Habitus
Privacy Policy
Effective October 8, 2026
How Habitus handles account, journal, and device data — in plain language, for people using the app.
Who we are
Habitus is a Christian daily formation app from Unity Bridge, the program arm of Day One. Habitus offers Scripture, short reflections, reading plans, and historic spiritual practices. It is not a church, clinic, or law firm.
Learn more about Unity Bridge at https://unitybridgeapps.com. Questions about this policy: support@gohabitus.app.
What this policy covers
This policy describes personal information we collect when you use Habitus on the web, iOS, or Android, including gohabitus.app. It does not cover websites or apps we do not operate, such as Apple, Google, Stripe, RevenueCat, or Supabase’s own sites.
Information we collect
You can use much of Habitus without an account. Data then stays on your device until you clear it. If you create an account, we collect what we need to run the app:
▸
Account: email address and authentication credentials, handled by Supabase Auth (we do not see your raw password).
▸
Profile: the display name you choose.
▸
Journals: discipline entries, drafts, and any optional spiritual feedback you save on an entry.
▸
Reading life: plan progress, custom plans, daily reflection checks, font and listen preferences, and reminder on/off times.
▸
Scripture Ask: the chat you keep in the app, a daily free-question count when you are not Plus, plus custom search topics.
▸
Optional push tokens: if you are signed in on iOS or Android, we may store a notification token for that device. Morning and night practice reminders are scheduled as local notifications on the device and do not require a remote send.
▸
Plus, when offered: subscription status and provider identifiers (Stripe customer and subscription ids on the web; App Store or Play purchase and entitlement ids on iOS and Android). We do not store full card numbers.
▸
On-device storage: session tokens and a local copy of your journal live in the app’s storage (and in the browser’s local storage on the web).
Device text-to-speech runs on your device. If you choose Natural AI Listen while signed in, we send public-domain Scripture text to a speech service to produce audio; that audio may be cached so other signed-in listeners can reuse it. We do not send your private journal to that speech cache.
If you use dictation, your browser’s speech recognition or, when you are signed in, a transcription service receives the audio long enough to return text into the field you are editing. We do not keep that audio after the text is returned.
Why we use it
▸
To provide Habitus: sign you in, sync your journal and preferences across devices, and remember your reading plan.
▸
To schedule optional local reminders you turn on in Settings.
▸
To process Habitus Plus when that paid plan is offered, and to restore a purchase you already made.
▸
To generate optional Natural AI Listen audio for Scripture, and optional dictation text.
▸
To respond when you write to support.
We do not sell your personal information. We do not use your private journal to train our own public models. We do not run third-party advertising networks in Habitus.
How long we keep it
Signed-in account data stays while your account is open. Signed-out data stays on that device until you use Clear local data in Settings or uninstall the app. Push tokens are updated when the device token changes and are removed if you delete your account. Deleting an account does not cancel an App Store or Google Play subscription. Cancel those in the store. A website subscription is canceled when you delete the account, or you can use Manage billing in Settings and keep the account.
You can delete your account in the app: Settings, then Delete account. That deletes the account and the journal, reading progress, Plus record, and push tokens stored for it. The same steps are at https://gohabitus.app/delete-account. If you cannot open the app, email support@gohabitus.app from the address on the account and we will delete it. We will delete or de-identify that account data except where we must keep a limited record (for example, a billing identifier required by a store or payment processor, or a record we are legally required to retain).
Third parties who help us run Habitus
We use processors to operate the app. They receive only what they need for that job, under their own terms and privacy policies:
▸
Supabase — authentication, profiles, journals, reading state, optional push tokens, and Plus entitlement records.
▸
Stripe — web checkout and subscription billing when Habitus Plus is offered on the web.
▸
RevenueCat — iOS and Android subscription processing. RevenueCat receives purchase and entitlement identifiers and the app user id that ties a store purchase to the signed-in account. It does not receive journal text.
▸
Apple and Google — app distribution, in-app purchases, and system notifications. Store billing is handled by Apple and Google.
▸
Expo — app runtime and, when a push token is stored, notification delivery.
▸
OpenAI — Natural AI Listen for public-domain Scripture, and optional dictation transcription when that path is enabled.
Hosting for gohabitus.app is on Vercel. We do not invent other vendors here. If we add a processor that materially changes how your data is handled, we will update this page.
Children’s privacy
Habitus is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email us and we will delete it.
Your choices
▸
Use Habitus signed out; your journal then stays on that device.
▸
Turn morning and night reminders off in Settings.
▸
Clear local data in Settings. That does not by itself delete a signed-in server account.
▸
Delete your account in Settings, or follow https://gohabitus.app/delete-account. Email support@gohabitus.app to correct your display name, ask an export question, or request deletion if you cannot open the app.
Security
We use standard industry protections (HTTPS, authenticated APIs, and row-level access so one account cannot read another’s journal). No method of transmission or storage is perfectly secure. Please use a password you do not reuse elsewhere.
Changes to this policy
We may update this Privacy Policy. The current version lives at https://gohabitus.app/privacy with the effective date at the top. If we make a material change, we will update that date and, when practical, note it in the app. Continued use after the new effective date means you accept the updated policy.
Contact
Privacy questions: support@gohabitus.app. To delete an account, use Settings in the app or https://gohabitus.app/delete-account. Unity Bridge: https://unitybridgeapps.com.