Privacy Policy

Last updated: November 5, 2026
Operated by: Michael-Anthony Paolozza, 3088 Rue Labelle, Vaudreuil-Dorion, J7V 8J1, Quebec, Canada ("we," "us," "habitude")
Privacy Officer: Michael-Anthony Paolozza, reachable at support@habitude.my

This policy covers your Habitude account and the Habitude apps, all at www.habitude.my with one sign-in: Habitude Chores, and Habitude Fitness with its two parts, MacroTrack (nutrition) and Training. They are built on one simple rule: we collect the minimum needed to run them, we never sell or share it, your children's activity data never leaves your family, and your food and training logs are yours. This policy explains exactly what that means in practice.

1. What we collect, and why

Your Habitude account (shared by every App)

Data	Why we need it
Email address	To create your login, send account verification, password-reset and purchase emails, and as the identifier our payment processor uses for your receipt.
Password (stored as a one-way hash, never in plain text)	To let you sign in. We cannot see or recover your actual password.
Which Apps and parts you have, and how (bought, included free, given by us)	To open the right Apps for you and show your purchases.
Purchases: what you bought, amount, date, status, and the payment processor's reference numbers	To unlock what you paid for, handle refunds, and keep the records tax law requires.
Referral code you signed up with (if any)	To credit the person who referred you. They don't receive your name, email or app data.
Where you came from before signing up: the site or app that linked to us (for example "instagram" or "google"), or the name of the campaign link you followed, the page you arrived on, and whether you came through the free plan quiz	To learn which of our posts and ads bring people who find the Apps useful, so we spend on what works. It's never used to show you ads or shared with anyone.
Date you accepted these terms	Proof of consent.
Your language (English or French)	To show the account pages and Apps, and send you emails, in the language you chose.

The waitlist (before sign-ups open)

Data	Why we need it
Email address, your language, and when and how you agreed to hear from us (the exact wording you ticked)	To email you when Habitude Fitness opens, as you asked, and to show that you asked. We don't use it for anything else.
Where you came from (as for an account, above) and whether you'd done the free plan quiz	To learn which posts and ads bring people, so we spend on what works.

Habitude Chores — about you (the Parent)

You sign in to Habitude Chores with your Habitude account. The first time you open it, we create your family and link it to your account.

Data	Why we need it
The link between your Habitude account (and its email) and your family	So your sign-in opens your family, and only yours.
Family name (optional)	Displayed in the App if you choose to set one.
A parent PIN you set (stored as a one-way hash)	To protect Parent mode on a family device your kids use (Section 5).

Habitude Chores — about your Kids

Data	Why we need it
First name	Displayed in the Kid's own view and the Parent review queue.
A PIN you set (stored as a one-way hash)	Lets a child open their own profile on a family device. This is a convenience, not a security credential — see Terms of Service, Section 15.
Chore completions, ratings, notes, savings goals, badges, ledger entries	The actual function of the App — tracking what was done and what's owed.

We do not collect a Kid's email address, birthdate, school, location, or any other identifying detail. A Kid profile exists only inside your family and cannot be created, viewed, or signed into independently of a Parent.

Product links for savings goals. If you paste a link to a product when creating a goal, our server visits that page to fill in the product's name, price and picture, and keeps the picture with the goal. The shop sees a visit from our server, not from your device, and receives nothing about you or your child.

Habitude Fitness — Training

Data	Why we need it
Your training profile: goal, experience, how well you recover, your age (or age group), days and time available, equipment, body areas to avoid or go easy on, exercises you don't want, muscles to focus on, cardio preference	To build a program that fits you and steers around the areas you flagged.
Your programs and training log: workouts, exercises, sets, weights and reps, effort (if you turn on advanced mode), cardio time, distance and effort, how sessions felt, joint pain you flag, personal records, exercises you add yourself	The actual function of the App — your log, your progress and your next workouts.
How each finished workout compared with your last 30 days	The end-of-workout message, and offering an easier week when your workouts suggest you need one.
Settings: units, rest times, advanced mode, theme, the days of the week you train, and your device's time zone	To run the App the way you set it up, and to put your workouts on your training days.
Notifications, if you turn them on: an address your browser gives us for each device, and the end time of a rest in progress	To alert you when a rest ends, even with your screen locked. Each rest's end time is deleted as soon as the alert is sent.
Reminders, if you choose them: which ones (workout days, a meal reminder in the evening, a Sunday summary), the time for the workout one, and a record of which reminders were sent on which day	To send each reminder at your local time, and only once a day. The record of reminders sent is deleted after a month.

