This Privacy Policy describes how RPG Habit (“we”) collects, uses, shares, and protects your personal data when you use the RPG Habit application and this website (the “Service”). We act as the data controller for your data within the meaning of the General Data Protection Regulation (GDPR).
For any question regarding this policy or your personal data, you can contact us at: willgaonarch@hotmail.fr.
1. Contact
When you contact us (by email or any other means made available), the personal data you send us (email address, message content) is used solely to handle your request, and is deleted once it has been resolved, unless a longer retention period is legally required.
2. Data we collect
When using the application, we may collect the following data:
- Email address (when creating an account);
- Nickname;
- In-game progression data (RPG stats, levels, inventory, achievements…);
- Data related to the habits you create and track (completions, streaks, progress history);
- Device sensor data (for example step count), only if you choose to sync a habit of that type;
- Technical error logs, to improve the app’s stability;
- Content of messages exchanged in chat and within guilds;
- Guild membership and social interactions (role, exchange history).
3. Purpose of the collection
This data is used for the following purposes:
- Creating and managing your user account;
- Saving your in-game progress via our hosting provider, Supabase;
- Syncing sensor data for a habit (if authorized) to track its progress;
- Sending you notifications (reminders, progress updates), only if you consent to them;
- Enabling exchanges between users within chat and guilds, and moderating those spaces (handling reports, tackling abuse);
- Analyzing and improving the user experience;
- Fixing bugs and improving the app’s stability.
4. Legal basis for processing
We process your personal data on the following legal bases, in accordance with Article 6 of the GDPR:
- Performance of the contract between us, for creating and managing your account and providing the Service;
- Your consent, for sending notifications and syncing sensor data — consent you can withdraw at any time;
- Our legitimate interest, for improving the Service, fixing bugs, and app security.
5. Data sharing and processors
We do not sell, rent or share any personal data with third parties for commercial purposes. Your data may nonetheless be shared with our technical processors, in particular Supabase, which hosts our databases and backs up your progress, strictly to the extent necessary to provide the Service.
Should any data transfer take place outside the European Union, it would be governed by appropriate safeguards, such as the European Commission’s standard contractual clauses.
If you use the chat or guild features, those exchanges are hosted via Supabase (or any other technical provider we may come to use for this feature), under the same security conditions as the rest of your data.
6. Visibility of your data to other users
Unlike your account data, some information is, by its nature, visible to other users when you use the social features:
- Your nickname, level and gear, visible to your guild members;
- The messages you post in chat or in a guild, visible to the other participants in that conversation.
You can block another user or report inappropriate content or behavior at any time from within the App. Blocking prevents future exchanges with that user, without notifying them that they have been blocked.
7. Hosting and security
Your data is stored securely via Supabase, a service compliant with current security standards. All synced data is encrypted in transit. We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration.
8. Retention period
Your personal data is kept for as long as you use your account. If you delete your account, your data is deleted or anonymized within a maximum of 30 days, unless a legal obligation requires a longer retention period.
Messages exchanged in chat and guilds are kept for as long as you use your account. They may be kept beyond that period, for a reasonable time, where necessary to handle a report or an ongoing moderation process.
9. App permissions
The app may request the following permissions:
- Activity sensors (optional): if you choose to track a habit related to physical activity;
- Notifications: to send you reminders or important alerts;
- Internet connection: to sync your data with Supabase.
No permission is activated without your explicit consent, and you can revoke them at any time from your device settings.
10. Data stored locally
Some data may be stored solely on your device if you choose not to create an account. This data remains 100% private and is never sent to our servers.
11. Cookies (website)
This website only uses technical cookies necessary for it to function, in particular to remember the language you have chosen (Polylang) and for page caching. We do not use any advertising cookies or trackers for profiling purposes.
12. Minors
The Service is not intended for people under 16 without the consent of their legal guardian. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us so we can delete it.
The social features (chat, guild) allow exchanges between users. We provide reporting and blocking tools for all users, and encourage parents and guardians of minor users to familiarize themselves with these features.
13. Your rights
In accordance with the GDPR and, where applicable, the regulations applicable in your country of residence, you have the following rights over your personal data:
- Right of access;
- Right of rectification;
- Right to erasure (“right to be forgotten”);
- Right to restriction of processing;
- Right to data portability;
- Right to object;
- Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before that withdrawal.
To exercise these rights, contact us at: willgaonarch@hotmail.fr. You also have the right to lodge a complaint with the competent data protection authority (in France, the CNIL — www.cnil.fr —, or the equivalent authority in your country of residence).
14. Deleting your account
You can request the complete deletion of your account and all your data by writing to us at: willgaonarch@hotmail.fr. This deletion is carried out within a maximum of 30 days.
15. Changes to this policy
This Privacy Policy may be updated at any time, in particular to reflect legal or functional changes. In the event of a material change, you will be notified directly within the app.
Last updated: 23/09/2026.