Privacy Policy
Effective Date: April 1, 2026 · Last Updated: March 29, 2026
Myriadloop (Pvt) Ltd ("we," "us," or "our") operates the Consista mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this policy carefully. If you do not agree with the terms of this policy, please do not use the App.
1. Information We Collect
1.1 Information You Provide
- Habit Data: Habit names, completion logs, schedule rules, and notes you create within the App. This data is stored locally on your device.
- Account Information (Optional): If you choose to sign in using Sign in with Apple, we receive your Apple ID and, if you choose to share it, your email address. We do not require account creation to use the App.
- Support Communications: If you contact us for support, we may collect your email address and the content of your message.
1.2 Information Collected Automatically
- Usage Analytics: We use Firebase Analytics (Google) to collect anonymized usage data such as screen views, feature usage frequency, session duration, and device type. This data does not identify you personally.
- Crash Logs: We use Firebase Crashlytics (Google) to collect crash reports including device model, OS version, and stack traces. These logs do not contain your habit data or personal information.
- Purchase Data: We use RevenueCat to manage subscriptions. RevenueCat processes transaction data from Apple App Store or Google Play Store, including purchase receipts, subscription status, and transaction identifiers.
1.3 Information We Do NOT Collect
- We do not collect or use the Identifier for Advertisers (IDFA).
- We do not track users across apps or websites owned by other companies.
- We do not collect precise location data.
- We do not collect contacts, photos, or any data from other apps on your device.
2. How We Use Your Information
- To Provide the Service: Your habit data is used locally on your device to calculate scores, streaks, and display your calendar and reports.
- AI Habit Analysis (Premium): If you use the AI Insights feature, anonymized and aggregated habit completion patterns (not habit names or personal identifiers) are sent to OpenAI's API for correlation analysis. This data cannot be traced back to you.
- To Improve the App: Anonymized analytics help us understand which features are used most, identify bugs, and prioritize development.
- To Process Purchases: Subscription and purchase data is processed through RevenueCat and the respective app store to manage your subscription status.
- Cloud Backup (Optional): If you enable cloud backup, your habit data is stored in Supabase (hosted on AWS) and encrypted in transit and at rest.
3. Third-Party Services
We share limited data with the following third-party services, each governed by their own privacy policies:
| Service | Provider | Data Shared | Purpose |
|---|---|---|---|
| Firebase Analytics | Google LLC | Anonymized usage events, device info | App analytics |
| Firebase Crashlytics | Google LLC | Crash logs, device model, OS version | Crash reporting |
| RevenueCat | RevenueCat Inc. | Purchase receipts, subscription status | Subscription management |
| OpenAI API | OpenAI LLC | Anonymized habit completion patterns | AI Insights feature |
| Supabase | Supabase Inc. | Habit data (if backup enabled) | Cloud backup & sync |
| Apple / Google | Apple Inc. / Google LLC | Sign in credentials, purchase data | Authentication, payments |
We do not sell, rent, or trade your personal information to any third party for advertising or marketing purposes.
4. Data Storage and Security
- Local Storage: All habit data is stored locally in an SQLite database on your device. The App functions fully offline.
- Cloud Storage: If you enable cloud backup, data is stored in Supabase databases hosted on AWS infrastructure with encryption at rest (AES-256) and in transit (TLS 1.2+).
- Security Measures: We implement industry-standard security practices including encrypted data transmission, secure API authentication, and access controls. However, no method of electronic storage is 100% secure.
5. Data Retention
- Local Data: Remains on your device until you delete the App or clear its data.
- Cloud Backup Data: Retained until you delete your account or request data deletion.
- Analytics Data: Firebase Analytics data is retained for 14 months, then automatically deleted.
- Crash Logs: Retained for 90 days.
- Purchase Records: Retained as long as your subscription is active and for a reasonable period after for legal and accounting purposes.
6. Your Rights
6.1 All Users
- Access: You can view all your habit data within the App at any time.
- Deletion: You can delete individual habits or all data from within the App. To request deletion of cloud-stored data, contact us at [email protected].
- Portability: You can export your data from within the App.
6.2 European Economic Area (GDPR)
If you are in the EEA, you have the following additional rights under the General Data Protection Regulation:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
Our legal bases for processing are: (a) contract performance (providing the App service), (b) legitimate interest (analytics for improvement), and (c) consent (optional cloud backup and AI analysis). To exercise these rights, contact [email protected].
6.3 California Residents (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Request deletion of your personal information
- Opt out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising your privacy rights
To submit a request, contact [email protected]. We will respond within 45 days.
7. Children's Privacy
The App is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
8. International Data Transfers
Your data may be processed in the United States and other countries where our service providers operate. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the App and updating the "Last Updated" date. Your continued use of the App after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Company: Myriadloop (Pvt) Ltd