The short version. Habito is a family task app run by a parent or legal guardian. A child can only use it on a device the guardian connects, after the guardian agrees to this policy. We collect only what the app needs to work, we do not sell personal information, we show no ads and do no behavioral advertising, and AI features stay off until a guardian turns them on. Guardians can see, delete, and stop the collection of their child's information at any time.
Noventis Inc. ("we", "us") operates Habito and is the controller of the personal information described in this policy. For any privacy question or request, email contact@noventis.io. We answer requests from parents within the time limits set by applicable law (for GDPR requests, within one month).
Noventis Inc., 13 Yeonnam-ro, Mapo-gu, Seoul 03990, Republic of Korea. Telephone: +82 10-7157-8412. Email: contact@noventis.io.
If you are in the European Union or the United Kingdom, you can contact us directly at contact@noventis.io about any matter relating to the processing of your personal information. You can also complain to your data protection supervisory authority (see Section 8).
| Category | Items |
|---|---|
| Guardian account | Apple/Google sign-in identifier, email, name (if provided), language setting |
| Guardian sign-up consent record | Guardian identifier, accepted notice version, acceptance time |
| Child profile | Display name (we recommend a nickname), birth year, grade system, avatar choice, language setting. We do not ask for a child's full name, email, phone number, address, or precise location |
| Activity records | Tasks, task submissions (photos, text, reading logs; photos are stored after EXIF and location data are removed), verification results, points and reward history, and task or reward suggestions made by the child |
| Emotion diary | The feelings a child picks and the short entry they write, if the guardian assigns an emotion diary task |
| AI learning content (only if a guardian allows AI) | Homework help questions, photos, and chats; writing entries and feedback; reading titles and summaries; memorization cards and progress; AI-generated insights and weekly reports |
| AI permission record | Family and guardian identifiers, notice version, permission and withdrawal status and timestamps |
| Device information | Push notification token, child device connection status |
| App usage events | Which screens were opened and a small set of key actions (for example, a task submitted), with family, child, or guardian identifiers and time. No names, photos, or free text are included |
| Subscription information | Randomly generated billing customer identifier, subscription product, status, and renewal dates, store transaction identifiers. Payment methods (such as card numbers) are handled by Apple and Google; we do not receive them |
| Website analytics (cookie-free restricted measurement) | Page URL, access time, device and browser type, approximate region, and download and app-store redirect clicks. Analytics cookies and persistent identifiers are not stored; names, email addresses, and child or family identifiers are not sent |
We collect child information from the child's use of the app and from the guardian. We do not require a child to give more information than is reasonably necessary to take part in an activity.
The GDPR and UK GDPR require us to tell you the legal basis for each use. Where we rely on consent, you can withdraw it at any time; withdrawal does not affect processing that happened before.
| Purpose | Legal basis |
|---|---|
| Guardian account, family setup, tasks, points, rewards, notifications | Performance of our contract with the guardian (Art. 6(1)(b)) |
| Processing a child's profile and activity records | Consent given by the parent or legal guardian on the child's behalf (Art. 6(1)(a) and Art. 8) |
| Emotion diary | Explicit parental consent (Art. 6(1)(a) and, to the extent the entries reveal information about a child's health, Art. 9(2)(a)). We treat emotion diary entries as potentially sensitive information |
| Optional AI features | Separate consent from a guardian on the AI permission screen (Art. 6(1)(a)). Saying no does not affect the core app |
| Subscriptions | Performance of our contract with the guardian (Art. 6(1)(b)) |
| Security, preventing abuse and fraud (for example, fake points), keeping minimal deletion records | Our legitimate interests in keeping the service safe and being able to show what we did (Art. 6(1)(f)) |
| App usage events and cookie-free website measurement to fix problems and improve the service | Our legitimate interests in understanding how the service is used (Art. 6(1)(f)). Website measurement is cookie-free and used only in aggregate. We never use either for advertising or to build profiles for marketing |
| Responding to legal requests and keeping records the law requires | Legal obligation (Art. 6(1)(c)) |
Habito is designed for families. Children use it only under the control of a parent or legal guardian. This section is also our direct notice to parents under the US Children's Online Privacy Protection Act (COPPA).
