PRIVACY POLICY

1. INFORMATION WE PROCESS

The information processed depends on which parts of One Minute Habit you use.

Account and authentication information may include:

• email address;
• display name;
• authentication-provider identifiers;
• account-verification status;
• login sessions;
• password-verification information where email and password sign-in is used;
• security and verification challenges.

Habit and app information may include:

• selected curated habits;
• Habit Sets;
• custom habits;
• custom-habit images;
• favorites;
• completions;
• streaks;
• progress;
• hearts and tree progress;
• reflections;
• mood entries;
• preferences;
• reminders;
• generated feedback, reports, nudges, recaps, or narration;
• language, locale, timezone, and app settings.

Subscription and access information may include:

• Free, Plus, or Premium tier;
• subscription product identifiers;
• subscription period;
• entitlement status and source;
• trial or streak-reward access;
• purchase-status or transaction-verification information needed to verify, restore, or manage access.

Support and diagnostic information may include:

• information you send to support;
• timestamps;
• request status;
• error information;
• app, device, or operating-system context;
• identifiers needed to investigate technical problems.

Website information may include:

• cookies and local-storage values;
• selected language;
• cookie-consent state;
• region values;
• website request information;
• an IP-address-based country or region lookup through ipapi when applicable.

Optional AI, speech, voice, and media information is described separately below.

2. DEVICE AND APPLICATION STORAGE

Signed-in account data is stored on the One Minute Habit backend as needed to provide the service.

The packaged app may also use device storage, including:

• localStorage;
• sessionStorage;
• Capacitor Preferences;
• IndexedDB;
• Cache Storage;
• temporary native files.

This local storage may contain authentication state, app state, preferences, cached information, and locally stored Coach conversation history.

Coach messages and relevant conversation context may also be transmitted to OpenAI when the user has provided current consent and intentionally uses AI Coach. One Minute Habit does not claim that Coach conversations avoid all storage by every involved service.

3. FREE-PLAN DATA AND THIRD-PARTY AI SERVICES

Free-plan habit tracking, curated habits, manual reflections, completions, streaks, progress, reminders, and normal navigation are not sent to OpenAI, ElevenLabs, Cloudinary, or another third-party AI service merely because the user uses the Free plan.

Free users do not receive AI Coach, AI-generated habit support, speech-to-text, generated ElevenLabs voice, or Premium custom-media processing.

Declining or withdrawing AI and Voice Data Sharing permission does not prevent the user from continuing to use unaffected manual and non-AI app functionality.

4. OPTIONAL AI, SPEECH, VOICE, AND MEDIA SERVICES

One Minute Habit uses optional third-party services only for covered features that require them.

Before covered information is transmitted, a signed-in user must review the in-app “AI and Voice Data Sharing” disclosure and affirmatively select “Allow third-party processing.”

Closing or declining the disclosure keeps covered external processing disabled.

OpenAI

When the user has current consent and intentionally uses an applicable feature, OpenAI may receive:

• text entered into AI Coach;
• recent Coach conversation context;
• relevant habit and Habit Set titles or identifiers;
• habit setup information;
• custom-habit requests or ideas;
• completion, streak, progress, and weekly-activity information relevant to the requested feature;
• reflection text used for feedback, daily recaps, or weekly reports;
• reminders, timezone, locale, preferences, or display name when relevant to the requested output;
• derived coaching, calibration, or emotion-related signals used by the requested feature;
• raw audio intentionally submitted for speech-to-text transcription.

OpenAI processing may support:

• AI Coach;
• AI habit generation;
• AI setup and suggestions;
• reflection feedback;
• daily recaps;
• Premium weekly reports;
• speech-to-text transcription.

Purchase tokens are not intentionally included in audited OpenAI request bodies.

For speech-to-text, raw recorded audio is sent through the One Minute Habit backend to OpenAI. The app and backend do not intentionally save the raw recording as normal application content. Temporary native audio files are deleted on a best-effort basis.

A resulting transcript may later be stored if the user chooses to submit it as a Coach message, reflection, habit, or other app content.

ElevenLabs

When the user has current consent and intentionally requests generated voice, ElevenLabs may receive text used to create:

• Coach voice output;
• reflection playback;
• recap playback;
• weekly-report narration.

The submitted text may quote or summarize habit activity, Coach messages, reflections, reports, or other content selected for the requested audio output.

Generated playback audio may be held temporarily on the device. Generated weekly narration may also be stored through Cloudinary as described below.