Habitude Fitness — MacroTrack (nutrition)

Data	Why we need it
Your meals: date and time, name, meal type, calories and macros; for meals built from foods, the foods, amounts and nutrient totals	The actual function of the App — your food log and daily totals.
Your body details, if you enter them: sex, year of birth, height, activity level, goal, target weight and pace; your weigh-ins; and, if you add it, your body fat percentage (a number you give, worked out from tape measurements you enter, or estimated by an AI assistant you choose)	To suggest calorie and macro targets, estimate when you might reach your target, and check every two weeks whether your weight is moving the way your goal needs.
Check-ins, if you answer them: how your energy, hunger, sleep, workouts and mood have been, any warning signs you tick, and the adjustment suggested	To suggest a change to your targets when something's off, and to recommend seeing a health professional if you report warning signs.
Your targets and settings: calorie budget, macro split, alert threshold, week start, theme, whether you track calories and protein or every macro	To compare your day with the targets you chose.
Progress: badges earned, vacation dates, the daily motivation cards you were shown	Streaks, badges, vacation mode and the daily card.
Meal photos, with MacroTrack+: when you sent each photo for an estimate, whether it showed food, and how much processing it used. Not the photo itself.	To apply the daily photo limit and keep track of what the feature costs to run. The estimate becomes part of your food log only if you save the meal.
Weekly reviews, with MacroTrack+: the review written about each week, and whether you've read it	To show you how your week went and one thing to try next.

The two parts work together. If you have both, Habitude Fitness uses your training plan to suggest your calorie and macro targets, and your recent eating to explain how a workout went (for example, low fuel or low protein). This stays inside Habitude Fitness and your account.

Suggestions, not decisions. Your program and your calorie and macro targets are calculated automatically from what you enter, using published formulas and training guidelines. They are suggestions you can change at any time, not decisions made about you. Ask us and we'll explain how they are calculated.

Your training log and food log are health-related information, so we treat them as sensitive: used only to run Habitude Fitness for you, never shared, never used for advertising or to train AI, and our support staff see only activity counts, not what you ate, lifted or weigh (Section 3). We ask for your express consent separately for each part, the first time you open it, before anything is saved. You can withdraw either consent at any time in Habitude Fitness's Settings:

withdrawing training-log consent deletes your programs, training log, records and training profile;
withdrawing food-log consent deletes your food log, body details, weigh-ins, check-ins, weekly reviews and the record of meal photos you sent.

We then ask again before you log anything new in that part.

Photos. MacroTrack's photo shortcuts (for a meal, or a front and a side photo for a body fat estimate) copy a text prompt: you send your photos to an AI assistant you choose, under that service's own privacy policy, and paste back only its text answer. We never receive those photos.

MacroTrack+: meal photos. If you have MacroTrack+ (including its free preview) and take or pick a photo in the meal form, that photo, with any note you add, is sent through our server to Anthropic (the maker of the Claude AI model) to estimate the foods, portions, calories and macros. Only the photo, your note and your language are sent, never your name, email address, food log or other data. You choose each photo you send, and the app says that it goes to Anthropic before you take it. We don't store the photo: it is discarded once the estimate comes back, and only the estimate is shown to you, to correct or save as a meal. Anthropic processes the photo on our behalf, to return the estimate, under its commercial terms, which don't allow it to use the photo to train its models; it keeps it only for the limited time its own privacy policy describes. Don't photograph anything other than your meal, such as faces or documents.

MacroTrack+: weekly review. If you have MacroTrack+ (including its free preview), the first time you open the food log in a new week, our server sends Anthropic a summary of your previous week so it can write your review: each day's calories, protein and number of meals, your calorie and protein targets, your weigh-ins from the last four weeks, your goal and target weight, and, if you also use Training, how many workouts you planned, did and skipped. It never includes your name, email address, meal names or photos. Anthropic processes it on our behalf, under the same terms as meal photos (above). We keep the review it writes with your food log.

