Privacy policy

Last updated: 15 October 2026.

This policy explains what the Rachi app for Android ("Rachi", "we") collects, why, who can see it, and the choices and rights you have. Rachi is a habit streak tracker. Your habits and check-ins are private to you; only a small public profile is shown on the leaderboard, and only if you keep it switched on.

The controller of your personal data is Criollo Labs, an independent developer.

You can reach us at rachi@criollolabs.com.

What we collect

• Account: your email address and name. We also generate an internal handle from your name to keep accounts apart; it is never shown to anyone. If you sign in with Google, we receive the basic profile they share (name, email). With an email code we only have your email address. You can also start as a guest: we then create an anonymous account with no email, and move your data to a real account if you sign up later.
• Your habits: habit names, schedules, goals and amounts, the optional reminder times you set, your check-ins and the notes you add to them.
• Avatar (optional): one of the illustrations included in the app; we store only which one you chose, so it can appear on your profile and on the leaderboard.
• Leaderboard profile: your name, your chosen avatar (or your initials if you have none), your current streak and the name of the habit with your longest current streak. See "The leaderboard" below.
• Device: a push notification token, only if you allow notifications, so reminders reach your phone; your language and time zone; and technical data such as IP address and device type, used for security and rate limiting.
• Crash reports and analytics: crash reports (Sentry) and product usage events (PostHog), such as which screens are used. Both are only active when we have turned them on, and analytics only after you allow it in the app. They are linked to a random account identifier, not to your habit content.
• Purchases: Google Play processes payment and RevenueCat tells us whether your Rachi Pro subscription or lifetime purchase is active. We never receive your card or bank details.
• Messages: what you write if you send us feedback or email support.

We do not collect your precise location, contacts or microphone, we do not access your photos, and we do not show ads or track you across other apps.

The leaderboard

The leaderboard is public to other Rachi users with an account. Only people with an account who keep Show me on the leaderboard switched on appear. Guests never appear. Others can see your name, avatar, streak and the name of your habit; your email address is never shown.

You can switch it off at any time in Settings. When it is off, you and your habit are hidden from the leaderboard. Because the habit name is public while you appear, do not put personal information in habit names.

Why we use it

• To run the app: sign you in, sync your habits across your devices, count streaks and send the reminders you set.
• To show the leaderboard, if you take part.
• To provide Rachi Pro and check your plan.
• To keep the service secure and fix errors.
• To understand which features are used so we can improve them.

Legal bases where the GDPR applies: performing our contract with you (running the app, the leaderboard and Pro), our legitimate interests (security, fixing errors, improving the app), your consent (push notifications, your profile photo and, where required, analytics) and legal obligations.

We do not sell your personal data and we do not share it for advertising.

Who else handles it

We use service providers that process data on our behalf and may use it only to provide their service: hosting and database, email delivery, push notification delivery, error monitoring (Sentry), product analytics (PostHog), Google (sign-in and Google Play billing) and RevenueCat (subscription status). Some are located outside your country, including the United States; where required we rely on safeguards such as standard contractual clauses.

How long we keep it

We keep your data while your account exists. When you delete your account we remove your data, including your avatar choice and your place on the leaderboard, from our systems within 30 days; encrypted backups are overwritten on their normal cycle. We may keep records we must keep by law, only for as long as the law requires. Purchase records held by Google Play follow Google's policies.

Delete or export your data

• Delete: go to Settings, then Account, then Delete account, or follow Delete account. If you no longer have the app, email us from your account address.
• Export: Settings, then Export, gives you all your habits and check-ins in CSV or JSON, at any time and on every plan.
• Avatar: you can change your avatar at any time; the old choice is replaced.

Your rights

Depending on where you live you may have the right to access, correct, delete and export your data, to object to or restrict some processing, to withdraw consent, and to complain to your data protection authority.

• GDPR (EEA, UK): the rights above, including portability and objection.
• CCPA/CPRA (California): the right to know, delete and correct, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, and we do not discriminate against you for using these rights.
• LGPD (Brazil): confirmation of processing, access, correction, anonymization or deletion, portability and information about sharing.

To use a right, use the in-app options or email rachi@criollolabs.com. We answer within 30 days.

Children

Rachi is not directed at children. You must be at least 16 years old, or the age of digital consent in your country if lower but never under 13, to create an account or appear on the leaderboard. We do not knowingly collect data from children under 13. If you believe a child has given us data, email rachi@criollolabs.com and we will delete it.

Changes and contact

We will update this page when the policy changes, change the date above and tell you in the app about material changes. Questions or requests: rachi@criollolabs.com.