Right after signing in, and before using the service, a guardian must confirm that they are a parent or legal guardian and agree, by ticking the boxes on the consent screen, to the Terms of Service, this Privacy Policy, and the processing of their child's information. The accepted notice version and the time of acceptance are recorded on our server, and consent is requested again when the notice changes.
A child device can only join a family with a one-time connection code that the guardian issues from their own signed-in account. Until a guardian has agreed and issued a code, we collect nothing from the child.
The child information listed in Section 2 (nickname, birth year, grade system, avatar, task submissions and photos, emotion diary entries, and, only if the guardian allows AI, AI learning content). We use it only to run the family's tasks, points, and rewards, and, where allowed, to give learning help. We do not use children's information for advertising, we do not show ads, and we do not sell or share it for behavioral advertising. We do not let children make their information public or contact people outside the family.
Only the service providers in Section 5, which process it on our behalf to run the service. A guardian can agree to the core service without agreeing to disclosure to AI providers: AI features are off until a guardian allows them, and the rest of the app keeps working if they never do.
Before any AI request, a signed-in guardian sees which providers receive data, what is sent, and why, and can choose Allow AI or Later. A child who asks first is told that guardian permission is needed. Permission is recorded on the server for the family. A guardian can withdraw it in Settings at any time; this stops new AI requests and does not delete saved records (deletion is a separate action). Changes to providers or processing scope require new permission.
For each AI request we send only what that feature needs (listed in Section 5). The AI providers process it to return a result, under their own terms and policies. We do not sell this content and do not use it for advertising.
Children are reminded that a photo will be sent when they start an upload. Guardians can read their child's emotion diary entries; we encourage guardians to tell their children that they can see them.
A parent or legal guardian can, at any time: review the child's information in the app; delete the child's photos and text from Privacy Management; delete the whole account and family; disconnect the child's device; refuse further collection by disconnecting the device, removing the child, or withdrawing AI permission; and ask us by email for a copy of the child's information or for anything else. We will verify that the request comes from the child's guardian before acting.
We use the following providers to run the service. They process personal information only on our instructions under data processing terms. We rely on each provider's data processing terms and, where required, on Standard Contractual Clauses or other lawful transfer mechanisms.
| Provider | What it does / data / location |
|---|---|
| Supabase, Inc. (privacy@supabase.com) | Sign-in authentication, database, photo storage, server functions. All service data in Section 2. Stored in Japan (Tokyo region) |
| RevenueCat, Inc. (compliance@revenuecat.com) | Subscription status. Random billing customer identifier, product, status, renewal dates, store transaction identifiers; no names, emails, or child information. United States. Only if you subscribe |
| OpenRouter, Inc. (privacy@openrouter.ai) | Routes AI requests to the model provider. Only after guardian AI permission. United States |
| Google LLC (Google Vertex AI) | AI learning help, writing feedback, verification, insights and weekly reports. Text needed for the request (questions, chats, writing, emotion entries, book titles and summaries), attached photos with EXIF removed, age level calculated from birth year, grade system, language. Only after guardian AI permission. United States and other countries where Google processes data |
| TypeSafe AI, Inc. (privacy@typesafe.ai) | Reading checks. Book title and summary only, no photo and no identifiers. Only after guardian AI permission. United States |
| Apple Inc. (Apple Push Notification service) and Google LLC (Firebase Cloud Messaging) | Delivering notifications. Push token and notification text. United States and other countries |
| Google LLC (Google Analytics) | Cookie-free website measurement (Section 2). Event-level data kept up to two months. United States and other countries. Website only, not the app |
| Vercel Inc. | Hosts this website. Standard web request data such as IP address and browser type. United States and other countries |
Sign-in with Apple and Google Sign-In are provided by Apple and Google under their own privacy policies.
