Privacy Policy

Last updated: 13 September 2026

This policy explains what Habitoxy collects, why, where it is kept, and what you can do about it. It describes the service as it actually works today. If something here stops being true, this page changes with it.

Habitoxy is operated by Lifeplanner ("we", "us"). You can reach us at Lifeplanneros@gmail.com for anything in this policy.

1. What we collect

a. When you buy

On our sales page we ask for your name, your WhatsApp number (with its country code) and your email address. We also record the plan you selected, a reference code that ties your payment to your request, and a referral code if you entered one or arrived through someone's referral link.

If you arrived through a campaign link, we record where you came from (the utm_source, utm_medium and utm_campaign values in the link).

If you pay online, the payment is handled by Razorpay in its own checkout window. Your card, bank or UPI details are entered there and go to Razorpay, not to us — we never see or store them. Razorpay tells us whether the payment succeeded, the amount, and a payment ID, and we keep those as the record of your purchase.

If you pay directly by UPI instead and upload a payment screenshot, we store that image so we can verify your payment before we give you access.

b. When you use the app

Your account is identified by your email address. When you first open the app you set up your account: your name, phone number, city, a username, and a password you choose. Inside the app, you create the content: your habits and daily ticks, tasks, money entries, journal entries, logged problems, your profile and avatar. We store this so it is there when you sign in again, on any device.

If you refer someone who buys, we record that referral — who referred whom, which purchase it was, and what it earned — so we can pay you.

c. What other people can see

Some parts of Habitoxy are deliberately public to other users:

The leaderboard shows your profile name and your score.
Your public profile, and anything you post in the feed or in clubs, is visible to other signed-in users.

Your habits, tasks, money entries, journal and problems are never shown to other users. Only the score derived from them appears on the leaderboard.

d. Automatically

Our sales page uses Google Analytics, which records anonymous usage — pages viewed, buttons pressed, and general location and device type. It does not receive your name, email or phone number. Our servers, like all web servers, also see your IP address when you load a page.

2. Why we use it

To give you access. Your email identifies your account and the plan attached to it.
To verify payment. The payment record from Razorpay, or your screenshot if you paid directly by UPI, is how we know a purchase is genuine.
To deliver a pass, if you paid directly by UPI. We send it to the WhatsApp number you gave us. Online payments need no pass — access is switched on automatically.
To run the product. Your habits and entries are stored so the app can show them back to you and compute your monthly grade.
To pay referral earnings. We use your phone number to send them by UPI.
To support you. We may contact you about your purchase, your plan's expiry, or a problem with your account.
To understand what works. Anonymous analytics tells us which pages people read and where they stop.

We do not sell your data. We do not share it with advertisers. We do not send marketing messages to people who have not asked to buy.

3. Where it is kept, and who else touches it

We do not run our own servers. Habitoxy is built on services that store data on our behalf:

Razorpay — processes online payments. Your card, bank or UPI details go to Razorpay and are handled under its own privacy policy; we receive only the result.
Google Firebase (Authentication, Firestore, Cloud Functions, Hosting) — your account, your app data, your purchase record, and this website. Operated by Google.
Cloudinary — payment screenshots and images uploaded in the app.
Google Analytics — anonymous usage of our sales page.
Google Fonts — our pages load fonts from Google's servers, which means Google sees your IP address when a page loads.
WhatsApp (Meta) — used if you paid directly by UPI (we send your pass there), and whenever you message us for support.

These providers may store data outside India. Each has its own privacy terms, and we choose them on that basis.

A copy of your app data is also kept in your browser's local storage on your own device, so the app works offline and opens quickly. Clearing your browser data removes that copy; your account data stays on the server.

4. Security, honestly stated

Access to your data is controlled by database rules: your habits, entries and journal can be read by your account and by nobody else's. Data travels over HTTPS.

Two things you should know rather than assume:

If you paid online, you choose your own password when you first set up the app, and it is never sent to you or to us by message. If you paid directly by UPI, your pass is an image that contains a temporary password and it travels over WhatsApp — please change that password the first time you sign in, and do not forward the pass image to anyone.
No service can promise perfect security, and we are not going to. If we ever become aware of a breach affecting your data, we will tell you.

5. How long we keep it

Your app data — while your account exists, and for 90 days after it expires, so a returning user does not lose their history.
Payment records, payment screenshots, pass and referral records — up to 8 years, because they are financial records.
Requests that never became a purchase — up to 12 months, then deleted.

6. Your rights

Under India's Digital Personal Data Protection Act, 2023, you can:

See what we hold. Ask us, and we will tell you.
Export it yourself. Settings → Backup exports your entire app data as a JSON file, any time, without asking us.
Correct it. Most of it you can edit in the app directly; for the rest, write to us.
Have it deleted. Email us and we will delete your account and its data. Financial records we are required to keep are the exception, and we will say so.
Withdraw consent. You can stop using the service and ask for deletion at any time.
Complain. If we have not resolved something, you may approach the Data Protection Board of India.

Write to Lifeplanneros@gmail.com for any of these. We aim to respond within 7 working days.

7. Age

Habitoxy is intended for people aged 18 and over, and we do not knowingly collect data from children. If you believe a child has given us data, tell us and we will delete it.

8. Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and, where the change is significant, tell existing users directly.

9. Contact

Lifeplanner
Lifeplanneros@gmail.com
Mansarovar, Jaipur, Rajasthan, India