AstroHabit
  • Home
  • Terms

Privacy Policy

Last updated: July 6, 2026

AstroHabit ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the AstroHabit mobile application ("App"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the App.

1. Information We Collect

Account Information: When you register, we collect your email address, display name, and authentication credentials (managed by Firebase Authentication). Your email address is also stored in our Firebase Realtime Database linked to your user profile for account identification, support, and abuse prevention purposes.

Profile Data: Age, gender, height, weight, target weight, and focus window preferences you optionally provide to personalise your experience.

Health & Fitness Data: Sleep hours, mood, energy level, water intake, weight logs, and step count data synced from Apple HealthKit — only when you explicitly grant permission.

Task & Productivity Data: Tasks, missions, goals, and calendar entries you create within the App.

Financial Data: Budget entries, income, expenses, account balances, and spending categories you log within the App. This data is stored solely in your personal Firebase account and is never shared with third parties or used for advertising.

Food & Nutrition Data: Food photos you submit for AI analysis and manually entered food entries. Images are sent to Google Gemini for real-time analysis and are not stored on our servers.

Workout Data: Workout plans generated via AI and exercise logs you record.

Subscription Information: Subscription tier and purchase history managed by RevenueCat and Apple App Store. We do not store your payment card details.

Usage & Diagnostic Data: App crash reports, error logs, and anonymised usage analytics collected via Firebase Crashlytics and Firebase Analytics to improve app stability.

Device Data: Device type, operating system version, and timezone used to deliver accurate notifications and timezone-aware features.

2. How We Use Your Information

  • To provide, personalise, and improve the App's features
  • To sync your data across sessions and devices via Firebase
  • To process AI requests (food analysis, workout generation) via Google Gemini API
  • To manage your subscription and verify entitlements via RevenueCat
  • To send local push notifications for tasks, missions, and health reminders
  • To diagnose crashes and technical issues via Firebase Crashlytics
  • To comply with applicable laws and legal obligations

We do not sell, rent, or trade your personal data to third parties. We do not use your data for advertising targeting. AstroHabit does not display third-party advertisements of any kind.

3. AI Features & Data Processing

AI Transparency: All AI-generated content within AstroHabit is produced by automated machine learning models (Google Gemini) and has not been reviewed or verified by a human. AstroHabit does not use your data for AI model training. See our Terms of Service for full AI disclaimers.

Important — Do not submit sensitive information to AI features. When using AI features (Food Trace, Workout Generator, Feed Me), do not submit confidential, sensitive, proprietary, biometric, or personally identifiable information beyond what is necessary for the feature. Your AI prompts and inputs are transmitted to Google Gemini for processing. AstroHabit does not store your inputs or use them for AI model training, but you should exercise caution about what personal information you include in AI prompts.
Food Trace (AI Nutritional Analysis) When you use the Food Trace feature, images you take are transmitted securely to Google's Gemini API for real-time nutritional analysis. AstroHabit does not store, retain, or use your food photos for AI model training. Images are processed in transit and deleted immediately after analysis is complete. They are not stored on our servers. Google's handling of API request data is governed by Google's Privacy Policy. AI-generated nutritional estimates are approximations only and should not be used as a substitute for professional dietary advice.
Feed Me (AI Meal Suggestions) When you use the Feed Me feature, your stated meal preferences, dietary goals, budget, and optional notes are transmitted to Google's Gemini API to generate meal suggestions. This data is processed in transit and is not stored beyond the duration of the request. We do not use your meal preferences or notes for AI model training.
Workout Generator (AI Workout Plans) When you use the Workout Generator, your selected workout preferences (location, focus, duration) and optional notes are transmitted to Google's Gemini API to generate a workout plan. This data is processed in transit and is not stored beyond the duration of the request. Workout plans generated by AI are based on general fitness principles and are not tailored medical or professional fitness advice.

