Legal · International version

Privacy Policy

Effective 9 October 2026 · Version 1.1

Current English website notice

This notice applies to visits to the English HabitMir website. Its controller is Aleksei Chernushkin, an individual, at 6 Lenina Street, Minsk, Belarus; contact support@habitmir.ru. This notice does not change the controller of an existing account supplied by another provider.

Serving the website involves your IP address, requested URL, request time, browser and network information, and operational or security logs generated by the hosting and proxy infrastructure. These data are used to deliver pages, diagnose failures, secure the service and investigate abuse. Core website infrastructure is in the Russian Federation. If you contact support, we also process the contact details, message and attachments you send to answer your request and, where necessary, address related claims or legal obligations.

Hosting and proxy operators process request information to deliver and secure pages; email and support service operators process the correspondence needed to handle your request. Access is limited to the relevant service function. Information can also be disclosed where a valid legal obligation requires it. Website delivery and requested support use the contractual or other necessary service grounds available under applicable law. Where that law permits legitimate interests, the relevant interests are service security, fault diagnosis and proportionate abuse prevention; where consent is required instead, that requirement applies. Reading this notice is not a substitute for a required choice.

At language-neutral addresses, website language is determined automatically from the country lookup described in section 9. There is no manual language selector, and language selection does not set or read a preference cookie or add advertising or third-party analytics cookies.

The criteria for retaining request information are the time needed to diagnose the relevant fault, investigate a specific security incident and meet an identified legal duty or applicable claim period. For support, the criteria are resolution of the request and any related specific claim or recordkeeping duty. Once those grounds end, identifying records are subject to deletion or anonymization; keeping information merely because a dispute might someday arise is not a separate purpose. Contact us for access, correction, deletion, restriction, objection or other rights that apply, including a complaint to the competent data-protection authority. We may ask for proportionate verification and apply lawful exceptions; requests remain subject to applicable deadlines.

1. Who is responsible and what this policy covers

This policy describes personal data processing for international HabitMir services supplied by Aleksei Chernushkin, an individual (“we”, “us” or the “provider”). The privacy contact is support@habitmir.ru. Public correspondence address: 6 Lenina Street, Minsk, Belarus.

App-specific sections apply when the relevant feature is made available to you by this provider. They cover accounts, synchronized habits and diary entries, notifications, Premium access, support and service operation. Independent app stores, payment services and sign-in providers also process information under their own notices. This policy does not make the individual the controller of an existing Russian company account merely because its user opens an English page.

Privacy notices explain processing; reading this page or using the website is not blanket consent to every purpose. Where processing requires consent, that consent must be requested separately. Mandatory rules applicable to your data remain in force regardless of the website language.

2. Information you provide and information generated by the service

CategoryExamplesPurpose
Account and authenticationEmail address, display name, account ID and authentication recordsSign-in, recovery, account security and synchronization
Guest installationRandom installation identifier and guest profileUsing the app before registration and linking progress to the correct profile
Habit dataHabit names, settings, completion records, counters, timers, streaks and freezesOperating the tracker and restoring your progress
Diary and notesText, rich content and visibility settings you choose for entries or notesStoring and synchronizing entries, and showing shared entries to their selected audience
Device and service informationApp and OS versions, device model, language, time zone, network/IP information and technical logsCompatibility, security, troubleshooting and language selection
PurchasesOrder identifiers, product and subscription type, payment status and entitlement historyValidating purchases, activating or restoring Premium and handling disputes
NotificationsPush token, notification preferences and delivery informationDelivering enabled service notifications
Usage and diagnosticsScreen events, session information, performance measurements and crash reportsUnderstanding feature use and diagnosing failures
SupportYour message, contact details and attachments you choose to sendAnswering your request and resolving a complaint

Payment card numbers and banking credentials are handled by the payment provider or app store; they are not needed by HabitMir to activate an entitlement. Do not send passwords, reset links, payment credentials or unnecessary sensitive information to support.

3. Where information comes from

You provide information by registering, creating habits and diary entries, changing preferences and contacting support. The app and website generate operational and diagnostic information during use. If you choose a third-party sign-in method, its provider supplies the identifiers and profile information covered by that sign-in flow. Stores or payment providers supply purchase and subscription status so that the service can validate access.

