Privacy Policy

Last updated: February 26, 2026 · Version 2.0

🔒 TL;DR — Haboop stores your habit data securely in the cloud (if you create an account) and locally on your device. We don't sell your data. Ever.

1. Who We Are

Haboop is a habit-tracking app owned and operated by XODN LABS LLC, a Delaware limited liability company. The App is available at haboop.app. Questions? Email us at hello@haboop.app.

2. What Data We Collect

The data we collect depends on how you use the App:

Without an account (local-only mode):

All habit data (names, history, streaks, notes) is stored exclusively in your browser's localStorage
No data is transmitted to our servers
No personal information is collected

With a free account (cloud sync):

Email address — used solely for authentication and account recovery
Username — optional, displayed to friends you connect with
Habit data — names, icons, completion history, notes, and settings synced to our secure cloud database
Push subscription token — if you enable notifications, a device token is stored to deliver push messages (no message content is stored)
Timezone offset — stored anonymously alongside your push token to send notifications at your correct local time

3. How We Use Your Data

To sync your habits across your devices
To deliver push notifications (morning briefings, reminders, streak warnings)
To enable social features (friends, boops, challenges) if you choose to use them
To display an activity feed to your approved friends

We do not use your data for advertising, profiling, or any purpose beyond operating the App.

4. Data Storage & Security

Cloud data is stored securely using Supabase, a PostgreSQL-based platform with row-level security enabled — meaning your data is only accessible by you. Supabase's data centers are located in the United States. You can review Supabase's security practices at supabase.com/security.

5. Push Notifications

If you enable push notifications, Haboop sends reminders and motivational messages from our servers to your device using the Web Push standard. We store only the push subscription endpoint and encryption keys — we never store the content of notifications after delivery. You can disable notifications at any time:

Within the App: Settings → Notifications → Disable
In your device settings: Settings → Notifications → Haboop

6. Social Features

If you add friends, your username and public habit activity (completions, streaks) may be visible to your friends in their activity feed. Private habits are never shared. You can remove friends or mark habits as private at any time.

7. Third-Party Services

Haboop uses the following third-party services:

Supabase — cloud database and authentication. Privacy policy
Vercel — app hosting. May log standard HTTP metadata (IP, browser type). Privacy policy
Vercel Analytics — anonymous, aggregated page view analytics. No cookies, no personal identifiers. Details
Google Fonts — loads the Inter typeface. Privacy policy

8. Data Deletion

You can delete your data at any time:

Local data: Settings → Reset all data
Account & cloud data: Email us at hello@haboop.app and we'll permanently delete your account and all associated data within 30 days

9. Children's Privacy

Haboop is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy as the App evolves. The "Last updated" date at the top reflects the most recent version. For significant changes, we'll make reasonable efforts to notify you.

← Open Haboop