4. Health Data (Apple HealthKit)

Not a Medical Device. AstroHabit is a personal wellness tracking tool and is NOT a medical device, medical service, or healthcare provider. The App does not provide medical diagnoses, treatment recommendations, or clinical advice. Health metrics you log or sync are for personal awareness only. Always consult a qualified healthcare professional before making changes to your health, diet, or exercise routine.

AstroHabit may request access to Apple HealthKit to read step count and other health metrics. We use this data solely to display your health statistics within the App. We do not:

  • Share HealthKit data with third parties for advertising or marketing
  • Use HealthKit data for any purpose beyond displaying it to you in the App
  • Store HealthKit data on external servers beyond your personal Firebase account

You may revoke HealthKit access at any time via iPhone Settings → Privacy & Security → Health.

5. Financial Data Disclaimer

For Personal Tracking Only AstroHabit is a personal budgeting tool for tracking purposes only. It is not a financial institution, financial advisor, or regulated financial service. Financial data you enter (income, expenses, balances) is stored only in your personal Firebase account and is never transmitted to financial institutions or used for any purpose other than displaying your personal records back to you. Do not rely on AstroHabit for financial or investment decisions. Consult a qualified financial professional for financial advice.

6. Third-Party Services

The App integrates with the following third-party services, each governed by their own privacy policies:

  • Firebase (Google) — Authentication, Realtime Database, Crashlytics, Analytics: firebase.google.com/support/privacy
  • RevenueCat — Subscription management: revenuecat.com/privacy
  • Google Gemini API — AI food analysis and workout generation: policies.google.com/privacy
  • Apple HealthKit — Health data sync (iOS only): apple.com/legal/privacy
  • Apple App Store — App distribution and in-app purchases: apple.com/legal/privacy

7. Data Storage, Security & International Transfers

Your data is stored in Firebase Realtime Database, hosted by Google on secure, encrypted servers. All data is scoped exclusively to your individual account and protected by Firebase security rules that prevent other users from accessing your data.

Data is transmitted using HTTPS/TLS encryption. We implement reasonable technical and organisational measures to protect your data, however no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

International Data Transfers AstroHabit is operated from Malaysia. Your data is stored on Firebase servers operated by Google, which may be located outside Malaysia including in the United States. By using the App, you consent to the transfer of your data to servers located outside your country of residence. We ensure that such transfers are conducted with appropriate safeguards in accordance with applicable data protection laws including Malaysia's Personal Data Protection Act 2010 (PDPA).
Limitation of Liability for Security Incidents In the event of a data breach, security incident, or unauthorised access to your data, AstroHabit's total liability is limited to the same cap stated in our Terms of Service. We are not liable for breaches caused by third-party services (Firebase, RevenueCat, Google) beyond our reasonable control.

8. Data Retention & Account Deletion

Your data is retained for as long as your account remains active.

When you delete your account via the Settings page → Delete Account, the following occurs:

  • Your login credentials are immediately and permanently removed from Firebase Authentication — you will no longer be able to sign in.
  • Your account data (including your email address, usage history, and app activity) will be permanently and irreversibly deleted within 7 days of account closure. After this point, no recovery is possible.

Self-service restore (within 7 days): If you change your mind after deleting your account, sign up again with the same email address and go to Settings → Restore Previous Account. The app will detect your previous account and offer to restore all your data. This restore window is available to all users within 7 days of deletion, regardless of reason.

After 7 days: Your data is permanently and irreversibly deleted. No recovery is possible after this point.

Subscription and account deletion: Deleting your AstroHabit account removes your app data but does not cancel your Apple subscription. If you have an active subscription when you delete your account, Apple will continue to charge your payment method. You must cancel your subscription separately via iPhone Settings → your name → Subscriptions → AstroHabit. Subscription and purchase records held by RevenueCat and Apple are retained according to their respective data retention policies for legal and financial compliance purposes, independent of your AstroHabit account deletion.

Anonymised crash reports in Firebase Crashlytics may be retained for up to 90 days for stability analysis.

9. Children's Privacy

AstroHabit is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@astrohabit.com and we will promptly delete such information.

