Privacy Policy

By using CeeHabits - via the web app or Android app - you agree to the practices described here. If you don't agree, please discontinue use and contact us to delete your account.

Account data - when you register, we collect your name and email address. Passwords are hashed using bcrypt and never stored in plain text.

Habit data - the habits you create, including their name, icon, colour, quit date/time, and daily cost figure. This data is private to your account and never shared.

Streak records - your current and historical streak durations are stored so you can track personal bests over time.

Usage data - we may log basic server-side request data (IP address, user agent, timestamp) for security and abuse prevention. These logs are retained for a maximum of 30 days.

We do not collect:

• Payment information (CeeHabits is free)
• Location data
• Device contacts, camera, or microphone access
• Any data from third-party social platforms

Your data is used exclusively to provide the CeeHabits service:

• Authenticating your account and keeping you logged in
• Storing and syncing your habits and streak records across devices
• Displaying your real-time clean time and savings calculations
• Sending transactional emails (password reset, account confirmation) - no marketing emails unless you explicitly opt in
• Diagnosing server errors and preventing abuse

Your data is stored on servers located within the European Economic Area (EEA). We use industry-standard practices including:

• TLS encryption for all data in transit
• Bcrypt password hashing
• CSRF token protection on all state-changing requests
• Restricted database access with least-privilege principles

While we take reasonable precautions, no system is completely secure. In the event of a data breach that affects your personal data, we will notify you within 72 hours as required by UK GDPR.

Your habit data (names, icons, dates, amounts) is intentionally not encrypted at rest as it needs to be queried efficiently - this is standard practice for non-sensitive application data. Passwords are always hashed.

CeeHabits uses a minimal set of third-party services, each limited to what's necessary:

• Bunny.net - font delivery (Inter typeface). No personal data is sent.
• Hosting provider - server infrastructure within the EEA. Subject to a data processing agreement.
• Transactional email provider - for sending password-reset and account emails only. Your email address is passed to this provider solely for delivery.

We do not use Google Analytics, Facebook Pixel, or any advertising or behavioural tracking services. There are no third-party advertising SDKs in the Android app.

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

• Access - request a copy of all personal data we hold about you
• Rectification - correct inaccurate data (most data is editable directly in the app)
• Erasure - request complete deletion of your account and all associated data
• Portability - receive your data in a machine-readable format (JSON)
• Restriction - request that we stop processing your data in certain ways
• Objection - object to processing based on legitimate interests

To exercise any of these rights, email support@ceehabits.uk. We'll respond within 30 days. You may also delete your account directly from Settings → Danger zone → Delete account, which permanently removes all your data immediately.

If you're unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

CeeHabits uses a session cookie solely to keep you logged in. No tracking or advertising cookies are set. The cookie is:

• HttpOnly and Secure
• Scoped to the CeeHabits domain only
• Expires when your session ends or after 30 days of inactivity

We also use localStorage to remember your light/dark theme preference (ch_theme). This key contains no personal data and is never sent to our servers.

No consent banner is shown because we set no tracking or non-essential cookies.

For any privacy-related questions, requests, or concerns:

• Email: support@ceehabits.uk
• Web: michaelcee.com

If we make material changes to this policy, we will update the "Last updated" date at the top and, where appropriate, notify you by email. Continued use of CeeHabits after a policy update constitutes acceptance of the revised terms.

CeeHabits is a project by MichaelCee · Barry, Wales, UK