Privacy Notice

The Daily Habit System is provided by Gail Parata, sole trader, creator of Small Wins Big Shifts™, based in New Zealand. Gail is responsible for your personal information and is your privacy contact at dailyhabitsystem26@gmail.com. This notice explains what information is collected, where it comes from, how it is used and your rights.

Account and purchase information: your email address and authentication details are used to create your account, sign you in and match your account to your purchase. We receive purchase details from Stan Store, including your purchase email and, where supplied, name, order reference and amount. Currency and payment status may be checked manually in Stan rather than received through notifications. We also record access status and manual access decisions. We use these details to verify purchases, activate and manage access, provide support and handle refunds. We need an account email and enough information to verify your purchase before we can provide paid access.

Your optional entries: the habits, plans, ticks, comments, check-ins and reflections you choose to record are stored to provide the system and save your progress. You decide what to write. Avoid recording other people’s personal information or sensitive details that are not needed for your own habit planning.

Messages you send us: to answer questions and provide support.

Technical information and analytics: such as IP address, browser and device details, basic server logs, and platform performance/visitor analytics enabled by our hosting provider (Lovable Cloud), to keep the system secure, prevent misuse, understand site usage, and fix problems.

Payment card details: entered at the Stan Store checkout and processed by the payment provider connected to that checkout. We do not receive or store your card details.

We use your information to provide and administer your purchase, keep the system secure, maintain and improve its operation and meet legal obligations. Where applicable law requires a legal basis, we rely on performance of our contract with you, legitimate interests in operating a secure service, legal obligations or consent, as appropriate. We do not send marketing emails without your consent. Purchase, access and essential service messages are not marketing emails.

Stan Store provides our storefront and checkout. Its connected payment provider processes payments. We receive purchase information from Stan Store for the purposes described in section 2. If the Stan–Zapier notification connection is used, Zapier passes the notification details supplied by Stan to our access-review process. Notifications create pending review records only; they do not automatically grant or reactivate access. Gail checks the purchase before granting access manually. We do not send your habit entries or reflections to Stan Store, its payment provider or Zapier.

Lovable, which hosts the website, provides its backend platform (Lovable Cloud), and processes technical analytics.

Supabase, which provides our database and authentication service (with the database located in Mumbai, India).

Google (Gmail), when you email us for support.

YouTube (Google), for embedded video playback. See section 10 for more information.

Professional advisers (such as accountants or lawyers) where necessary and authorities where required by law.

We do not sell your personal information.

Your account and entries are stored in a database located in Mumbai, India. Our infrastructure providers may process account and technical information in other countries, including the United States. We take reasonable steps to protect information handled by our service providers and to meet our obligations under New Zealand privacy law.

Your personal entries are for your own use. They are not displayed in Gail Parata’s Admin dashboard and Gail does not routinely access or review them. Access controls are intended to prevent other customers from seeing your entries. Limited authorised access may be needed to investigate a problem you report, maintain security or meet legal requirements. You may also choose to share an entry with us when asking for help.

We keep your account and personal entries while your account remains open so the system can save your progress. Inactivity alone does not end your access. You can request deletion of your account and entries by emailing dailyhabitsystem26@gmail.com. We may verify your identity before acting. We will arrange removal of your sign-in account and associated entries from the live system, subject to information we must retain for tax, accounting or legal purposes, and confirm what has been removed and retained. Removing the sign-in account alone is not sufficient to remove all associated records. Copies may remain in providers’ routine backups until those backups expire or are overwritten. Closing your account ends access through that account; you can ask about reactivating an eligible purchase, but deleted entries may not be recoverable.

Resetting a day or starting a new 30-day cycle can delete saved information as described in the app’s confirmation message. Daily PDFs do not contain every field. Export and check the records you want to keep, and keep separate copies of information omitted from PDFs, before confirming. Reset Day does not clear separate check-ins, and neither action deletes your whole account. Routine backups are not available to restore individual entries through the app.

Purchase records are kept for as long as required for tax, accounting and legal purposes (in New Zealand, generally seven years). Access records are kept for as long as needed to administer your ongoing purchase entitlement and resolve disputes. Stan Store and its payment provider keep their own records under their policies. Information no longer needed is deleted or anonymised.

Under the New Zealand Privacy Act 2020, you have the right to request access to or correction of your personal information. Contact dailyhabitsystem26@gmail.com to make a request. We may verify your identity before fulfilling it. We will respond to your request as soon as reasonably practicable and no later than 20 working days, unless an extension is permitted by law (in which case we will explain the reason and new timeframe). If we decline a requested correction, you may ask us to attach a statement of the correction you sought to the relevant record. If you are unsatisfied with our response, you have the right to complain to the New Zealand Office of the Privacy Commissioner at https://www.privacy.org.nz. If you reside outside New Zealand, you may also have rights under your local legislation.

We maintain reasonable technical and organisational security measures to protect your personal information, including encrypted SSL/TLS connections, user-specific data isolation controls, and password hashing by our sign-in provider. In the unlikely event of a security incident or privacy breach that is determined to cause (or be likely to cause) serious harm, we will notify affected individuals and the New Zealand Privacy Commissioner in accordance with statutory requirements under the Privacy Act 2020. No online service can guarantee 100% security.

We use essential browser storage to keep you signed in and, if your connection drops, to hold unsaved changes on your device until they can be saved. Lovable visitor analytics are active to help us understand traffic and site usage. Lovable describes these as aggregate visits, page views, visit duration, bounce rate, traffic source, country and device information, without cookies or profiles linking separate visits. Diagnostic tools and hosting logs may also process technical information for operation, security and troubleshooting. Their detailed collection settings and retention periods have not been confirmed, and the analytics reporting window should not be treated as a retention period.

The system uses YouTube’s privacy-enhanced player for embedded videos. Playing a video connects your browser to YouTube, which may receive technical information and process information under its own policies. Privacy-enhanced mode does not make playback anonymous or guarantee that no cookies or other storage will be used.

We may update this notice from time to time. The latest version will always show its last-updated date at the top. For any privacy questions or requests, contact dailyhabitsystem26@gmail.com.