Privacy Policy

Mango Habits is provided by [operator's full legal name], [legal form and registration number], [address], Ukraine (“we”, “us”). We are the controller of your personal data. Write to us about privacy at mango-habits@synoviasystems.com.

This policy covers the Mango Habits app and the website mango-habits.com. It works together with our Terms of Use.

What we don't collect: your phone number, precise location, contacts, photos, advertising ID or payment details. Habit names and labels are never sent to analytics.

We follow the EU General Data Protection Regulation (GDPR) and the Law of Ukraine “On Personal Data Protection”.

We don't sell your data, use it for advertising, or make automated decisions about you with legal or similar effects. We don't send marketing emails.

We use Google Analytics for Firebase to learn how the app is used as a whole, for example how many people finish onboarding or which screens are rarely opened.

• Off until you agree. The app asks once. Nothing is collected unless you say yes.
• Change your mind any time in More → Settings → Privacy. Turning it off stops collection on that phone.
• No habit content. We send event names and counts, never what your habits are called or what you wrote.
• Not linked to your account. We don't send your email or account ID to Google, and advertising features and Google signals are switched off.

Google processes this data as our processor. You can read how Google uses data from apps that use its services at policies.google.com.

Your account and synced habits are stored in the European Union, in Frankfurt, Germany. A few providers help us run the app. They use data only on our instructions and under a data processing agreement.

When data leaves the EU or EEA, we rely on an adequacy decision, such as the EU–US Data Privacy Framework, or on the European Commission's Standard Contractual Clauses.

• Account and habits: while your account exists. When you delete your account, it's removed from our live database straight away and from backups within 30 days.
• Things you delete in the app: removed from our live database within 30 days, once every phone has synced the change.
• Data on your phone: until you delete it in the app or uninstall the app.
• Inactive accounts: after 24 months without use, we email you. If you don't sign in within 30 days, we delete the account.
• Analytics: event data is kept for 2 months, then only aggregated reports remain.
• Sign-in email logs: kept by Brevo for up to [period].
• Messages to us: up to 2 years after the conversation ends.

You can access, correct, export and delete your data, restrict or object to how we use it, and withdraw consent at any time. Most of this you can do yourself in the app:

• Export: More → Settings → Your data → Export as CSV.
• Delete your account and cloud data: More → Account → Delete account.
• Delete data on this phone: More → Settings → Your data → Delete all data.
• Analytics: More → Settings → Privacy.
• Correct: edit or delete any habit directly in the app.

For anything else, write to mango-habits@synoviasystems.com. We reply within 30 days and may ask you to confirm the request from your account email.

If you think we handle your data wrongly, please tell us first. You can also complain to the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua) or to the data protection authority in the EU country where you live or work.

Reminders, the evening check-in and recaps are scheduled on your phone from the times you choose. They aren't sent from our servers, so we don't store a notification token. You can change or turn them off in More → Settings or in your phone's settings.

When you visit mango-habits.com, our hosting provider [website host] processes your IP address and browser details to deliver the pages and keep them secure.

The website uses Google Analytics only if you accept analytics cookies in the cookie banner. These cookies count visits and which pages are read. You can change your choice through [the “Cookie settings” link in the footer]. Website analytics are kept for 2 months.

Right now Mango Habits has no ads and no purchases. We may add ads to the free version and optional purchases in the future. Before that happens, we'll update this policy and tell you in the app. These promises will stay:

• your habits, check-ins and email address will never be shared with ad networks or used to choose ads;
• personalised ads will only be shown if you agree, and on iPhone the app will ask for tracking permission first;
• payments will be handled by Apple or Google, and we'll never see your card details.

Mango Habits isn't meant for anyone under 16, and we don't knowingly collect their data. If you think a child has created an account, write to mango-habits@synoviasystems.com and we'll delete it.

Data is encrypted in transit (TLS) and at rest in our cloud database. Each account can reach only its own records, enforced by the database itself. Access to production data is limited to [the operator] and protected with two-factor authentication. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires.

If we change this policy in a way that matters, such as adding ads, we'll tell you in the app before the change takes effect and ask for consent where it's needed. The date at the top shows the current version.