Habiti Dashboard, an Ontario-based application, collects a broad range of personal and usage information from its users. The company gathers personally identifiable information including names, email addresses, physical addresses, postal codes, and city/state/province data. Beyond basic account details, Habiti automatically collects usage data whenever users interact with the Service, including IP addresses, browser type and version, pages visited, time spent on pages, and unique device identifiers. When users access the application via mobile devices, Habiti collects additional diagnostic data including device type, mobile OS, mobile browser type, and device-specific identifiers.
"Usage Data is collected automatically when using the Service."
The company also leverages third-party social media authentication, allowing users to log in or create accounts through social networks. When users grant access via these platforms, Habiti can collect data already associated with those accounts—names, email addresses, activities, and contact lists—plus any additional information users voluntarily share during registration or afterward.
Habiti outlines multiple purposes for collecting and using personal data, ranging from straightforward service provision to broader business objectives. The primary use cases include maintaining and monitoring the Service itself, managing user accounts and registration, performing contract-related functions for purchases, and contacting users about updates, security patches, and service-related communications. The company also uses data to send marketing communications about similar products and services users have previously purchased or inquired about—though users can opt out of these communications.
"To provide and maintain our Service, including to monitor the usage of our Service."
Beyond these core functions, Habiti reserves the right to use personal data for broader analytical purposes: identifying usage trends, measuring marketing campaign effectiveness, and evaluating service improvements. The policy also permits data use in business transfer scenarios, including mergers, divestitures, restructuring, reorganization, or asset sales, meaning user data could be transferred to a new entity if Habiti is acquired or sold.
Habiti's data retention approach distinguishes between personal data and usage data. The company retains personal information only as long as necessary for the stated purposes or to comply with legal obligations, resolve disputes, and enforce agreements. Usage data, by contrast, is typically retained for shorter periods unless it's needed to strengthen security or improve functionality—or unless legal requirements mandate longer storage. This tiered approach suggests the company may keep aggregated behavioral patterns longer than identifying personal information.
Critically, Habiti explicitly states that user information may be transferred to and maintained on computers outside the user's jurisdiction—potentially crossing provincial, national, or international borders. The policy acknowledges that data protection laws differ across jurisdictions, meaning information stored outside Canada (where Habiti operates) may have weaker legal protections than Ontario's standards. This cross-border processing clause is a significant privacy consideration for users concerned about data sovereignty.
The policy indicates users retain some control over certain data collection: the company states that users can "enable or disable access to this information at any time, through Your Device settings," suggesting granular privacy controls for location, contact, and other sensitive data on mobile devices. Users can also opt out of marketing communications, though the mechanism for doing so isn't detailed in the policy excerpt provided.
Habiti's privacy framework operates on a consent model—by using the Service and agreeing to the policy, users consent to data collection and processing as described. The policy covers information sharing situations, though specific details on third-party sharing aren't fully enumerated in the provided text. Service Providers—third parties employed by Habiti to facilitate the Service—have access to user data as part of their contracted functions.
Gist is a free AI reader for your browser, iPhone, and Android. Get concise summaries and key takeaways from any article or podcast.
Get Gist — Free