10. Business Transfers

If AstroHabit is involved in a merger, acquisition, asset sale, app sale, or change of ownership, your personal data may be transferred to the new owner as part of that transaction. The data transferred may include your account information, profile data, health and fitness logs, task and financial data, subscription history, usage analytics, and any other data associated with your account stored in Firebase.

Notice: We will notify you via in-app notification or email at least 14 days before your data is transferred and becomes subject to a different privacy policy, where reasonably practicable. In the event of an emergency transfer (e.g. insolvency), notice may be provided as soon as reasonably possible after the transfer.

Your choices: You may delete your account at any time before the transfer takes effect if you do not wish your data to be transferred to the new owner. See Section 8 for account deletion instructions. Note that deleting your account does not automatically cancel your Apple subscription — you must cancel separately via iPhone Settings → Subscriptions.

Subscriptions: Your in-app subscription is billed directly by Apple through the App Store and is not owned by AstroHabit. If the app is sold or transferred, your Apple subscription billing continues independently through Apple until you cancel it. The new owner may honour, modify, or discontinue subscription benefits. We will notify you of any material changes to subscription terms as part of the transfer notice.

New owner's privacy policy: After a transfer, your data will be subject to the new owner's privacy policy. We cannot guarantee that the new owner's privacy practices will be the same as ours. If you do not agree with the new owner's terms, you should delete your account before the transfer takes effect.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know — You may request details about the personal information we collect, use, and disclose.
  • Right to Delete — You may request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out of Sale — We do not sell your personal information. No opt-out is necessary.
  • Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

To exercise your California privacy rights, contact us at support@astrohabit.com. We will respond within 45 days of receiving your request.

12. European Users — GDPR Rights

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and applicable local law:

  • Right to Access — Request a copy of the personal data we hold about you.
  • Right to Rectification — Request correction of inaccurate or incomplete personal data.
  • Right to Erasure — Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
  • Right to Restriction — Request that we restrict processing of your personal data in certain circumstances.
  • Right to Data Portability — Request your personal data in a structured, machine-readable format.
  • Right to Object — Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent — Where processing is based on consent, withdraw that consent at any time without affecting prior processing.

Legal bases for processing your data: We process your personal data under the following legal bases: (a) contractual necessity — to provide the App's services to you; (b) legitimate interests — to improve the App, diagnose issues, and prevent abuse; (c) legal obligation — to comply with applicable law; (d) consent — for optional features such as Health data and notifications, which you may withdraw at any time.

Data transfers outside the EEA: Your data is stored on Firebase servers operated by Google, which may be located outside the EEA including in the United States. Such transfers are conducted under Google's Standard Contractual Clauses as approved by the European Commission. For more information, see firebase.google.com/support/privacy.

To exercise any of your GDPR rights, contact us at support@astrohabit.com. We will respond within 30 days of receiving your request.

13. Additional User Rights

Depending on your jurisdiction, you may have the right to:

  • Access — Request a copy of your personal data
  • Correction — Request correction of inaccurate data
  • Deletion — Request deletion of your account and data
  • Portability — Export your data in Excel format directly within the app. This feature requires an active Basic subscription.
  • Withdraw consent — Health and Notification permissions are managed entirely by iOS. You can turn them off at any time via iPhone Settings → Privacy & Security → Health, or iPhone Settings → Notifications → AstroHabit. Changes take effect immediately — the app reads your current permission state in real time and does not retain a separate consent record.

To exercise any of these rights, contact us at support@astrohabit.com.

14. Malaysia Personal Data Protection Act (PDPA)

AstroHabit is operated from Malaysia and complies with the Personal Data Protection Act 2010 (PDPA). By using the App, you consent to the processing of your personal data as described in this policy. You have the right to access and correct your personal data by contacting us directly.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the App after changes constitutes acceptance of the revised policy. For material changes, we will notify you via in-app notification or email where possible.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

support@astrohabit.com

● AstroHabit
Privacy Policy Terms of Service Contact

© 2026 AstroHabit. All rights reserved.