account → Confirm.
• By email: hello@vitalriver.net with subject "Delete my data".

All data permanently deleted within 24 hours.

9. Data security

All data transmitted over HTTPS. Firebase applies encryption at rest and in transit. API keys restricted to authorised domains. Payment card details are never stored — payments processed by Google Play Billing.

10. Children

HabitFund is not directed at children under 13. If you believe a child has shared data with us, email hello@vitalriver.net and we will delete it promptly.

11. Changes

We update the Last Updated date when this policy changes. Continued use of HabitFund constitutes acceptance.

12. Contact

Shibu Yohannan / Vital River
hello@vitalriver.net
vitalriver.net