Controller and Privacy Contact (LGPD)
AtomikHabit acts as the controller of personal data processed in the app and cloud services, within the limits of applicable law. Privacy requests and LGPD rights requests can be sent to [email protected].
Information We Collect
We may collect the following information when it is needed for app functionality:
- Account details such as name, email, and password hash when you create a cloud account.
- Business profile data that you choose to publish, including name, category, contact email, website, location, and images.
- Shared habit data, backup data, and premium entitlement status.
- Device and diagnostic information used to keep notifications, purchases, and cloud sync working.
LGPD Legal Bases
For users in Brazil, personal data is processed under one or more legal bases from the LGPD (Law No. 13,709/2018), including contract performance, legal obligation, legitimate interest, and consent when required.
- Account creation, authentication, cloud sync, and subscription status: contract performance.
- Mandatory records, fraud prevention, abuse handling, and legal requests: legal obligation and regular exercise of rights.
- Service security, stability, and moderation of public feed content: legitimate interest, with balancing and safeguards.
- Optional processing that depends on permission or opt-in, when applicable: consent.
How We Use Information
We use the information only to provide, secure, and improve the service. This includes:
- Creating and maintaining your account.
- Syncing habits, business profiles, and public feed content.
- Processing subscriptions and restore flows through the App Store and Google Play.
- Sending password recovery tokens and supporting user requests.
- Blocking abusive or inappropriate public content when moderation rules require it.
Analytics and Measurement Platforms
We may use analytics and measurement tools, including Google Analytics technologies and Meta Pixel or Meta SDK technologies, to understand feature usage, campaign performance, and product quality. These platforms may process identifiers, event data, device data, and approximate location data according to their own privacy terms.
Sharing and Disclosure
We do not sell personal information. We may share data only in these cases:
- With Apple or Google when processing in-app purchases or subscription validation.
- With analytics and campaign partners, such as Google and Meta, for measurement and attribution.
- With cloud infrastructure providers that host the backend and database.
- When you intentionally publish a habit or business profile to the public feed.
- When required to comply with a legal obligation or to protect the service.
International Data Transfers
Some providers may process data outside your country. When this occurs, we adopt contractual, organizational, and technical safeguards suitable to the applicable law, including LGPD requirements when relevant.
Data Retention and Deletion
You can delete your cloud account from the app. When you do, the backend removes the account and related cloud records subject to the database cascade rules. Local device data stays on your phone unless you remove it manually.
We keep personal data only for as long as needed for the purposes described in this policy, including legal, audit, and security obligations. Some records may remain for legally required periods, and technical logs are kept for limited periods when collected.
Your LGPD Rights
You may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing, and review of decisions when applicable. You may also revoke consent where processing depends on consent.
Requests can be made by email to [email protected]. To protect your account, we may request identity verification before fulfilling a request. We answer within legal deadlines and, when applicable, provide a complete response within up to 15 days under LGPD rules.
Security and Liability Limits
We use reasonable technical and administrative measures to protect personal data. However, no method of transmission or storage is fully secure, and absolute security cannot be guaranteed.
Children
AtomikHabit is not intended for users under 18 years old. Account registration requires age verification for legal compliance.
Contact
If you have questions about this policy, contact us at [email protected].