Local reminders use the times and time zone you configure. We do not need precise GPS location to provide the tracker or choose the website language. Country estimates, when enabled through a verified network path, are obtained locally from a bundled IP-country database; visitor IP addresses are not sent to a new geolocation service.

4. Purposes and lawful grounds

Account administration, synchronization, requested reminders, support and purchase validation use the information needed to provide the service you request, on the contractual or other lawful ground available under applicable law. Security, diagnostics and proportionate fraud prevention protect accounts and maintain service operation. Records may also be processed to meet legal obligations or establish, exercise or defend specific legal claims.

We rely on legitimate interests only where that ground is available and the necessary assessment supports its use; it is not assumed to exist under every country’s law. Where consent is required, it must be requested for the relevant purpose and can be withdrawn without affecting earlier lawful processing. Accepting terms or allowing notifications does not supply consent to unrelated analytics or marketing.

Analytics and crash reporting may start automatically in configured app versions. Required consent must be obtained before processing begins. Available analytics choices and the providers used depend on the relevant distribution; a notification permission is a separate choice.

You can use supported guest/offline features without an email account. Without account identifiers we cannot provide account recovery or cross-device synchronization. Purchase validation requires the relevant order and entitlement information. Refusing an optional purpose must not prevent use of unrelated core features.

5. Diary content and sensitive information

Diary entries and habit descriptions are content you choose to create. Synchronized entries are processed on the server to provide the journal. Where a sharing feature is available, your entry’s visibility setting determines its audience; a public entry may be read by other users. Check the audience before publishing. Content is not used to target advertising.

Do not enter payment credentials or unnecessary sensitive information, or disclose another person’s private information without a lawful reason. Health, political, religious, intimate and other specially protected information can require additional legal grounds and safeguards even when you type it voluntarily. An ordinary service agreement does not by itself satisfy those requirements.

Cloud synchronization is not end-to-end encryption, and private visibility does not mean that the information exists only on your device or is inaccessible to authorized service systems. Security controls and random identifiers do not make personal information anonymous.

6. Service providers and other recipients

Recipient categoryInformation and purpose
Hosting, database and infrastructure operatorsRequest and account information, synchronized content and operational records needed to deliver and secure the service
Email and support servicesContact details, necessary account messages and the information included in a support request
Analytics and diagnostic servicesUsage events, technical identifiers, app/device information and error or performance reports
Notification delivery providersPush tokens, delivery information and the notification content needed for selected features
Selected sign-in providers and app storesAuthentication/profile information, purchase status and order information required by the feature you use
Other users, when you choose to share an entryThe content and profile information made visible through the selected sharing feature

The product integrates Yandex AppMetrica for analytics, Sentry-based error monitoring, supported sign-in providers and store-specific payment or notification services. Which integration is used depends on the app version, platform and channel. A software package is not necessarily a separate recipient: a self-hosted diagnostic system and a hosted vendor service have different operators. Stores and sign-in providers also process information independently under their own notices when you choose those services.

Recipients process information for the functions described above under the arrangements applicable to their role. We do not sell personal data or use diary content for advertising. Contact support@habitmir.ru for recipient information relevant to your account, including information required to exercise an applicable access right.

Information may be disclosed when a valid legal obligation requires it or where necessary to protect rights and security under applicable law. A business transfer cannot silently remove existing privacy protections or make a language switch an assignment of your data. Any controller change must follow the applicable notice and other legal requirements.

7. Storage location and international processing

Core service data are stored in the Russian Federation, with a local copy on your device for supported offline features. The website language does not relocate existing account data. External sign-in, store, analytics and notification services have their own processing locations and notices. Some integrations are selected by you; others operate as part of the app as described above. Processing locations depend on the integration and can include other countries.

Cross-border processing remains subject to the lawful grounds, disclosures and safeguards required for the relevant data and territory. Contact support@habitmir.ru for the recipient locations and safeguards applicable to your account and information about obtaining them. Displaying English is not consent to an otherwise unlawful transfer.

8. Retention, account deletion and backups

Account, habit and journal information is retained while needed to provide an active account and its requested features. Deletion disables ordinary account use and starts removal of associated data. A verified erasure request is assessed under the applicable legal deadlines and exceptions. Uninstalling the app does not itself delete synchronized account data or cancel a store-managed subscription.

