Privacy Policy

Last updated: 5 October 2026

This policy explains what Habit Aquarium does with your information. The short version comes first; the rest gives the detail.

Who we are

Habit Aquarium is made by Lone Astronaut Studios, the trading name of Facundo Iraola Dopazo, based in Uruguay. We decide how the information described here is used, which makes us its controller. You can reach us at support@loneastronautstudios.com.

This policy covers Habit Aquarium and any other app of ours that links to this page. They all work the same way. If you use more than one of them with the same account, each app's data is kept apart from the others'.

What stays on your phone

The app keeps these on your phone:

• your habits: what you call them, whether you are building or quitting them, how often they repeat, the routine or habit each one follows, and the time of its reminder;
• your fish: the species you picked and the name you gave each one;
• your tanks: their names and looks;
• the days you fed each fish;
• your settings, such as the evening roundup.

Reminders are scheduled by your phone itself. We send no notifications from our servers, and your phone is never registered with us to receive them. The home-screen widget reads the same data, on the same phone.

Until you sign in, none of this leaves your phone. The one exception is your phone's own backup: if your iPhone backs up to iCloud, that backup includes the app's data. It is kept by Apple for you, and we can't read it.

A habit's name, a routine, a fish's name and a tank's name are free text: whatever you type. Some of it may say something about your health or your life, like "No smoking". We never ask for health information, and we treat everything you type as personal.

If you sign in

You can sign in with Apple, with Google, or with your email address. Doing so creates an account with our backend, and from then on:

What your account holds

• Your email address. If you signed in with Apple and chose to hide your email, it is the private address Apple gives us instead.
• How you signed in, an identifier for your account, and when it was created and last used.
• If you sign in with Google, Google may also send your name and the address of your profile picture. Our sign-in service stores what Google sends with your account. We don't use it or show it. The part of the app that signs in with Google is Google's own software, and while you sign in with it, Google may collect other information, such as your phone number, your approximate location, identifiers of your device and how you use its sign-in, under Google's privacy policy. None of that reaches us.
• If you sign in with your email address, we email you a six-digit code. That email is sent through Resend, which receives your address and the code to deliver it.

What is copied to our backend

Your habits, fish, tanks and fed days, as listed above, so that they are backed up and the same on every phone you sign in on. Your phone's settings are not copied.

When you delete a habit or a tank in the app, our copy is marked as deleted and disappears from all your phones, but it keeps what it held until you delete your account. That is how your other phones learn that it was deleted.

Security records

Each time you sign in or ask for a code, our sign-in service records it with your email address and your IP address. Those records are deleted with your account. Our backend provider also keeps technical logs of requests, which include IP addresses, for up to seven days.

Why, and where

We use this information to back up your data and keep your phones in step, which is the service you ask for by signing in, and to keep that service secure and working. Under the EU's General Data Protection Regulation (GDPR), the first is necessary to provide a service you requested, and the second is our legitimate interest in a service that is safe to use. Our backend is hosted by Supabase on servers in the United States.

Signing out stops the backup on that phone. What is on the phone stays there, and our copy stays until you delete your account.

Premium and purchases

Premium is bought from Apple, through the App Store. Apple handles the payment, and we never see your card or payment details.

To know whether you have Premium, the app uses a service called RevenueCat. The app sends it a random identifier it creates for this purpose, Apple's record of your purchases and, once you have signed in, your account's identifier (never your email address). RevenueCat tells the app and our backend whether your subscription is active. We use this to give you what you paid for, and to see how many people subscribe.

App updates

Some updates to the app, like a new fish each month, are delivered by Expo, the platform the app is built on. When the app checks for an update, Expo receives the request with your IP address, the app's version and a random identifier for this installation of the app. That identifier is not linked to your account. If the app closed because of an error the last time it ran, the next check also sends Expo that error's message, so that a faulty update can be rolled back. The message describes the app's own code, not you or your habits.

