Privacy policy.

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Software.

If you choose to use our Software, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Software. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at Terms of Service unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience and to provide habit tracking services, we collect the following personally identifiable information when you create an account:

• Email address: Used for account authentication and communication
• Name: Used for personalization within the app
• Habit data: Information about your habits, completions, routines, and progress tracking (including quantity counts and timer durations)
• Mood data: Daily mood check-in ratings (1-5 scale) used to provide mood-habit correlation insights
• Routine data: Routine names, time-of-day preferences, and habit ordering within routines
• Health data: With your permission, step counts, exercise minutes, and sleep data from Apple HealthKit to automatically track health-related habits

Photo Library Access: If you choose to save achievement milestone cards or Year in Review images, we request write-only access to your photo library. We do not read, collect, or upload any photos from your device.

This information is collected and processed for the purpose of providing habit tracking services and app functionality. We require your explicit consent before collecting this information, which you provide during the account sign-up process.

Our app and website use a small number of third-party services strictly to deliver core functionality. These are described below. We do not sell your data, and we do not use analytics, advertising, or tracking services in the mobile app.

Third-Party Services

The mobile app uses the following service providers, each strictly for app functionality:

• Authentication and Cloud Storage (Appwrite)
  • Purpose: Account creation, sign-in, and storing your habits, completions, moods, programs, and routines so they sync across your devices.
  • Data Processed: Email address, display name, habit and routine content, completion records, mood ratings, and reflection notes.
  • Protection: Data encrypted in transit and at rest. Access restricted to your authenticated account.
• Push Notifications (Apple Push Notification service)
  • Purpose: Delivering reminders and friend-related notifications you opt into.
  • Data Processed: An anonymous device push token issued by Apple, stored against your account so we can route notifications to your device.
  • Protection: Push tokens are not used for tracking or advertising. You can disable notifications at any time in iOS Settings.
• Apple HealthKit (optional, on-device only)
  • Purpose: If you opt in, the app reads supported activity data from Apple Health to auto-complete matching habits.
  • Data Processed: Health metrics are read on demand and never transmitted off your device. The app stores only the resulting habit completion record (e.g., “walk completed on date X”), not the underlying health values.
  • Protection: You can disable the integration at any time in the app's Settings.

What the mobile app does NOT use:

• No third-party analytics services (PostHog, Mixpanel, Amplitude, Firebase Analytics, etc.)
• No third-party crash or error tracking services (Sentry, Bugsnag, Crashlytics, etc.)
• No advertising SDKs or advertising identifiers (IDFA / AdSupport)
• No cross-app or cross-website tracking

Future services. When we introduce premium subscriptions in a future release, payments will be processed exclusively through the Apple App Store and we will not store your payment information. This Privacy Policy will be updated before any such service is enabled.

Log Data

The mobile app does not transmit crash logs or diagnostic data to us or to any third-party error-tracking service. Standard device-level crash reports collected by Apple may be shared with us only if you have opted in to share analytics with app developers in your iOS Settings. Those reports are governed by Apple's privacy practices.

Our marketing website (mylifehabit.nextstarai.com) is hosted on Vercel and uses Google Analytics 4 to understand site traffic in aggregate. The website's analytics do not identify individual visitors and are not connected to any mobile app account.

Cookies

The mobile app does not use cookies. As a native iOS app, it does not rely on browser-based cookie storage.

Our marketing website uses a small number of cookies set by Google Analytics 4 to measure aggregate site traffic. You can block or delete these cookies through your browser settings without affecting your ability to read the site's content.

Service Providers

The third-party companies listed under Third-Party Services above process your information on our behalf solely to deliver the functionality described. They are contractually obligated not to use your information for any other purpose, and they do not share it with additional parties. We do not employ third-party advertising networks, data brokers, or marketing analytics providers.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Disclaimer: By using our Software, you acknowledge and accept the inherent risks of data transmission and storage. We disclaim all liability for security breaches beyond our reasonable control.

Links to Other Sites

This Software may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

This Software does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13 years of age. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page.

Important: Continued use of our Software after policy changes constitutes acceptance of the updated terms. We reserve the right to modify this policy at any time without individual notice.

This policy is effective as of October 7, 2025. Last updated: October 31, 2025.

GDPR Compliance & User Consent

We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring transparent data collection practices.

Explicit Consent: During the account sign-up process, you are required to provide explicit consent for the collection and processing of your personal data. A consent checkbox appears in the sign-up form with the following disclosure:

You must check this consent box before you can create an account. This ensures that you have been informed about what data we collect and why, and that you explicitly agree to this data collection.

Withdrawal of Consent: You can withdraw your consent at any time by deleting your account through the app settings. Upon account deletion, all your personal data will be permanently removed from our systems.

Your Rights: Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Object to data processing
• Data portability

To exercise these rights, please contact us at support@nextstarai.com.

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at support@nextstarai.com.

Data Deletion and Account Management

Account Deletion: You can delete your account at any time through the app settings or by contacting us at support@nextstarai.com.

Data Deletion Process:

• Account deletion requests processed within 30 days
• All personal data permanently deleted from our systems
• Data deletion includes habit data, preferences, and account information
• Backup data deleted within 90 days of account deletion
• Third-party service data deletion subject to their policies

Data Export: Before deletion, you can export your data in JSON format by contacting support@nextstarai.com.

Important: Account deletion is irreversible. We cannot recover deleted data after the deletion process is complete.

Legal Disclaimer