Privacy Policy

Last updated: 27 Feb 2026

This Privacy Policy describes how this mobile application ("Habituate" or "the app") handles user information. Your privacy is important to us. While we now use basic analytics to improve the app's performance, Habituate is designed to keep your personal therapy data private and local to your device.

1. Overview

Habituate is a self-help tool designed to support Cognitive Behavioral Therapy (CBT) and related exposure-based therapies. Habituate allows users to record exposure sessions, track thoughts and feelings, and review past sessions.

Habituate does not use user accounts. Your clinical and personal data is stored locally on your device only. We use third-party analytics (Firebase) only to understand app performance and usage patterns.

2. Information Collected

User-Provided Health Information (Private & Local)

Habituate allows you to voluntarily enter information related to your mental health. This data stays on your device and is never sent to our servers or third parties:

• Mood and emotional state
• Anxiety or distress levels
• Exposure session notes and scenario titles
• Thoughts, beliefs, and reflections related to CBT

Anonymous Usage Analytics (Collected)

To help us improve Habituate, we collect anonymous usage data via Google Firebase. This information is aggregated and cannot be used to identify you personally. We collect:

• Engagement: App open frequency and session duration.
• Navigation: Which screens are visited (as aggregated counts).
• Technical Data: Device type, operating system version, and app version.
• General Location: Country-level location (no precise GPS data).

Information We Do NOT Collect

To ensure your absolute privacy, we explicitly do not collect:

• Names, email addresses, or contact details.
• User accounts or login credentials.
• Any health data, session content, scenario titles, or personal notes.
• Precise GPS location data.
• Device identifiers linked to your personal identity.

3. Push Notifications

The App uses local notifications to provide reminders to complete exposure sessions if the app has not been used for several days.

• These notifications are scheduled and triggered locally by your device.
• No personal data or session history is transmitted to a server to trigger these reminders.
• You can opt-out or manage notification settings at any time through your device's system settings.

4. Data Storage and Processing

• Health Data: Stored locally on your device only and encrypted at rest. We have no access to this data.
• Analytics Data: Processed by Google Firebase in accordance with their privacy standards to provide us with performance reports.

5. Data Export and Sharing

Habituate allows you to export session data as a PDF report and share it via email or other apps at your explicit request.

• All exports are user-initiated.
• Once shared, data handling is governed by the recipient service’s privacy policy (e.g., your email provider).

6. Data Retention and Deletion

• Local Data: Remains on your device until deleted by you. Uninstalling the App deletes all local session data.
• Analytics Data: Retained by Firebase for the minimum period necessary to provide aggregate reporting.

7. Legal Compliance

GDPR

If you are located in the European Economic Area (EEA), you are the data controller of your personal health data. Our collection of anonymous technical analytics is based on our legitimate interest in maintaining a functional and stable application.

HIPAA

The App is not a covered entity or business associate under HIPAA. It does not provide medical treatment and does not transmit Protected Health Information (PHI) to third parties or our servers.

8. Third-Party Services

We use Google Firebase for app analytics. This service may use technical identifiers to aggregate data, but it does not receive your personal CBT notes or health information. Any other third-party services used during data export (such as email) are governed by their own policies.

9. Security

We use encryption for local storage and industry-standard security via Firebase for technical data. Users are responsible for securing their own devices (e.g., using a passcode or biometric lock).

10. Changes to This Policy

This Privacy Policy may be updated from time to time. Updates will be reflected in the App or app store listing.

11. Contact

If you have questions about this Privacy Policy, contact:

Email: info@corribshore.ie