What we don't do

• No advertising, no advertising identifiers, and no tracking of you across other companies' apps or websites.
• No analytics in the app, and no crash reporting beyond the error message of an update check described above. If you chose in your iPhone's settings to share analytics with app developers, Apple may give us crash reports and overall figures about the app. That is Apple's feature, under Apple's privacy policy.
• We don't sell your personal information, and we don't share it for advertising.
• Your habits are used for one thing: keeping your copy. We look at data in our backend only to maintain or fix the service, to answer a request from you, or when the law requires it.

Who else handles your information

These companies process information for us, as our service providers:

• Supabase, Inc. (United States) hosts our backend: the database and the sign-in service. It holds the account and the copied data of everyone who signs in, and the technical logs.
• Resend, Inc. (United States) sends the sign-in code. It receives your email address and the code.
• Cloudflare, Inc. (United States) forwards the emails you send to our support address to our mailbox. It receives your email address and your message.
• RevenueCat, Inc. (United States) keeps track of subscriptions. It receives the identifiers and purchase records described above.
• 650 Industries, Inc., known as Expo (United States), delivers app updates. It receives the update requests described above.
• Anthropic, PBC (United States) provides Claude, an AI assistant we use to build and run the app. While it does that work, it can read the data in our backend.

Each of them may use your information only to provide its service to us, and is bound by a data processing agreement to protect it at least as well as this policy does.

Two companies act on their own account, under their own privacy policies: Apple, for App Store purchases, Sign in with Apple and your iCloud backup; and Google, if you sign in with Google.

Our backend and these providers are in the United States. If you live in the European Economic Area, the United Kingdom or Switzerland, your information is transferred there under the European Commission's standard contractual clauses, which are part of our agreements with them.

How long we keep it

• On your phone: until you delete it in the app or delete the app.
• In our backend: for as long as your account exists. When you delete your account, its data for this app is erased at once. It remains in our backend provider's daily backups for up to seven days, and in its sign-in logs for up to seven days, and then it is gone. If you use another of our apps with the same account, the account itself, your email address, is removed when no app of ours holds data for it any more.
• At RevenueCat: for as long as you have a subscription and as long as needed for accounting and refunds. We delete it there sooner if you ask.
• At Expo: for as long as Expo needs it to deliver updates and report on them to us.
• Emails you send us: for up to one year after your last message, so that we can follow up on your request.

Your choices and your rights

• Use the app without an account. Nothing then reaches our backend.
• Export your data. In the app, go to Settings, then Your Data, then Export My Data. You get a file you can read, with your habits, fish and tanks and the days you fed them. Your settings are not in it: you can see them in the app.
• Delete your account. In the app, go to Settings, then Account, then Delete Account. Deleting the account needs a connection, and it can't be undone. To empty the phone as well, go to Settings, then Your Data, then Delete Everything.
• Deleting your account doesn't cancel a subscription. Only you can, in your iPhone's settings: tap your name, then Subscriptions. Until you do, it keeps renewing.

You can also write to us to see, copy, correct or delete your information, to ask us to restrict how we use it, or to object to how we use it. We answer within 30 days. We may ask you to write from the email address of your account, so that we know the request is yours.

If you live in the European Economic Area, the United Kingdom or Switzerland, you can also complain to the data protection authority where you live.

Children

Habit Aquarium is not directed at children. We don't knowingly collect personal information from children under 13, or under the age your country sets for agreeing to online services (up to 16 in the European Union). The app works without an account, and if you believe a child has signed in, write to us and we will delete the account.

Security

Information travels between the app and our backend encrypted, and our backend lets each account reach only its own data. No system is perfectly secure; if a breach ever affected your information, we would tell you and the authorities as the law requires.

These pages

These web pages use no cookies, no scripts and no analytics. Like any website, they are served by a hosting provider, which sees the IP address of each visit.

Changes to this policy

When we change this policy, we publish the new version here with a new date. If a change would let us use information you have already given us in a new way, we will ask you first.

Contact

Write to support@loneastronautstudios.com. We answer within three working days.