Habist is local-first. Rituals, completions, and preferences live on your device unless you sign in to keep an optional cloud copy. If you sign in, we store your email, encrypted password, session, and the ritual snapshot you push: names, schedules, completions, and (if you opt in) which rituals are visible to which circles. Circle members only see a name, today's status, and a streak for rituals you marked as shared with that circle. We send Expo push tokens only so your circle can deliver one canned nudge. We do not sell data, run ads, or build a public feed. You can export JSON from Settings, stop syncing by signing out, or delete your account. Deletion removes your cloud snapshot, circle membership, devices, and auth records. Local data on the device stays until you clear the app. Contact: the email you used to sign in, via the Habist account owner.