Privacy Notice

Billion Habit is operated by Workivio Ltd (“we”, “us”). Workivio Ltd is the data controller for the personal data described in this notice — we decide why and how it is processed. For any privacy question or request, contact support@billionhabit.com.

• Account data — name (if provided), email address, and login credentials or OAuth identifiers. Used to create and secure your account and to contact you about the Service. Basis: performance of our contract with you.
• Deck content — your priorities, habit checks, run sheet entries, notes, touches, weekly scores, and any images you upload to your vision board. Used to provide the Service and sync it across your devices. Basis: performance of our contract.
• Connected service data — calendar events and access tokens where you choose to connect Google Calendar, and agent (MCP) connection details. Used only to deliver the feature you enabled. Basis: your consent, withdrawable by disconnecting.
• AI prompts and outputs — the text sent to and returned from our AI provider for quotes and briefings. Used to generate the feature and to debug failures. Basis: performance of our contract.
• Usage and device data — IP address, device and browser identifiers, pages viewed, timestamps, and error logs. Used for security, fraud prevention, and improving the product. Basis: our legitimate interests in running a secure, working service.
• Support messages — what you send us and our replies. Used to answer you and keep a record. Basis: legitimate interests and contract.
• Subscription records — plan, status, and renewal dates received from Paddle. Used to grant the right level of access and meet our legal and accounting obligations. Basis: contract and legal obligation. Card and billing details are collected and held by Paddle, not by us.

• Service providers / subprocessors — hosting, database and storage, authentication, email delivery, push notifications, AI model providers, and error monitoring, acting on our instructions.
• Merchant of Record — Paddle.com, for the sale of the product, subscription management, payments, tax compliance, invoicing, and refunds.
• Professional advisers — legal, accounting, and audit, where needed.
• Authorities — where we are required to disclose by law or to protect legal rights.

We do not sell your personal data.

Some features let you choose to share summary progress with other people. If you join a Mastermind group, other members can see your display name, current streak, today’s completion count, and the last seven days’ scores — not your individual non-negotiables, notes, or portfolio content. If you turn on Sharing in Settings, that same summary is shown on a public link anyone can view without signing in; it is off by default and you can disable it at any time.

Some of our providers process data outside the UK and EEA. Where that happens we rely on UK or EU adequacy decisions, or on Standard Contractual Clauses together with the UK International Data Transfer Addendum and appropriate technical safeguards.

Account and deck data is kept while your account is active, and for up to 90 days after deletion so that accidental deletions can be recovered, after which it is erased or anonymised. Security and error logs are kept for up to 12 months. Records needed for tax and accounting are kept for as long as the law requires (typically 6–7 years). Data that is no longer needed for any of these purposes is deleted or anonymised.

Under UK and EU data protection law you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is consent-based. Exercise any of these by emailing support@billionhabit.com — we respond within one month. Pro subscribers can also export their deck data directly from Settings at any time; on the free plan, email us and we’ll send it to you. If you are unhappy with our response you can complain to your local supervisory authority; in the UK that is the Information Commissioner’s Office (ico.org.uk).

We apply appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls so each account can only read its own records, least-privilege access for staff, and monitoring of authentication and errors. No system is perfectly secure, so please use a strong, unique password.

We use strictly necessary cookies and browser local storage to keep you signed in, remember your session and preferences, and store your deck locally so it works offline. These are essential to the Service and cannot be switched off. We do not set advertising or cross-site marketing cookies. You can clear cookies and local storage at any time in your browser settings, though doing so will sign you out and remove locally cached deck data.

We will update this notice when our processing changes, and revise the “last updated” date at the top of the page.