How HabitPaws handles family data.

Data you provide

When an adult creates an account, HabitPaws stores an email address, a password hash, an optional child nickname, the selected companion, routines, stars, and activity history. The password itself is not stored in readable form. Feedback posts are associated with the parent account so the service can prevent abuse and show a parent the status of their own post.

Demo mode

The demo can be used without registration. Demo progress is kept in the browser session and is not saved as a family account. Do not enter real private information into a demo.

Analytics

If you allow anonymous analytics, HabitPaws records limited events such as page views, broad source groups, language, device category, and active time. The service stores a broad country code for reporting. The server does not write the raw IP address into the analytics file; it uses a short-lived in-memory lookup and a one-day hash cache to derive country information. Analytics events are retained for up to 90 days in the current self-hosted implementation.

Feedback moderation

Feedback is held for review before publication. Moderators can see the parent account email associated with a post in the private moderation queue. Public visitors see only the approved title, type, message, date, and a generic author label. Please do not include sensitive information about a child or family in feedback.

Service providers

The site is hosted on a self-managed server. Public editorial pages load fonts from Google Fonts. Country lookup may use the configured server-side country lookup provider when enabled. The owner should review and update this notice if additional providers, advertising, email, payments, or support tools are added.

Advertising and consent

Advertising is currently disabled in the product. Before any Google advertising is enabled, the owner must add the site to the relevant Google publisher account, configure a Google-certified consent management platform, publish a clear consent message, and review child-directed treatment. The family dashboard is intended to remain free of personalised advertising and behavioural profiling.

Your choices

You can avoid analytics, use the demo without an account, and use the signed-in Feedback board for product questions. Before advertising launch, the owner should add a monitored privacy contact for account access, correction, deletion, and child-safety requests; the owner should verify the requester before changing or removing data.

Updates

This notice may change when the product changes. The “last updated” date above will be revised when material data practices change.

Important: This is a product privacy notice template, not legal advice. Before advertising or operating at scale, have the final notice reviewed for the countries and audiences you serve.