Privacy

Progrss.it is run by Jacob Arrowsmith, who is the data controller for everything described here. For anything on this page, email privacy@contact.progrss.it.

Only what the app needs to work. Specifically:

• Account details — your email address, a username, and a password stored only as a bcrypt hash. We never see your actual password. If you sign in with Google instead, we store the account link rather than a password.
• Profile — an optional display name, avatar image and bio, if you choose to add them.
• Your habits and logs — the habits you create, their titles, targets and schedules, and every time you tick one off, including any note you attach and the date it applies to.
• Progress — XP, level, streak counts, gems, purchased themes and unlocked achievements.
• Settings — your timezone, so days roll over at your midnight rather than the server's, and your reminder preferences.
• Friends — who you've sent friend requests to and accepted them from.
• Notification subscriptions — if you turn on reminders, the push endpoint your browser issues for the device you enabled them on.

There is no analytics, no tracking pixels and no advertising of any kind. We do not build a profile of you, we do not sell anything to anyone, and nothing here is shared with advertisers, because there aren't any.

Habit titles and notes are free text that you write. People track things like medication, therapy, exercise, drinking and sleep, which means what you type can amount to information about your health. Data protection law treats that as a special category needing extra care.

We do not ask for it, we cannot tell which of your habits are health-related, and we do not analyse them. But by typing it into a habit you are choosing to store it here, and that choice is your explicit consent to us storing it for the purpose of running your tracker. You can withdraw that at any time by editing or deleting the habit, or by deleting your account.

If you would rather not have something recorded on someone else's server, name the habit something only you understand. It works exactly the same.

• To provide the service you asked for — a habit tracker cannot work without storing your habits. This covers your account, habits, logs, progress and friendships.
• Your consent — for reminder notifications, which are off by default and which you can switch off again in Settings, and for any health-related content you choose to put in a habit.
• Our legitimate interest — in keeping the service secure and working, for example rate-limiting abuse or fixing a bug from an error report.

We use a small number of suppliers to run the service. They process data on our instructions and are not allowed to use it for their own purposes:

• Supabase — hosts the database your account and habits live in.
• Vercel — hosts and serves the site. The app is configured to run in Vercel's Dublin region.
• Resend — sends the few emails we send: password resets and, if you enable them, reminders.
• Your browser's push service — Google, Apple or Mozilla, depending on your device, relays reminder notifications to you. This only applies if you turn reminders on.

We will also disclose data if the law actually requires it. Otherwise, nobody else gets it.

Your profile page is visible to signed-in users of Progrss.it only. It is not public and is not indexed by search engines. Anyone signed in who visits it can see your username, display name, avatar, bio, level, streaks, total logged count, achievements and your consistency map.

The weekly leaderboard shows your username, avatar and weekly XP. Individual habit titles and notes are never shown to anyone else — only the totals derived from them.

We set one kind of cookie: the session cookie that keeps you signed in. It is strictly necessary to deliver a service you asked for, so it does not require consent, and that is why there is no cookie banner on this site.

There are no analytics, advertising or third-party tracking cookies. If that ever changes, you'll be asked first.

Your data stays while your account exists, because a habit tracker with no history is not much of a habit tracker. When you delete your account it is removed immediately and permanently — there is no soft-delete, no grace period and no archived copy. Deleted habits and their logs go straight away too.

Password reset tokens expire within an hour. Backups held by our hosting providers may persist for a short period on their own schedules before being overwritten.

Under UK and EU data protection law you can ask to see your data, correct it, delete it, get a portable copy, or object to how we use it. Two of those are built into the app so you don't have to ask anyone:

• Get a copy — Settings → Your data → Download. A JSON file with your profile, habits, logs, achievements and friends.
• Delete everything — Settings → Your data → Delete. Immediate and irreversible.
• Correct it — Settings, for your profile; the habit itself, for anything you've logged.

For anything else, email privacy@contact.progrss.it. If you think we've handled your data badly, you can complain to the Information Commissioner's Office, though we'd rather you told us first so we can fix it.

Progrss.it is not intended for under-13s and we don't knowingly hold data about them. If you believe a child has created an account, email us and we'll remove it.

If this notice changes in a way that matters, the date at the top changes and you'll be told in the app before it takes effect. See also the terms of use.