Privacy PolicyLast Updated: October 26, 2025
Applies to: Simple Habit Tracker by Malasada Monday Apps (“we,” “us,” “our”).

Summary: We collect account information and the habit activity you choose to track, plus device/analytics data, to provide, secure, and improve the app. We do not use targeted advertising at this time. You can access, delete, export, deactivate, or close your account by contacting us.

1) Who we are & how to contact us

2) Scope

This Policy covers personal data processed when you use Simple Habit Tracker, visit our website, contact support, or interact with our communications. Third-party services you access through our app have their own privacy policies.

3) What we collect

A. Information you provide

  • Account details: name, display name, email, password or SSO identifiers.

  • Profile & preferences: time zone, language, notification settings, optional avatar.

  • Habit data: habit names you add/select, schedule/frequency, check-ins, streaks, notes, reactions/emojis, and any attachments you upload.

  • Support content: messages, screenshots, recordings you send to us.

  • Payments: limited billing metadata via our processor (we don’t store full card numbers).

Sensitive data notice (please read):
Do not submit sensitive personal data in the app. This includes information about your health or medical conditions, genetic or biometric data, sexual life or orientation, religious or philosophical beliefs, political opinions, trade union membership, or other information considered “special category” or “sensitive” under applicable laws. Simple Habit Tracker is not a medical device and is not intended for diagnosis, treatment, or clinical use.
If you accidentally provide sensitive data, contact us and we’ll delete it where feasible and legally permitted: mondaysma@gmail.com.

B. Information collected automatically

  • Device & app info: device model, OS version, app version, in-app interactions.

  • Identifiers: device IDs, app user ID, and (if enabled) push tokens.

  • Logs & diagnostics: IP address, timestamps, referrers, crash/performance data.

  • Approximate location: inferred from IP or device settings if you allow it (e.g., to localize time zones).

C. Information from third parties

  • Login/auth: Apple/Google sign-in or other SSO.

  • Analytics/ops: aggregated or pseudonymous engagement and performance reports.

  • Vendors: fraud prevention/security signals.

4) Why we process your data & legal bases

  • Provide the service: account, syncing, reminders, customer support, transactional messages.

    • Legal bases (EEA/UK when applicable): contract; legitimate interests.

  • Improve & personalize: analytics, debugging, service quality, feature development.

    • Legal bases: legitimate interests; consent where required for certain identifiers/cookies.

  • Security & fraud prevention: protect users and services; investigate misuse.

    • Legal bases: legitimate interests; legal obligation where applicable.

  • Advertising: We do not use targeted advertising at this time. If we add it later, we will update this Policy and provide required controls (e.g., opt-out in the US; consent in the EEA/UK).

Special-category data (if any)

We do not intend to collect or process special-category (sensitive) personal data. Please do not submit such data. If you nonetheless provide it, we will handle it only to the minimum extent necessary to respond to your request (e.g., to delete it) and then delete or irreversibly anonymize it where feasible and legally permitted.

5) Cookies & SDKs

We use cookies/SDKs for authentication, preferences, analytics, and crash reporting. Where required by law, we present consent controls and honor your choices.

6) How we share information

  • Service providers / processors: hosting (e.g., Google Cloud/AWS), analytics, crash reporting, email, payments, support, and security vendors under appropriate contracts (e.g., data processing terms and, where applicable, standard contractual clauses).

  • Business transfers: as part of a merger, acquisition, or asset sale (notice provided where legally required).

  • Legal & safety: to comply with law or protect rights, safety, and security.

We do not “sell” personal information as traditionally defined. If we later engage in targeted advertising, we will provide the required opt-out mechanisms.

7) International data transfers

We are US-based and may transfer data internationally, including via cloud providers such as Google or AWS. Where required (e.g., for EEA/UK users), we use appropriate safeguards like Standard Contractual Clauses (and the UK addendum) and implement additional measures.

8) Data retention

We retain personal data only for as long as needed to fulfill the purposes described in this Policy—such as providing the service, maintaining security and fraud prevention, complying with legal obligations, and resolving disputes. We determine retention based on factors like the nature of the data, the context in which it’s processed, applicable legal requirements, and operational needs.
When data is no longer needed, we delete or irreversibly anonymize it within our operational cycles, subject to technical limitations (e.g., cached copies and backups) and lawful record-keeping requirements.

9) Security

We use reasonable administrative, technical, and physical safeguards (e.g., encryption in transit, access controls, least-privilege). No method is 100% secure—please use a strong, unique password.

10) Children’s privacy

Not directed to children under 13 (or older as required by local law). If a child has provided data, contact us to delete it.

11) Automated decision-making

We do not make decisions with legal or similarly significant effects based solely on automated processing. Limited profiling may support reminders/recommendations; you can opt out.

12) Third-party links & SDKs

Third parties (e.g., sign-in, analytics) process data under their own policies. Please review their notices.

13) Your choices & account controls

  • Deactivate or close your account / delete your data: You can request account deactivation or deletion via your account or by emailing mondaysma@gmail.com.

  • Notifications: Adjust your device/app settings or contact us.

14) Changes to this Policy

We may update this Policy to reflect changes to our practices or legal requirements. We will post the updated version and change the “Last Updated” date. For material changes, we will provide additional notice where required.

15) Contact

Email: mondaysma@gmail.com

Privacy Policy

mondaysma@gmail.com