Privacy Policy

1. Introduction

Histriva ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our personal growth and habit tracking application.

2. Information We Collect

We collect the following types of information:

• Account Information: Email address, name (optional), and encrypted password when you create an account.
• Habit Data: Habits you create, completion records, progress tracking, and self-assessment scores.
• Usage Data: Anonymous analytics about how you interact with the app (page views, feature usage) collected via PostHog.
• AI Interaction Data: Goals and preferences you share with our AI features to generate personalized recommendations.

3. How We Use Your Information

• To provide and maintain the Histriva service
• To generate personalized AI-powered habit recommendations
• To track your habit progress and provide insights
• To improve our app based on aggregate usage patterns
• To send you important account-related notifications

4. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security policies. Passwords are hashed using bcrypt before storage. We use HTTPS for all data transmission. While we implement industry-standard security measures, no method of electronic storage is 100% secure.

5. Third-Party Services

We use the following third-party services:

• OpenAI: To power AI-generated habit recommendations. Your goals and habit data may be sent to OpenAI's API for processing. OpenAI's data usage policies apply.
• Supabase: For secure database hosting and authentication infrastructure.
• PostHog: For privacy-friendly product analytics. PostHog is open-source and does not sell user data.
• Sentry: For error monitoring to improve app reliability.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We only share data with the third-party services listed above as necessary to provide our service. We may disclose information if required by law or to protect our rights.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your habit data
• Opt out of analytics tracking

8. Cookies

We use essential cookies for authentication (session management via NextAuth.js) and analytics cookies via PostHog. Authentication cookies are necessary for the app to function. You can disable analytics cookies in your browser settings.

9. Children's Privacy

Histriva is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at hello@histriva.com.