Privacy Policy
Last updated: 11 September 2026
RPG Habits is a habit tracker. It stores the habits you create, the progress you earn, and what it needs to send the reminders you ask for. We don't sell your data, we don't run ads against it, and you can export or delete all of it at any time.
What we collect
- Your account — email address and password. The password is stored only as a salted hash by our authentication provider; we never see it.
- Your profile — display name and timezone. The display name is optional; leave it blank and we simply won't have one. The timezone is needed to know which calendar day a completion belongs to.
- An account identifier — a random ID we generate when you sign up. It is how your habits are linked to you in our database. It means nothing outside the app, it is not shared with anyone, and it is deleted with your account.
- Your habits and progress — the habits you create (including their titles and any notes you add), each completion you log, your stats, XP, levels, streaks, and any items you've earned.
- Some habits describe health or exercise — the habits we suggest include things like running, yoga, sleep and taking medication on time. If you choose one, the fact that you track it and the days you complete it are stored exactly like any other habit. We don't ask for measurements, we read no health app, sensor or wearable, and nothing you track here is sent to Google Fit, Health Connect, or anywhere like them.
- Your reminder settings — whether reminders are on, the time of day you chose, and the date one was last sent, so you never get two in a day.
- A notification token, if you use the mobile app and allow notifications — an identifier issued by Expo and Google for that installation of the app. It points at a phone rather than at you, but we store it against your account so your reminder reaches the right device; it is the only way to deliver one. We delete it the moment you sign out or turn notifications off. If you uninstall the app, we delete it the next time a reminder fails to reach the device.
Your habits are private
Your habits are visible only to you. We don't share them with other users, and nothing you track is published anywhere. If that ever changes, we'll update this policy and ask for your permission first — nothing you've recorded becomes visible to anyone else without you choosing it.
What we don't collect
No location, no contacts, no health-platform data, and no advertising identifiers. There are no ad trackers and no third-party analytics SDKs in the app — we don't track what you tap or how long you look at a screen.
How we use it
Solely to run the app for you: to show your character, calculate XP and levels, track streaks, and send the reminders you turned on. We do not sell or rent your data, and we don't share it with third parties for their own purposes.
Who processes it for us
We use a small number of services to run the app. They act on our instructions and may not use your data for their own purposes.
- Supabase — hosts our database and handles sign-in. Access is restricted at the database level so one account can never read another's data.
- Netlify — hosts this website and, like any web host, records ordinary request logs such as IP address and browser type.
- Resend — delivers our email: sign-up confirmations, password resets, and the daily reminder digest.
- Expo and Google Firebase Cloud Messaging — deliver push notifications to Android devices.
Reminders name your habits. A reminder tells you what you've got left today, so a push notification or email includes the titles of those habits. That means the titles pass through the services above in order to reach you. If you would rather they didn't, turn reminders off on your Account page — everything else in the app keeps working.
Your choices
- Export — download everything we hold about you as a JSON file from your Account page.
- Delete — erase your account and all associated data from the same page. Deletion is immediate and permanent; we keep no copy. Step-by-step instructions, including what is deleted and what is kept.
- Correct — edit your display name, timezone, habits, and password at any time from within the app.
- Turn off reminders — stop the emails and notifications whenever you like, from the same page.
Retention
We keep your data for as long as your account exists. When you delete your account it is removed from our database immediately; residual copies may persist in encrypted infrastructure backups for up to 30 days before expiring. See Delete your account for the full breakdown of what is removed and what is retained.
Children
RPG Habits isn't directed at children under 13, and we don't knowingly collect their data.
Changes
If this policy changes materially, we'll update the date at the top of this page before the change takes effect. It's worth checking back if you want to stay current.
Contact
Questions about your data? Email privacy@rpghabits.app.