Purchase, accounting and proportionate fraud or security records may outlast account deletion where an identified legal duty or a specific claim justifies retention. Support records are retained to resolve the request and related claims; operational and diagnostic records follow their troubleshooting or security purpose. Retention is determined by the purpose, account status, applicable recordkeeping and claim periods, data sensitivity and whether less identifying information is sufficient. A hypothetical future dispute does not justify keeping all diary content indefinitely.

Backups are separate from ordinary service access and follow the applicable backup lifecycle. Deleting an account does not imply immediate removal from every historical copy. Backup retention and any restoration remain subject to applicable erasure and security requirements; necessary retained records may not be reused for unrelated purposes.

Truly anonymous aggregate statistics may be retained separately if they cannot reasonably be linked back to an individual. A random or hashed identifier alone does not make data anonymous.

9. Automatic website language

The website automatically chooses a language when you open a language-neutral address. It does not offer a language switcher or use a language-preference cookie; previously saved preferences are ignored. Fixed language-specific document addresses remain stable.

Automatic country selection, when enabled through a verified network path, resolves the country locally from the request IP: Russia and Belarus use Russian; other countries use English. Browser language does not override that rule. If country selection is disabled or the country cannot be established, the fallback is English. The language lookup does not store or send the visitor IP to an external geolocation API; separate infrastructure logs can still contain request information. Language estimates do not decide your legal status, existing provider or consumer protections.

10. Security and incident handling

Security measures are intended to protect accounts, credentials, communications and stored information against unauthorized access. No internet service or device can be guaranteed completely secure. Keep passwords and recovery links private, protect your email account and device, and install supported updates. A privacy setting is not a guarantee against every security incident.

If a personal data breach occurs, we assess it and notify affected people and supervisory authorities when and as required by applicable law.

11. Your data protection rights

Depending on the law applicable to your account, you may have rights to obtain information and a copy of your data, correct inaccurate data, request deletion, restrict processing, object to processing based on legitimate interests, receive portable data, withdraw consent and lodge a complaint with a competent supervisory authority. Applicable exceptions and the rights of other people may limit a particular request. Nothing in this policy excludes a mandatory right.

Send requests to support@habitmir.ru using the email associated with your account where possible. We may ask for proportionate information to verify that a request concerns your own account; do not send identity documents unless a necessary and secure process has been explained. Requests must be handled within the deadline required by the applicable law, with reasons given for any lawful extension or refusal.

Account deletion is available through the supported in-app account settings or a verified support request. The displayed website language does not count as withdrawing consent or deleting an account.

12. Automated functions

The service automatically calculates streaks, updates the island, synchronizes progress, schedules reminders and validates feature limits or purchase status. These are product functions rather than a claim to make legally significant decisions about you. If access is restricted for suspected abuse, you can contact support and request review. No new solely automated decision with legal or similarly significant effects is authorized by this policy.

13. Children and young people

The international service is for users aged 14 or older, subject to any higher applicable legal minimum. A parent or other legal representative must authorize the agreement or personal-data processing where the applicable law requires it. These rules also apply to guest features: guest identifiers and technical information can still be personal data, and a guest account or app-store age rating does not replace a required authorization. Do not provide a child’s information where the service does not support the required authorization.

If you believe a child has provided information without the required permission, contact support@habitmir.ru so that the account and appropriate deletion or other protective action can be reviewed.

14. External services and links

Following a store, sign-in, payment or other external link takes you to a separate provider. Read that provider’s notice before supplying information. This policy describes HabitMir’s own processing and does not control an independent provider’s website or your internet connection.

15. Changes and contact

Changes must be reflected in the document version and effective date. Material changes to data purposes, recipients or the responsible provider require the notice, legal ground and any consent required by applicable law; silently updating this page cannot authorize incompatible processing retroactively.

Contact: Aleksei Chernushkin, an individual, at support@habitmir.ru. Public correspondence address: 6 Lenina Street, Minsk, Belarus. The website notice applies to English website visits; app-specific processing is covered when the relevant service is expressly supplied by this provider.

Read the international Terms of Service for services supplied by this provider.