Payment data. When you buy an App, Stripe, our payment processor, collects your card details directly — we never see or store your card number. We receive back from Stripe only reference numbers for the checkout and payment, used to unlock your purchase and to handle refunds, and your card's brand and last 4 digits, so our emails and your account page can say which card will be charged. When you subscribe, we keep a record of what you agreed to at checkout (the text shown, the price, the billing date and the date you agreed) and of the subscription emails we sent you, as proof in case of a billing dispute; these are deleted with your account. To allow one free trial per card, we also keep a one-way code derived from Stripe's identifier for the card: it can't be turned back into the card number, isn't linked to your account, and is kept after your account is deleted.

Technical information. Like any website, our servers see your IP address when you connect. We use it briefly to limit repeated sign-in and PIN attempts and to keep the Services secure; it is not stored with your data, and our servers' technical logs are kept only for a short time.

What we deliberately do not collect:

No advertising identifiers, no third-party ad trackers, no analytics pixels that build a profile of you or your child across other sites or apps.
No location data.
No browsing history outside the Apps themselves.
No food or body photos kept: a meal photo sent for an estimate (MacroTrack+) isn't stored.
No sale of data — we have nothing to sell, and wouldn't if we did.

2. How we use what we collect

Strictly to:

Operate your account and the features of the Apps you use;
Send you account-related email (verification, password reset, purchase confirmations, and, if you opt in, product updates). If you subscribe, we may also send you occasional offers about your own subscription, such as moving up to MacroTrack+ after its preview; every offer email has a one-click link to stop them;
Process purchases and refunds, and calculate referral commissions;
Protect the Services from abuse (for example sign-up verification and limits on repeated attempts);
Diagnose and fix bugs, using only what's necessary and never combined with an outside profile of you.

We do not use your data, or your child's data, to train any AI model, to build an advertising profile, or for any purpose beyond running the Services for you.

3. Who can see it

You — full access to your own data, always. In Habitude Chores, the Parent sees the family's data and each Kid sees their own view.
Habitude staff (the operator and any administrator we appoint) — your account details (email, Apps, purchases, referral code) to provide support. For the Apps, the admin tools show only activity counts (such as number of meals or workouts logged and last active date), not the content of your food log, training log or family. Technical access to the databases is used only as needed to operate and secure the Services or to act on a specific request from you; we do not browse your data out of curiosity.
Stripe — your email and payment details, governed by Stripe's own privacy policy.
Our service providers — a hosting provider (servers and databases), an email delivery provider (account and purchase emails), and a bot check on the sign-up page that looks at your browser to confirm you're a person. They process data on our behalf, strictly to provide their service, and have no independent right to use it. We'll give you the name of any of them on request.
Your browser's push service — only if you turn on notifications in Habitude Fitness (rest alerts and reminders). Our server sends each notification through the push service of your browser's maker. The message is encrypted so the push service can't read it, but it does see that a notification was sent to your device and when.
Anthropic — only if you have MacroTrack+: the meal photos you send for an estimate, with any note you add, and the summary of your week for your weekly review, as described in Section 1. Anthropic processes them on our behalf, to return the estimate or the review, and has no right to use them for its own purposes.
Nobody else. We do not sell, rent, or share your data with advertisers, data brokers, or any other third party.

4. Where your data lives

Your data is stored in databases we operate on servers located in the United States, which means it is stored outside Quebec and Canada. We assessed this before choosing where to host it, and the protections in Section 9 apply wherever it is stored. Meal photos and weekly summaries sent for MacroTrack+ are processed by Anthropic, also in the United States.

