Privacy Policy

Habit data you enter: the habits you track, their schedules, check-ins, streaks, notes, and freezes.

Account information: email address, optional display name, and a hashed password. If you sign in with Apple or Google, we receive a stable identifier and the email you choose to share.

Device and diagnostic information: app version, device model, OS version, language, timezone, anonymous crash reports, and basic interaction events (which screens are used, button taps) to find bugs and improve features. We do NOT collect precise location, contacts, photos, or microphone data.

To run the service: store and sync your habits across your devices, send reminders you've enabled, and let you sign in to your account.

To improve the app: aggregate, anonymized analytics show which features people use and where they get stuck. We do not profile individual users for advertising.

To keep the service safe: detect abuse, debug crashes, and protect against unauthorized access.

We do not sell or rent your personal data. We share limited data with carefully selected processors who help us run the service (hosting, crash reporting, analytics, email delivery, payments). Each processor is bound by a written agreement to use the data only for the service.

We may disclose data if required by valid legal process or to protect rights, safety, and property. We will push back on overbroad requests where lawful.

We keep your habit data and account information while your account is active and for up to 30 days after deletion to allow recovery from accidental loss. After that, your data is permanently deleted from production systems; backups are purged on their own rolling schedule (no longer than 90 days).

Anonymous analytics events are retained for up to 24 months in aggregate form.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to certain processing, and to withdraw consent. You can do most of this directly in the app's settings. For anything else, contact privacy@mobo.app.

If you are in the EU/EEA or UK, our lawful bases for processing are: performance of the Terms of Service contract, your consent (for optional features), and our legitimate interests in operating and securing the service.

The mobile app does not use cookies. Our marketing website uses minimal, first-party cookies only — strictly necessary for the site to function. We do not load third-party advertising trackers.

Mobo is not intended for children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided data to us, contact privacy@mobo.app and we will delete it.

Mobo is operated from servers in the United States and the European Union. If you use the app from outside these regions, your data may be transferred to and processed in either location, with safeguards in place (Standard Contractual Clauses where applicable) to protect it.

Data in transit is encrypted via TLS. Data at rest is encrypted on disk in our hosting provider's storage. Account passwords are stored only as salted hashes. No service can guarantee perfect security; we follow industry-standard practices and disclose serious incidents promptly.

We may update this Privacy Policy as the service evolves. We will flag material changes in-app or by email before they take effect. The "Last updated" date above always reflects the most recent revision.

Questions, requests, or concerns about your data: privacy@mobo.app.