HabitatePrivacy Policy
Habitate ("Habitate", "we", "us") is a home and living-space organiser at habitateos.com, including when installed from your browser as a progressive web app. This policy explains what information we handle, why, and the choices you have. We wrote it to be read. The short version is in our pledge: your home and family data belongs to you; we do not sell it, we do not show advertising, and we do not use your content to train AI models.
1. Information we collect
Account information
When you sign in with Google we receive your name, email address and profile picture through Firebase Authentication. You can also use Habitate as a guest, which creates an anonymous account with no name or email.
Weather location
Garden weather is optional. When you choose “Use my location”, your browser asks to share your location; you can enter coordinates instead. We send those coordinates to Open-Meteo to retrieve the forecast. The weather cards do not request location automatically or save those coordinates to your account.
Content you add
Everything you enter into Habitate's living spaces: tasks and schedules, home, vehicle, pet, plant, garden, aquarium and kitchen records, shopping and wish lists, contacts and birthdays, notes about your children, planner entries, finance subscriptions, emergency checklists, projects, and similar. This is stored in Google Cloud Firestore under your account.
Photos and documents
Photos and files you upload (for example a pet record, a project document, or a 3D print file) are stored in Firebase Storage under your account. Images are compressed on your device before upload.
Google data
If you connect Google, Habitate accesses Google Tasks and Google Calendar as described in section 2.
Usage analytics (optional)
Where enabled, we use Google Analytics for Firebase to count anonymous events such as signing up or completing a first task. We do not put names, emails or the content of your records into analytics. You can turn analytics off at any time in Settings → Data & Privacy.
Technical and error information
When the app hits an error, it can send a short report to our server logs on Google Cloud. Reports are scrubbed of tokens, email addresses and similar secrets before they are stored, and are used only to fix bugs. Our servers also keep short-lived technical logs (such as request errors) to run and secure the service. For AI features we keep a count of your AI requests and an estimate of their cost, tied to your account, to enforce plan limits and keep the service affordable; the logs record which space a request came from and how large it was, not what you wrote.
On your device
We store preferences (such as theme, last open tab and analytics choice) and an offline cache of your data in your browser or app storage so Habitate works without a connection.
2. Google user data and Limited Use
Habitate's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Connecting Google is optional. If you do, you grant these permissions, and we use them only to provide the features you see in the app:
| Permission (scope) | What we use it for |
|---|---|
https://www.googleapis.com/auth/tasks | Create, update, complete and delete tasks and task lists in your Google Tasks, so your Habitate tasks and the lists you choose (shopping, groceries, wish list, gift ideas) appear on your phone, and so check-offs on your phone come back into Habitate. We only touch the lists Habitate creates and manages. |
https://www.googleapis.com/auth/calendar.readonly | List your calendars so you can pick which ones appear in the Weekly Planner. |
https://www.googleapis.com/auth/calendar.events | Read events on the calendars you pick to show your week, and create an event on a calendar you choose when you add one in the planner and select Google Calendar. |
https://www.googleapis.com/auth/userinfo.profile and userinfo.email | Identify you and show your name and email in the app. |
How Google data is handled:
- Calendar events are fetched live when you open the planner and shown to you. We do not copy your Google Calendar events into our database. Events you create in Habitate's own planner are stored as your content.
- Tasks that Habitate creates are linked to your Habitate records so they stay in sync. We read back the state of the Habitate-managed lists to detect changes you made on your phone.
- Access tokens are stored on our server in a store your browser cannot read, and are used only to call Google on your behalf.
- We do not sell Google user data, use it for advertising, use it to determine credit-worthiness or for lending, transfer it to others except as needed to provide the features above or to comply with law, or use it to develop, improve or train generalised AI or machine-learning models.
- We do not allow people to read your Google data, except with your consent for a specific item (for example when you ask us for support), where necessary for security or to investigate abuse, or to comply with law.
You can disconnect Google at any time in Habitate (Tasks → Disconnect), which deletes the stored tokens, and you can revoke Habitate's access at myaccount.google.com/permissions.
3. How we use information
- To provide Habitate: store your records, generate schedules and reminders, sync with Google, and show your data back to you.
- To power features you choose to use, including AI features (section 4).
- To keep the service secure, prevent abuse and rate-limit expensive features.
- To understand which features work, using anonymous analytics you can opt out of.
- To respond to your questions and requests, and to meet legal obligations.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
4. AI features
Some features (such as plant and pet advisors, document scanners, planners and coaches) send the text or image you provide, plus the minimum context needed, to Google's Gemini API through our server to generate a response. AI requests are made only when you use an AI feature. We do not use your content to train AI models.
- Features about children (the Kids & Parenting coach) send only a child's age, interests and the notes you choose to write. A child's name and birthday are never sent.
- Calendar event titles are sent to the AI only when you tap Plan my week.
- Google processes these requests under its own terms for the Gemini API. AI output can be wrong; see our Terms.
- If you report an AI response, we keep the response text, the reason and any note you add so we can review it and improve safeguards. These reports are not linked to your account after you delete it.
5. Sharing
- People you choose. If you create a household and invite members, the modules you share are visible to and editable by those members. Each member's Google connection remains their own.
- Service providers. We run on Google Cloud and Firebase (hosting, database, storage, authentication, logging, analytics) and use Google's Gemini API for AI features. They process data for us under their terms.
- Payments. Purchases on the web are processed by Stripe and purchases in the Android app by Google Play. They handle your card and billing details; we never see or store your card number. We receive and keep your purchase status (what you bought, whether a subscription is active, and the identifiers that connect your Habitate account to the purchase) so we can unlock what you paid for.
- Legal and safety. We may disclose information if required by law or to protect people and the service.
- Business changes. If Habitate is ever acquired or merged, we will tell you before your information is transferred or becomes subject to a different policy.
6. Retention, export and deletion
- Your content stays in your account until you delete it. Old completed-task history is pruned automatically after about a year.
- Export: Settings → Data & Privacy → Export your data downloads all of your data.
- Delete: Settings → Data & Privacy → Delete my account permanently erases your account, sign-in record, records, uploaded files and stored Google tokens. If you can't sign in, see how to request deletion. Deletion is not reversible. Short-lived server logs and routine backups expire on their normal schedules.
- Temporary uploads are removed automatically after 7 days.
7. Security
Data is encrypted in transit. Firestore and Storage are protected by rules that limit each account to its own data (and to a household's shared data for its members). Google tokens and integration credentials live in a server-only store. The browser extension's key is stored only as a hash on our side and reaches only the wish-list save route. No system is perfectly secure; if we learn of a breach affecting you we will notify you as the law requires.
8. Children
Habitate is not directed to children under 13 and we do not knowingly collect personal information from them. The Kids & Parenting space lets parents keep notes, tasks and journals about their own children; that information is the parent's content, is not used for advertising, and is not shared with AI beyond the minimum described above. If you believe a child has created an account, contact us and we will delete it.
9. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or California's CCPA/CPRA) you may have the right to access, correct, export and delete your information, to object to or restrict certain processing, and to withdraw consent. Most of these are available directly in Settings → Data & Privacy; for anything else, contact us. We will not discriminate against you for exercising your rights. Habitate is operated from the United States and your information is processed there and in other countries where our providers operate.
10. Changes and contact
If we make material changes we will update the date above and, for significant changes, tell you in the app. Questions or requests: [CONTACT EMAIL]. Operator: [LEGAL ENTITY NAME], [POSTAL ADDRESS].