5. Cookies and data stored on your device

Sign-in cookie — keeps you signed in to every Habitude app at www.habitude.my for up to 30 days. Strictly necessary; the Services don't work without it.
Habitude Chores session cookie — remembers whether the Parent or which Kid is using Chores on this device. Strictly necessary.
Family device cookie — set only when a Parent turns on "Let my kids sign in on this device". It lets your Kids sign in with their PIN on that device, and asks for the parent PIN before Parent mode. It lasts up to a year, until the Parent turns it off.
On your device only — small preferences such as your language, the app theme, which app you last opened (so www.habitude.my opens it for you), the meal-entry mode you used last, sound on or off, and (in Habitude Chores) a Kid's accent color and which badges they've seen. Habitude Fitness also keeps a copy of its own program files on your device so it opens quickly.
Where you came from — when you arrive on our home, pricing, sign-up or free plan quiz page from another site or a campaign link, your browser keeps a note of that source for 30 days (stored on your device, not a cookie). It's sent to us only if you sign up, and is then kept with your account (Section 1). We also add 1 to a daily count of visits for that source, page and kind of device (phone, tablet or computer); that count holds no IP address, browser details or identifier, so it can't be linked to you.
Free plan quiz — if you answer the questions at www.habitude.my/fitness/start before signing up (your goal, sex, age, height, weight, goal weight, everyday activity, where and when you'd train, and anything that hurts), the answers are sent to us only to work out your plan and show it to you; they aren't saved or logged on our side. Your browser keeps them on your device for up to 30 days so that, if you sign up, Habitude Fitness can start from them. The App saves them to your account only after you agree to it keeping your training log or food log (Section 1), and removes them from your device once setup is done. We also count, per day and kind of device, how many people start the quiz, see their plan and go on to sign up; those counts hold no identifier.
No advertising or analytics cookies.

6. How long we keep it

We keep your data for as long as your account is active, except:

a rest's end time is deleted once its alert is sent, and a device's notification address is deleted when you turn notifications off or your browser stops accepting them;
the record of which reminders were sent is deleted after a month;
a meal photo sent for an estimate isn't stored by us at all (Section 1);
withdrawing a Habitude Fitness consent deletes that part's data right away (Section 1);
deleting a Kid profile deletes that Kid's data;
a waitlist email is deleted within 3 months of the opening email, or as soon as you ask (unsubscribe link or email us); if you create an account, the account takes over.

When you delete your account (Section 7), we erase your account and your data in every App right away, including your Habitude Chores family and your Kids' data, and it disappears from our backups within 30 days. Purchase records are kept, without your email address, where tax or accounting law requires it; Stripe keeps its own transaction records.

7. Your rights

You can, at any time:

Download your data — from Account & data in your Habitude account (one file with your account and your data from every App, including your Habitude Chores family), or by emailing support@habitude.my;
Delete your account and all associated data — from Account & data, or by emailing support@habitude.my;
Correct any inaccurate data directly in the Apps (meals, workouts, body details, chore names, kid names, etc.) or by contacting us;
Withdraw a consent you gave (Section 1);
Ask how your program or targets were calculated.

As a Quebec-operated business, we are subject to Quebec's Law 25 (Act respecting the protection of personal information in the private sector), which gives you the rights above, the right to be told when a decision about you is made solely by automated processing (habitude makes none — its programs and targets are suggestions you control), and the right to lodge a complaint with the Commission d'accès à l'information (CAI) if you believe we've mishandled your data. If you are in another Canadian province, PIPEDA applies to us in parallel. If you are in the EU/UK, GDPR rights apply; in a US state with its own privacy law (e.g., California's CCPA), that law's rights apply.

8. Children's privacy (COPPA and similar laws)

Habitude accounts are for adults (18+). Habitude Fitness is not intended for children.

Habitude Chores is designed around a specific model: a Kid profile is not an independent account. It is created by a Parent, inside the Parent's family. A Kid cannot sign up, cannot sign in except on a device the Parent has made a family device, and cannot be contacted by us directly — we don't collect a Kid's email, so we have no way to contact them even if we wanted to. We collect only a first name and app-usage data (chores, goals, badges) necessary for the App's core function, entered and controlled by the Parent.

9. Security

We use industry-standard practices to protect your data:

passwords and PINs are hashed, not stored in plain text;
connections are encrypted in transit, and sign-in cookies are sent only over encrypted connections;
email addresses are verified before an account can be used, and sign-ups are checked for bots;
repeated sign-in and PIN attempts are limited;
Kids can sign in only on a family device, and Parent mode there needs the parent PIN;
our databases are not reachable from the internet, and staff use a separate sign-in from customers.

No system is perfectly secure, and we cannot guarantee absolute security, but a security incident affecting your data would be disclosed to you as required by applicable law.

10. Changes to this policy

We will update the "Last updated" date above when this policy changes, and for material changes, make reasonable efforts to notify active accounts by email before the change takes effect.

11. Contact

Questions about this policy or a request under Section 7: support@habitude.my

← Back to Habitude