Cloudinary

When the user has current consent and intentionally uses an applicable media feature, Cloudinary may receive:

• custom-habit images selected or generated by the user;
• media files used by applicable custom-media features;
• generated weekly narration audio intended for later playback.

One Minute Habit may store the resulting Cloudinary media URL with the related app record.

Cloudinary is not used for every profile image or every Free-plan action. Only media that is actually sent through an applicable Cloudinary-backed feature is covered by this section.

5. WHEN COVERED PROCESSING MAY OCCUR

Covered processing may begin after the user intentionally uses or activates an applicable feature. Depending on the feature, this can include:

• sending a Coach message;
• requesting AI habit generation or setup;
• requesting speech-to-text;
• requesting generated voice;
• saving a reflection that is eligible for AI feedback or recap generation;
• opening an eligible weekly-report feature;
• using an applicable custom-image or media feature.

Covered processing is not limited to buttons that contain the word “AI.”

Before any covered external processing, the app requires current, explicit, versioned consent.

Speech-to-text does not begin recording and does not request native microphone permission until app-level third-party processing permission has been accepted.

Operating-system permission for the microphone, camera, photo library, or notifications controls access to the device. It does not replace consent to transmit information to OpenAI, ElevenLabs, Cloudinary, or another external provider.

6. CONSENT, DECLINE, AND WITHDRAWAL

Signed-in users can review their current consent status under:

Profile → AI and Voice Data Sharing

Users may:

• review the disclosure;
• allow third-party processing;
• decline third-party processing;
• withdraw previously granted permission;
• open Data Controls.

Declining or closing the disclosure keeps covered processing disabled.

Withdrawing permission stops future covered transmissions to OpenAI, ElevenLabs, and applicable Cloudinary-backed features. This includes future AI generation, speech-to-text, generated voice, and other covered processing.

Withdrawal does not retroactively delete information already processed by a provider or information already stored before withdrawal.

Account deletion is a separate action available in Profile.

7. SERVICE-PROVIDER DATA PROTECTION

One Minute Habit selects service providers based on their applicable terms, privacy commitments, security practices, and data-processing safeguards.

Any third party that processes user data on behalf of One Minute Habit is required, through applicable contractual, technical, organizational, or legal safeguards, to protect that data with the same or an equivalent level of protection described in this Privacy Policy and required by applicable law.

Where applicable data-processing terms cover our use of their services, OpenAI, ElevenLabs, and Cloudinary may process covered information only to provide the applicable services and permitted purposes described in this Privacy Policy.

No system can guarantee absolute security. One Minute Habit does not promise zero risk, instantaneous provider deletion, or retention behavior beyond what is supported by applicable provider terms and the implementation described in this policy.

8. OTHER SERVICE PROVIDERS

OneSignal

OneSignal supports reminders and push notifications. Where enabled, it may receive:

• an account-linked external identifier;
• device or browser information;
• notification-subscription information;
• locale;
• notification-delivery information.

Twilio SendGrid

Twilio SendGrid supports:

• account verification email;
• support email;
• eligible weekly recap email.

An eligible weekly recap email may include a display name, stored report summary, or progress information.

Vercel

Vercel hosts the website and backend and provides website analytics. Runtime requests and operational logs may contain ordinary request, status, identifier, device, or error information.

Upstash QStash

Upstash QStash supports queued or scheduled website work, including applicable website-only narration tasks. It does not power packaged-app Coach chat.

ipapi

The public website may send a visitor’s IP address to ipapi to obtain country or region information for website cookie-choice handling. This lookup is website-only.

Apple and Google

Apple or Google may process authentication information when their sign-in option is used.

Apple, Google Play, and applicable payment providers may process purchase, receipt, transaction, tax, fraud-prevention, and subscription-management information.

The packaged iPhone and iPad app uses Apple billing. The packaged Android app uses Google Play billing.

9. HOW INFORMATION IS USED

One Minute Habit may use information to:

• create and authenticate accounts;
• provide curated habits and Habit Sets;
• save custom habits, images, reflections, completions, streaks, progress, moods, reminders, preferences, and app settings;
• provide subscription access and restore verified purchases;
• provide optional AI Coach responses;
• provide AI habit generation, setup, ideas, feedback, recaps, and weekly reports;
• provide speech-to-text transcription;
• provide requested generated voice;
• store and deliver applicable custom media;
• send reminders, notifications, verification messages, support responses, or eligible weekly emails;
• maintain security and prevent abuse;
• diagnose errors and technical problems;
• comply with legal obligations;
• process account-deletion requests.

