01Who we are
HabitFund is built and operated by Vital River, an independent mobile app studio based in the United Kingdom. In this policy, "we", "us", and "our" mean Vital River.
For the purposes of the UK GDPR and the Data Protection Act 2018, Vital River is the data controller for the personal data we process through HabitFund.
If you have any questions about this policy, you can reach us at hello@vitalriver.net.
02Data we collect
We collect only what HabitFund needs to work for you. Nothing more.
| Category | What this includes |
|---|---|
| Basic account info | Your email address, display name, and an authentication token. Created when you sign in. |
| Habit data | The habits you create, the days you mark them done, your streaks, and any notes you add. |
| Savings goals | The micro-savings amounts (in £) you assign to each habit and the running total you have logged in the app. |
| Technical data | App version, device type, Android OS version, and crash reports. Used to keep the app stable. |
What we don't collect. HabitFund does not access your contacts, photos, location, microphone, or any financial accounts. The savings totals you see in HabitFund are figures you log yourself — we don't move money on your behalf.
03How we use your data
We use your data only for the following purposes:
- To let you sign in and sync your habits across your devices.
- To save your habit progress and savings totals.
- To send you optional reminders about habits you have set up.
- To diagnose crashes and improve app stability.
- To respond to you when you contact our support email.
We do not sell your data. We do not use your data for advertising. We do not build a profile of you to share with third parties.
04Legal bases for processing
Under the UK GDPR, we rely on the following legal bases:
- Contract — to provide the HabitFund service you have signed up for.
- Legitimate interests — to keep HabitFund secure, prevent abuse, and fix bugs.
- Consent — for optional features such as habit reminders. You can withdraw consent at any time in the app's settings.
- Legal obligation — where we must process data to comply with UK law.
05Where data is stored
Your data is stored using Firebase, a secure cloud platform provided by Google. Specifically, HabitFund uses Firebase Authentication for sign-in and Cloud Firestore for storing your habits and savings goals.
Firebase data may be processed on Google servers located inside or outside the UK. When data is transferred outside the UK, it is protected by appropriate safeguards under Article 46 of the UK GDPR, including the UK International Data Transfer Addendum and Standard Contractual Clauses.
You can read Google's own privacy commitments at firebase.google.com/support/privacy.
07How long we keep data
We keep your data only as long as you have an active HabitFund account.
- If you delete your account from within the app, your habit data and savings goals are deleted within 30 days.
- Crash reports are retained for up to 90 days and are not linked to your identity.
- Backups containing residual data are rotated out within 90 days.
We may retain a minimal record (for example, the fact that an account was deleted) where we need it to comply with a legal obligation.
08Your rights
Under the UK GDPR, you have the following rights over your personal data:
- Right to be informed — to know what we do with your data. This policy is part of how we meet that right.
- Right of access — to receive a copy of the data we hold about you.
- Right to rectification — to ask us to correct inaccurate data.
- Right to erasure — to ask us to delete your data ("the right to be forgotten").
- Right to restrict processing — to ask us to pause processing in certain situations.
- Right to data portability — to receive your data in a structured, commonly used format.
- Right to object — to object to processing based on legitimate interests.
- Rights related to automated decision-making — HabitFund does not make automated decisions that produce legal or similarly significant effects on you.
To exercise any of these rights, email hello@vitalriver.net. We will respond within one month.
Complaints. If you are not satisfied with how we have handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113. We would appreciate the chance to address your concerns first.
09Security
We take reasonable technical and organisational measures to protect your data, including:
- Encryption in transit (HTTPS / TLS) between your device and Firebase.
- Encryption at rest on Google's Firebase infrastructure.
- Strict access controls — only the people who need it can access production systems.
- Regular dependency and security updates to the HabitFund Android app.
No service can promise perfect security, but we work hard to keep your data safe and to be transparent if anything goes wrong.
10Children
HabitFund is intended for users aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please email hello@vitalriver.net and we will delete the data promptly.
11Changes to this policy
We may update this policy from time to time as HabitFund evolves or as the law changes. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you in the app.
12Contact
If you have any questions about this policy or your data, get in touch.