Privacy Policy

1. Scope and data controller

Talydo is a habit tracking app published under the name "Hachiva" and operated by an individual developer. This policy covers the Talydo mobile app and Talydo's web pages.

For any privacy questions or requests, you can contact us at support@hachiva.com.

2. Information we may process

Account information

When you sign in with Google, we receive your name, email address, profile photo and the unique account ID created by Google.

Your email address and account ID are stored on our servers to identify your account and to send the service e-mails described under "Notifications and e-mails" below. The basic profile details Google shares are also processed by our authentication provider. Your Google profile photo is stored on your device to be shown in the app; a photo you pick yourself is also uploaded to your account in reduced size (see "Photo access" below).

Talydo never receives or stores your Google password. Sign-in is carried out securely through Google.

You can also use Talydo without creating an account. In that case your habits and notes are stored on your device. However, as long as you allow it, some usage and device information described under "Usage information without an account" below may be sent to our servers to improve our app.

Content you create in the app

Your habits (title, icon, color, category, schedule, reminder times and goals), completion history, counter values, optional daily notes, your answers when you tell us why you missed a day, your "Streak Freeze" records, and your custom categories and colors are processed so the service can work and stay in sync across your devices.

When you're signed in, this content is stored on our servers (see section 4) so it can sync and come back when you sign in on another device. Changes are sent to your account as they happen, on every plan; if you're offline, they go through on their own once the connection is back. When you sign out, your account's content is removed from that device and stays in your account.

Notification panel. If you're signed in, the entries in the app's notification panel — reminders that fired (with the habit's name), a habit that has ended, plan and update notices — are also written to your account, so they show up on another device too.

Your customizations. While "Keep my customizations" is on (the default), your display and layout preferences are also written to your account: theme, text size, app language, layout, first day of the week, status bar, hide completed, grouping and sorting, your category and habit order (including category names), notification sound and vibration, the end-of-day reminder and the missed-day question. That way they come back as they were on a new device. You can turn it off in Profile → Settings; while it is off these preferences are neither written nor read. Device-specific settings such as backup network, time zone and widget preferences stay only on your device.

Backups

If automatic backup is on (the default when you're signed in), the app also stores full copies of the content above — restore points — in your account on our servers, so you can go back to an earlier state from Profile → Settings → Data management. On the free plan your latest backup is kept; on Premium your last 3 are kept. Older backups are deleted automatically, and resetting your data or deleting your account deletes them right away. If you move from Premium to Free, extra backups are no longer shown in the app but may remain in your account.

Photo access

If you choose to add a profile photo, or attach a screenshot to a message you send us through "Contact us", we access the image you pick through your device's photo picker; we don't ask for permission to read your gallery. Only the single image you select is read, and only at the moment you choose it; your gallery is never accessed in the background or without your knowledge.

When you sign in with Google, your Google profile photo is saved on your device and is not uploaded. A profile photo you pick yourself is cropped to a small 256-pixel square and also uploaded to your account, so it shows on another device too and is deleted from your account when you remove it. A screenshot is sent only with the support message it belongs to.

When you save a share card, the card is written to your gallery; for this, older Android versions ask for storage permission and iPhone asks for "add only" permission.

Support messages

When you contact us through "Contact us" in the app, we receive the topic you choose, your message, your email address (your verified account email if you're signed in, or the one you enter), and any screenshots you attach (up to 3). To help us solve your issue faster, the app also adds a technical summary automatically: the app and operating system (Android or iOS) version, device model, app and device language, time zone, your plan, whether you're signed in and your account ID, the recent sign-in steps (no personal data), the status of the notification permission, your main app settings (such as theme, text size, layout and sorting), how many habits, reminders and categories you have, and your automatic backup status.

On Android this summary also includes: if you have Premium, its dates, renewal and payment status, and the recent plan steps reported by Google (including only the last 6 characters of the Play transaction ID), alarm, battery-optimization and background-restriction status, how many widgets you have, your sync status (last sync, number of unsynced changes, backup networks) and the install and last update dates.

The summary never includes your habit names, notes or anything else you've written in the app. All of it is delivered to our support inbox by email and used only to answer you. For our own statistics we also keep a small record of each message that holds only its topic and a few anonymous facts (whether you were signed in, your plan, app version, language and how many screenshots were attached) — never your message, e-mail address or screenshots.