One Minute Habit does not sell personal information to advertisers.

10. STORAGE AND RETENTION

One Minute Habit keeps account-linked information while it is needed to provide the selected features, maintain security, comply with legal obligations, or complete a requested deletion.

Different information may have different retention periods.

Temporary files, generated media, provider logs, backups, caches, transaction records, fraud-prevention records, and security records may not be deleted immediately.

Provider processing and deletion timing may be controlled partly by the provider’s applicable systems, terms, and legal obligations.

One Minute Habit does not promise:

• instantaneous deletion from every cache or backup;
• zero provider retention;
• deletion of Apple or Google transaction records;
• deletion of records a provider must retain for legal, fraud-prevention, security, or accounting purposes.

11. ACCOUNT DELETION

A signed-in user can start account deletion in the app from:

Profile → Delete Account

The normal deletion process does not require emailing support.

The user must:

• be recently authenticated where required;
• review the permanent-deletion warning;
• acknowledge the warning;
• enter the requested confirmation phrase.

Deletion removes or schedules removal of applicable One Minute Habit account information, including:

• account and profile information;
• authentication links and sessions;
• habits and Habit Sets;
• custom habits;
• favorites;
• completions;
• streaks;
• progress;
• moods;
• reflections;
• preferences;
• reminders;
• generated nudges, reports, and recaps;
• consent records;
• notification and weekly-email records;
• local Coach history and app caches;
• internal entitlement, trial, and reward associations.

Where applicable identifiers are available, One Minute Habit also schedules deletion of owned custom-habit images, generated weekly narration, and other covered media actually stored through Cloudinary.

The service requests deletion or unlinking of applicable OneSignal user information and disables reminders, notifications, automatic processing, and weekly email while deletion is in progress.

Required provider-cleanup steps may be retried. If a required external step fails, the account may remain blocked while cleanup is incomplete rather than displaying a false success message.

After deletion completes, a limited pseudonymous deletion journal may remain for:

• idempotency;
• security;
• abuse prevention;
• evidence that the deletion request completed.

This journal does not retain the deleted email address, authentication subject, media URL, purchase token, or usable entitlement.

Account deletion does not cancel or refund an App Store or Google Play subscription. Store subscriptions must be managed separately through Apple or Google.

Apple, Google, and other providers may retain transaction, tax, fraud-prevention, security, or verification records under their own legal obligations and policies.

Support is an exceptional fallback if in-app deletion fails. Contact support@1minutehabit.com and include the approximate time of the failed attempt.

12. WEBSITE COOKIES AND PRIVACY CHOICES

The public website uses necessary storage for functions such as:

• consent state;
• selected language;
• region results;
• authentication;
• interface state.

Where the website cookie banner appears, visitors may accept optional providers or continue with essential storage and may later reopen cookie preferences.

Website processing and packaged native-app processing are not identical.

For example:

• ipapi, website cookies, website analytics, and certain queued tasks are website-specific;
• native microphone, camera, photo-library, notification permissions, and packaged-app local storage apply to the iPhone, iPad, and Android apps.

13. CHILDREN AND AGE

One Minute Habit does not currently request a date of birth or provide a verified child-account or parental-consent system.

A person may use One Minute Habit only if they can validly agree to the applicable terms or have any parent or guardian authorization required by applicable law.

Do not submit a child’s personal information without the authorization required where you live.

14. USER CHOICES AND CONTROLS

Depending on the account and platform, users may:

• edit account and profile information;
• manage habits, reflections, reminders, and preferences;
• manage subscription access through Apple or Google;
• restore eligible purchases;
• grant, decline, review, or withdraw AI and Voice Data Sharing permission;
• manage native microphone, camera, photo-library, and notification permissions through device settings;
• change website cookie preferences;
• request account deletion in the app;
• contact support for privacy, access, correction, or deletion questions.

Declining or withdrawing AI and Voice Data Sharing permission blocks future covered third-party transmissions without disabling unaffected manual and non-AI functionality.

15. CHANGES TO THIS PRIVACY POLICY

One Minute Habit may update this Privacy Policy when app features, providers, legal requirements, or data practices change.

The “Last revised” date will be updated when the policy changes materially.

Where required, One Minute Habit may provide additional notice or request renewed consent before materially different covered processing begins.

16. PRIVACY CONTACT

For privacy questions, access or correction requests, or an account-deletion failure, contact:

One Minute Habit Support

Operated by 2xWD

Email: support@1minutehabit.com