Privacy policy
Last updated: 13 October 2026
HabitCrab helps you scroll less and live healthier, together with your friends. To do that, we need some of your data, including health data. We handle it with care and collect no more than we need. This policy explains which data we process, why, and what rights you have.
Who we are
HabitCrab is a product of Totem Traffic [LEGAL FORM, e.g. B.V.], registered with the Dutch Chamber of Commerce under number [COC NUMBER], located at [ADDRESS], the Netherlands. We are the controller of the data described in this policy.
Questions about privacy? Email privacy@habitcrab.com.
In short
- Your friends only see your crab: how healthy it is, its mood, your attributes and which goals you reached today. Never your screen time per app, your steps or your sleep data.
- We only use health data from Apple Health with your explicit consent, and only to calculate your progress and your crab.
- We do not sell your data and never use health data for advertising.
- You can delete your account and all your data from within the app at any time.
What data do we process?
In the app
| Data | Purpose | Legal basis |
|---|---|---|
| Account: name, email address or Apple ID details via Sign in with Apple | Creating and securing your account | Performance of a contract |
| Your crab: name, colour, shell, claws, legs, mood, attributes | Making the app work and showing your crab to friends | Performance of a contract |
| Your goals and progress, and your crab’s calculated health | Tracking your progress and letting your crab respond | Performance of a contract |
| Health data from Apple Health: steps, workouts, exercise minutes and sleep | Determining whether you reach your goals | Explicit consent |
| Screen time: in the first version the minutes you enter yourself; later only whether you stayed under your daily limit (see below) | Determining whether you reach your scrolling goal | Explicit consent |
| Goals you tick off yourself, such as eating healthily | Tracking your progress | Performance of a contract |
| Friends, invites and seaweed snacks | The app’s social features | Performance of a contract |
| Push notification token | Sending you notifications, for example when a friend sends you a snack | Performance of a contract |
| Usage data, such as whether you completed onboarding and how often you open the app, and crash reports | Improving the app and fixing bugs | Legitimate interest [CHECK] |
| Subscription status (no payment details; those stay with Apple) | Giving access to paid features | Performance of a contract |
About your screen time
When HabitCrab measures your screen time automatically, we use Apple’s Screen Time feature. Detailed usage per app stays on your iPhone. HabitCrab only receives whether you reached certain thresholds, such as “daily limit reached”. Until that feature is available, you enter your screen time yourself.
On this website
| Data | Purpose | Legal basis |
|---|---|---|
| Email address and language when you join the waitlist or newsletter | Emailing you about HabitCrab | Consent |
| Technical data such as IP address and browser (at our hosting provider) | Keeping the website secure and available | Legitimate interest |
Health data
Data about your steps, workouts and sleep is health data, which the law gives extra protection. We therefore only process it if you give explicit consent. You do this in the app, separately from this policy, and through Apple’s permission prompt.
- We only read the data needed for the goals you choose.
- We store the daily values needed to calculate your progress, such as your step count. Only you can see them.
- We never use data from Apple Health for advertising and never sell it.
- You can withdraw your consent at any time: on your iPhone via Settings › Privacy & Security › Health › HabitCrab, or by deleting your account. Goals that need health data will then stop working.
HabitCrab is not a medical device and does not give medical advice.
What do your friends see?
Only people you add as a friend yourself can see your crab. They see your crab’s name and appearance, its health and mood, your attributes and which goals you did or did not reach today. They do not see how much you scrolled, how many steps you took or how long you slept. You can remove or block a friend at any time.
Who do we share data with?
We use a number of service providers. We have made agreements with them about protecting your data [CONCLUDE AND CHECK DATA PROCESSING AGREEMENTS].
| Party | Role |
|---|---|
| Supabase | The app’s database and accounts, stored within the European Union [CONFIRM REGION] |
| Apple | Sign in with Apple, push notifications, App Store and subscriptions |
| Cloudflare | Hosting and security of this website |
| Brevo | Sending emails to the waitlist |
| [LATER: RevenueCat] | Managing subscriptions |
| [LATER: crash reporting service] | Finding bugs in the app |
Some of these parties are based outside the European Economic Area or have a parent company there. Where data may leave the EEA as a result, we ensure appropriate safeguards, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework [CHECK PER PARTY].
We do not sell your data. We only share it with others if the law requires us to.
How long do we keep your data?
- Account data, crab, goals and progress: for as long as you have an account. If you delete your account, we erase this data within [30] days, including backups within [90] days.
- Waitlist and newsletter: until you unsubscribe. Every email contains an unsubscribe link.
- Technical website data: as briefly as possible, in line with our hosting provider’s standard periods [CHECK].
- Usage data and crash reports: at most [14 months].
Cookies
This website does not use advertising or tracking cookies. Our hosting provider Cloudflare may set a functional cookie to protect the site against abuse; no consent is needed for that. If we start using analytics cookies or an advertising pixel in the future, we will ask for your consent first and update this policy.
Minimum age
HabitCrab is intended for people aged 16 and over. If you are younger, please do not use the app.
Security
We protect your data with appropriate technical and organisational measures. Connections are encrypted, and the database is set up so that every user can only access their own data, and friends can only see the crab.
Your rights
You have the right to access your data, have it corrected or deleted, restrict its processing, object, and receive your data in a common format. You can withdraw your consent at any time; this applies from that moment on.
You can delete your account in the app via Settings › Delete account. For the other rights, email privacy@habitcrab.com. We respond within one month.
Not happy with how we handle your data? You can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. We would of course like to hear from you first.
Changes
We may update this policy, for example when the app gets new features. We will let you know in the app about important changes. The date at the top shows when the text was last updated.