Payment and subscription information

When you subscribe to Talydo Premium, the purchase itself is handled entirely by the store — Google Play on Android, Apple's App Store on iPhone. Your card number, bank details or any other payment information never reach Talydo; we don't see or store them. To manage your subscription, only your subscription status (such as plan type, start, renewal or expiry date, and whether it will renew) is processed through RevenueCat, our subscription management provider, and linked to your account ID. So that a change you make in the store (such as a cancellation) shows up right away, the app may ask RevenueCat to re-check your purchases. Before you sign in, RevenueCat uses an anonymous ID to show you prices.

On Android, when a Lifetime purchase you made earlier has to be brought back to your account, your Google Play order numbers are sent to our servers. The app also asks Google Play whether an update is available.

Device and technical information

When you are signed in, your account record also holds your app version, device model and operating system version, your language and your phone's region setting, whether notifications are on, whether you have passed the welcome screens, an approximate country and city (derived from your internet connection when the app opens), when you last opened the app and last made a backup, and whether your account was ever Premium (to determine your backup allowance) — so that we can support you and send notices to the right people.

Talydo uses Google's Firebase services. On Android: push notifications (Firebase Cloud Messaging), anonymous usage statistics (Firebase Analytics), crash reports (Firebase Crashlytics) and performance monitoring (Firebase Performance); on iPhone: only anonymous usage statistics (Firebase Analytics). On iPhone, crash reports go directly to us rather than to Firebase, and there are currently no push notifications. See "Usage statistics and performance" and "Crash reports" below. Talydo contains no advertising SDKs and shows no ads. On Android, Firebase's advertising ID collection, Google signals and ad personalization are turned off; on iPhone, no tracking permission for advertising is requested. Limited technical information — such as IP address, device type, operating system version, app version, language and time zone — may be processed by our service providers (see section 4) as part of delivering their services, for example in server logs. Support messages include the details listed under "Support messages" above, and crash reports the details listed under "Crash reports" below.

Usage statistics and performance

To understand how Talydo is used and to make it better, the app records anonymous usage statistics with Firebase Analytics (and, on Android, Firebase Performance): which screens are opened and which actions are taken (for example that a habit was added or checked off, which kind of missed-day reason was chosen, that a setting was changed, that a share card was saved and of which kind, that an insight was viewed, that a purchase was started, which topic a support message was about), on Android how fast the app starts and runs (including how long network requests take), and a few anonymous traits — your plan (Free, Monthly, Yearly or Lifetime), app language, theme and layout — together with the app version, operating system version, device model, and an approximate country derived from the connection. It never contains your habit names, notes, e-mail address or account ID, and it is not linked to your account. Google's Firebase generates a random identifier for this installation to count devices. You can turn this off at any time in Profile → Privacy Policy → Anonymous usage statistics; nothing is then recorded or sent. Event-level data is kept by Google Analytics for up to 14 months at most.

Separately from this switch, we also work out anonymous totals from the content synced to your account (for example how many habits you have, which kinds of categories they are in, whether they have reminders or goals, and the number of completions in the last 28 days). Our support team can see your account's e-mail address, city, device and number of habits. Your habit names and notes are not read for this.

Usage information without an account

When you use Talydo without creating an account, we may collect some usage information to understand how the app is used, to detect problems you may run into and to improve your experience.

You can turn this sharing off at any time in Profile → Privacy Policy → Anonymous usage statistics.

While sharing is on — from the moment you first open the app — the following information may be processed:

• Device and app information: App version, device model, operating system version, app language and region setting.
• Usage preferences: Theme, layout, grouping, sorting, hide completed, accessibility mode and notification permissions.
• App usage: How far you got through the welcome steps, your number of reminders and the date you last exported your data.
• Habit information: The names, categories (including custom category names), start dates and reminder counts of up to 60 of your habits, and how many times you completed them in the last 30 days.
• Technical identifier: A random ID created for this installation of the app. This ID is not linked to a Google account; the same ID is used in crash reports.

An approximate country and city are also determined from your internet connection; if they can't be read from the connection, your phone's region setting is used. We do not ask for location permission, we do not use GPS and we do not store your IP address.

Your notes are not included in this information.

The information is sent when the app is opened. When nothing has changed, it is sent at most once an hour. This is separate from the usage statistics collected through Firebase.

When you turn sharing off, no new information is sent and our servers are asked to delete the information previously stored under this scope; if the phone is offline at that moment, the request may not arrive. Uninstalling the app or resetting your data does not delete this information.

