Privacy Policy

• Account details: your email address, an optional display name, and, if you sign in with Google, the basic profile Google shares (name and email).
• Habit data: the habits you create (names, types, targets, schedules, categories, identity statements, reminder times), your daily logs, and streak freezes.
• Settings: your timezone (detected from your device), reminder preferences and quiet hours.
• Browser notifications: if you turn on browser reminders, the push address your browser gives us so we can deliver them.
• Subscription details: if you buy Premium, your plan, status, renewal date and Razorpay subscription ID. Card, UPI and bank details are entered directly with Razorpay; we never see or store them.
• AI planner inputs: if you use the AI habit planner, the goal, time budget and constraints you type, plus the names of your active habits.
• Technical data: IP address, browser and device type, and error logs, used to run and secure the service.

• To provide the service: store your habits, calculate Momentum Scores and streaks, and show insights.
• To send the email and browser reminders you switch on, and essential account emails (such as sign-up confirmation and password reset).
• To process Premium payments and manage your subscription.
• To generate AI habit plans when you ask for one.
• To keep the service secure, prevent abuse, fix problems and answer support requests.

We process your data on the basis of your consent, given when you create an account and when you turn on optional features like reminders or the AI planner, and where processing is necessary to provide the service you asked for or to comply with the law. You can withdraw consent at any time by turning a feature off or deleting your account; this does not affect processing that already happened.

We do not sell your personal data or use it for advertising. We share it only with service providers who process it on our behalf to run Momentum:

• Cloudflare / Supabase — application hosting, database and sign-in.
• Razorpay — payment processing for Premium.
• Resend — delivery of reminder emails.
• Your browser’s push service (for example Google, Apple or Mozilla) — delivery of browser reminders.
• Cloudflare Workers AI — generating AI habit plans from the goal, constraints and active habit names you submit.
• Google — if you choose “Continue with Google”.

We may also disclose data where required by law, a court order or a lawful request from a government authority, or to protect the rights and safety of our users.

Our service providers may store and process data on servers outside India. Where they do, we rely on their contractual and security commitments to protect it, and we will follow any transfer restrictions notified under Indian law.

We keep your data while your account is open. When you delete your account, your profile, habits, logs, freezes, reminder settings and subscription record are deleted from our database straight away; copies in our providers’ backups are removed on their normal backup cycle. Razorpay keeps payment records for as long as financial and tax law requires.

• Access and portability: download your habit history any time from Settings → Your data.
• Correction: edit your habits and profile in the app, or ask us to correct anything else.
• Erasure: delete your account and data from Settings → Delete account.
• Withdraw consent: turn off reminders or stop using the AI planner at any time.
• Nomination: you may nominate someone to exercise these rights on your behalf in the event of death or incapacity.
• Grievance redressal: contact our Grievance Officer below. If you are not satisfied with our response, you may approach the Data Protection Board of India.

Habit names and notes are stored as you type them. If a habit relates to your health, mental wellbeing or recovery, consider a neutral name. Habit data is private to your account and protected by access controls, but it is not end-to-end encrypted.

Momentum is intended for people aged 18 or older. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

We use your browser’s storage to keep you signed in and remember your preferences. We do not use advertising or cross-site tracking cookies. Razorpay’s checkout window may set its own cookies when you pay.

Data is encrypted in transit, and each account can read only its own records. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and the authorities as the law requires.

We will post any changes on this page and update the effective date. If a change is significant, we will also tell you by email or in the app before it takes effect.

Piyush Gulhane, Grievance Officer — piyushgulhane@gmail.com. We aim to acknowledge requests within 2 business days and resolve them within the time required by law. See also our Terms of Service.