International transfers. Service data is stored in Japan (Supabase Tokyo region). It is also processed by the providers above in the United States and other countries, and accessed by Noventis from the Republic of Korea. Where a country has an adequacy decision from the European Commission or the UK (as Japan and the Republic of Korea do), we rely on it. Otherwise, we rely on Standard Contractual Clauses (and the UK International Data Transfer Addendum) or other safeguards in our providers' data processing terms. You can ask us for information about these safeguards.
Provider policies: Supabase · RevenueCat · OpenRouter · Google Cloud · TypeSafe.
We do not sell personal information and do not share it for cross-context behavioral advertising. We disclose personal information only to the service providers above, when required by law, or to protect the safety of a child or others. If Noventis is involved in a merger or acquisition, we will notify guardians before their information becomes subject to a different privacy policy.
We keep personal information only as long as needed for the purpose it was collected for, then delete it.
| Data | How long |
|---|---|
| Submission photos (originals) | Deleted automatically 30 days after upload |
| Account, family, child profiles, tasks, points, rewards, writing, reading, memorization, emotion diary, AI learning content, consent records | Until the guardian deletes them or deletes the account |
| App usage events and AI usage records | Up to 24 months, and deleted earlier if the account is deleted |
| Deleting a child's content (Privacy Management) | Photos and text are deleted right away; point totals and summary records are kept while the account exists |
| Removing a child from the family | The child is hidden from the family and the child's device is disconnected. The child's records are kept until the guardian deletes the account, which deletes them. To have them deleted sooner, email contact@noventis.io and we will delete them within 30 days |
| Account deletion by the only guardian | The whole family is deleted at once, including child profiles, submissions, photos, points, device connections, and notification tokens. We keep only a record of the deletion time and scope with the deleted family's random identifier, which contains no personal information about the child or guardian. This record is kept for up to 3 years |
| Account deletion when other guardians remain | Your guardian account is deleted; family data stays with the remaining guardians, and your past actions in it are no longer linked to you |
| Backups | Short-term database backups are overwritten within days |
| Subscription records | When you delete your account, we delete our copy. Records held by our subscription processor (RevenueCat) and by Apple or Google may be kept by them as required for billing, tax, and legal purposes |
| Website analytics | Event-level data up to two months; aggregated reports may be kept longer |
| Website hosting logs | Short term, up to 30 days |
Depending on where you live, you have the right to: access your personal information and get a copy; correct it; erase it; restrict its processing; receive it in a portable format; object to processing based on legitimate interests; and withdraw consent at any time. A parent or legal guardian can exercise these rights for their child.
Most of this you can do in the app (view, edit, delete content, delete the account, withdraw AI permission). For a copy of your data or anything else, email contact@noventis.io. We may ask you to confirm your identity.
You also have the right to complain to a data protection supervisory authority, in the EU usually the one where you live or work, and in the UK the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to help first.
We do not make decisions with legal or similarly significant effects based solely on automated processing. AI checks of task submissions are advisory: a child can ask their guardian to look again, and the guardian makes the final decision.
Settings that affect children start at the most private option: AI features are off until a guardian allows them, the app does not request location access, there are no ads, and there are no public profiles and no way to chat with people outside the family.
We protect personal information with safeguards suited to the sensitivity of children's information, including encryption in transit (HTTPS/TLS), database row-level access rules so each family can only reach its own data, private photo storage with short-lived access links, removal of photo location data, and access controls that limit administrative access to authorized staff on a least-privilege basis. No system is perfectly secure; if a breach affects your information, we will notify you and the authorities as the law requires.
We will post changes on this page and update the effective date. If a change affects how we collect, use, or disclose children's information, we will ask guardians for consent again in the app before it applies.
Noventis privacy team: contact@noventis.io. Postal address and telephone: see Section 1.