This information is deleted automatically if you do not open the app for 12 months. When you sign in with Google, you are removed from the records of people without an account.

Test (debug) versions do not send this information.

Crash reports

If Talydo crashes or stops responding, the app saves a short technical report and sends it to our servers the next time it is opened, so that we can find and fix the problem. A report contains the type of error and its technical stack trace, a shortened error message (quoted text is removed), the kind of event (a crash or a not-responding, for example), the app version, the operating system version, the device model, on Android the last screens of the app that were open, a random identifier generated for this installation (the same one used by the usage information for people without an account) and the time it happened. It never contains your habit names, notes or anything else you've written in the app.

If you are signed in, the report that reaches our servers also carries your account ID, which we use to find your e-mail in our own records so that we can help you; without an account it carries only the random installation identifier. For a crash seen for the first time, the notice that lands in our support inbox also includes your account's e-mail if you're signed in, and stays in the inbox. On Android a copy also goes to Google's Firebase Crashlytics; that copy is not linked to your account. On iPhone the report is built from the diagnostic iOS provides and is sent only to us. Reports are used only to fix bugs and are kept on our servers for about 90 days.

You can turn this off at any time in Profile → Privacy Policy → Send crash reports; Talydo then saves and sends no reports (on iPhone, iOS's own diagnostics may still be collected by the system, but Talydo does not send them).

Notifications and e-mails

Reminders are scheduled on your device. Talydo asks for notification permission when you set a reminder, and you can turn it off at any time in your device settings; not granting or withdrawing it doesn't stop you from using the rest of Talydo. The reminders themselves don't send any data to us; however, if you're signed in, the notification-panel entry of a reminder that fired (with the habit's name) is written to your account (see "Content you create in the app").

Service notifications. When you're signed in, we send you notices about your account and subscription — for example when a payment fails or is resolved, when auto-renewal is turned off, when your subscription is on hold or ends, before a yearly renewal, when a price changes, when your account is frozen, reactivated or deleted, and when this policy is updated. They are delivered as a persistent notification in the app's notification panel and as an e-mail to your account address, in your app language; on Android they also arrive as a push notification. There are currently no push notifications on iPhone.

On Android, to deliver push notifications we store your device's notification ID (a token issued by Firebase Cloud Messaging) in your account. Google (Firebase Cloud Messaging) receives that token and the notification text solely to deliver the notification. The token is removed from your account when you sign out.

E-mails are sent from no-reply@hachiva.com; replies to that address are not received. If you need help, write to support@hachiva.com.

Monthly analysis summary (Premium). If you're a Premium member, we e-mail you a short summary of the previous month in the first days of each month. It is worked out on our servers from your synced check-ins and contains only counts and percentages — such as active days, completions, completion rate, perfect days and your strongest weekday — never your habit names or notes. No e-mail is sent for a month without any check-ins. You can turn it off at any time in Profile → Settings → Notifications & alarms.

News and tips. For new accounts, News and tips is on by default: we may occasionally send you messages about new features and suggestions, in the app's notification panel, as an e-mail and, on Android, as a push notification. You can turn it off at any time in Profile → Settings → Notifications & alarms, and we then stop sending them. If you already had an account before this default changed and never turned it on, it stays off. The service notices described above do not depend on this setting.

Platform, app version and approximate location. So that announcements reach the right people — for example those on an older app version, or in one country — an account you are signed in with also keeps its platform (Android or iPhone), the app version, when the app was last opened, whether notifications are on, and an approximate country and city. The country and city are read from the network connection the app opens with (if they can't be read, your phone's region setting is used); we do not ask for location permission, we do not use GPS, and your IP address is not stored. The city is approximate and is that of your network, not your street.

Message records. Records of the messages we send you — their kind, when they were sent, whether they were delivered and whether you opened them — are kept so that we can see what was delivered. If you delete your account, your e-mail address, the text of the messages and the link to your account are erased from those records; what remains is an anonymous entry (the kind of message, when it was sent, its delivery and read status and, if any, the delivery error note) that identifies no one.

3. Why we use your information

• to create your account, let you sign in, and sync and back up your data across your devices,
• to provide features such as habit tracking, notes, reminders, analytics, Streak Freeze, restorable backups and home screen widgets,
• to process and manage your Premium subscription,
• to send you notices about your account and subscription, (on Premium) the monthly analysis summary and — unless you turn off "News and tips" — occasional messages about new features,
• to keep the app working reliably, fix problems (including through crash reports), understand how the app is used and keep it secure,
• to respond to support requests and send important service notices,
• to meet legal obligations and prevent misuse.

