1. Scope
This privacy notice applies to the Pandora Appbox website, direct contact sent to the published email address, and the Habit Stonks product.
2. Who controls the data
Controller: Individual Entrepreneur Daud Gazizullin
Contact: pandora.appbox@proton.me
3. Website data
The site is a static website. It does not run third-party analytics, advertising trackers, or marketing cookies.
- Server logs: the server may process IP address, request path, user agent, and timestamps for security, performance, and operational troubleshooting.
- Email contact: if you email Pandora Appbox, the message content and sender details are processed to respond and maintain necessary correspondence records.
4. Habit Stonks product data
- Account identifiers: email address and authentication identifiers when you sign in using supported providers.
- App content: habits, categories, contexts, schedules, and logs created in the product.
- Technical data: minimal diagnostics, timestamps, and security-related records needed to run the service responsibly.
5. Where data is stored
- Local device storage: Habit Stonks stores core habit data locally on the device by default.
- Cloud backend: if synchronization is enabled, data is transmitted securely to the studio's self-hosted backend and processed under operator control.
- Email systems: email messages are processed by the relevant email providers needed to send and receive correspondence.
6. Legal bases
- Providing the website and product functionality.
- Maintaining account security and preventing abuse.
- Responding to direct inquiries.
- Meeting legal and operational obligations.
7. Sharing and processors
Pandora Appbox does not sell personal data. Data may be processed by infrastructure, hosting, authentication, or email providers only to the extent needed to operate the service.
8. Retention
- Website logs: retained only as long as reasonably needed for security and troubleshooting.
- Email correspondence: retained as long as needed to handle the inquiry and maintain necessary business records.
- Product data: retained while the account remains active or until deletion is requested, subject to required security and legal retention.
9. Security
Data in transit is protected with HTTPS/TLS where applicable. Access to hosted systems is restricted, and operational updates are applied to reduce risk.
10. Your rights
You may request access, correction, deletion, or export of applicable personal data. To exercise these rights, email pandora.appbox@proton.me.
11. Changes
This notice may be updated when the studio, products, or legal requirements change. The effective date above shows the current revision.