Talydo does not sell your personal information and does not use your habit data for advertising. The app shows no ads.

4. Sharing your information

Personal information is shared only in these limited cases:

• Infrastructure and database provider: Your account and habit data, including your backups, notification panel, records of the messages we send you, crash reports and usage information without an account, are stored with Supabase (database hosting, authentication and scheduled jobs). Supabase can access this data only to provide its service to Talydo and does not use it for its own purposes.
• Sign in with Google: If you choose this method, authentication is performed by Google and Google's own privacy terms apply.
• Usage statistics, crash reports and performance: Google's Firebase (Analytics; on Android also Crashlytics and Performance) receives the anonymous records described under "Usage statistics and performance" and "Crash reports", for as long as the matching switches in the app are on, and processes them to provide those services to us.
• Push notifications (Android only): Google's Firebase Cloud Messaging receives your device's notification ID and the text of the notification, only to deliver it to your device.
• Subscription management: If you subscribe to Premium, Google Play (on iPhone, Apple's App Store) processes the purchase, and limited, transaction-related information is shared with RevenueCat so we can manage your subscription status. These providers process your information only to provide their services to us.
• E-mail: Messages you send through "Contact us", the service e-mails we send you and the notices about new crash reports that reach our support inbox are delivered through our email provider (Google Workspace).
• Legal requirements: When we must comply with a valid legal obligation, a request from a competent authority, or a legal process.
• Business transfer: In the event of a merger, acquisition or transfer of assets, with the necessary notice and safeguards.

Our service providers may process data in countries other than your own; where they do, they're bound to protect it. Other than the cases above, your personal information is not shared with third parties.

5. Keeping and deleting your data

We keep your personal information while your account is active, or for as long as needed for the purposes described in this policy.

• Account and habit data: Kept while your account is active. The data of a frozen account is kept until you reactivate or delete the account.
• Backups: As described in section 2, your latest backup on the free plan and your last 3 on Premium.
• Notification and e-mail records: Kept while your account exists. When you delete your account they are made anonymous, as described in section 2.
• Usage and crash statistics: Crash reports are kept on our servers for about 90 days, usage statistics held by Google Analytics for up to 14 months. Notices about first-seen crashes that reach our support inbox stay in the inbox.
• Usage information without an account: Deletion is requested when you turn sharing off (it may not arrive if you are offline). Uninstalling the app or resetting your data does not delete it. It is deleted automatically if you do not open the app for 12 months.
• Support requests: Kept only for as long as needed to evaluate and conclude your request.

When you sign out, your account's data is removed from your device, but your account on our servers is kept.

In mandatory situations such as legal obligations, security requirements or the resolution of disputes, we may need to keep some records for longer.

6. Data security

We use reasonable technical and organizational measures to protect data against unauthorized access, loss, misuse or alteration. Data in transit between your device and our servers is protected with current encryption (TLS/HTTPS). Database access is protected by row-level security rules that let you see only your own account's data — including your backups — so you can't access another user's data. Your subscription's plan and term can only be changed by our own systems, not from the app.

7. Your choices and rights

Under applicable law (such as the GDPR or Turkey's KVKK), you may have the right to:

• find out whether your personal data is processed,
• request information about it if it is,
• ask for your data to be corrected, deleted or restricted,
• object to processing in certain cases, or withdraw your consent,
• request a copy of your data, where applicable.

You can export your habits yourself at any time as a CSV file from Profile → Settings → Export data, on every plan, you can turn automatic backup off in Profile → Settings → Data management, you can turn the monthly analysis e-mail off in Profile → Settings → Notifications & alarms (where you can also switch "News and tips" on or off), you can stop your preferences from being written to your account with "Keep my customizations" in Profile → Settings, and you can turn crash reports and anonymous usage statistics off in Profile → Privacy Policy. For any other request, write to support@hachiva.com.

8. Children's privacy

Talydo is not directed at children under 13 and does not knowingly collect personal data from anyone under 13. If you believe such data has been processed, please contact us; if we find it, it will be deleted promptly.

9. Changes to this policy

This policy may be updated when the app's features, the services we use, or legal requirements change. For significant changes, we'll let you know in the app or by another appropriate method. The current version is always available on this page.

10. Contact