Privacy Policy

• Your Google account basics. When you sign in with Google we receive your name, email address and a unique account ID. We don't receive your password or access to anything else in your Google account.
• Invite details. The invite code you redeemed, the channel it belongs to, and who referred you, if anyone. We also create a personal invite code for you to share.
• Your savings. Each time you skip an order we store what you would have spent: the restaurant, city, number of items, amount, currency and date.
• Usage analytics. Through Google Analytics for Firebase we record events such as page views, restaurants viewed, items added to cart, checkouts, skipped orders, share taps and the city you browse. These are linked to your account ID and include standard device and browser information collected by Google Analytics.
• Sign-up protection. We count failed invite-code attempts per account to block guessing.

If you allow it, your browser's location is used once, on your device, to pick the nearest city we cover. Your coordinates are never sent to us or stored — only the chosen city is kept, in your browser.

• cv_session and cv_active — keep you signed in and remember that your invite was accepted (up to 14 days).
• cv_ref — remembers an invite code from a shared link so you don't have to type it.
• Local storage holds your cart and chosen city on your device only.
• Google Analytics and Firebase Authentication set their own cookies and storage.

• To sign you in and keep the app invite-only.
• To show you your savings across devices.
• To understand which features help people save, and which cities to add next.
• To prevent abuse of invite codes.

We do not sell your data and we do not use it for advertising.

When you share a savings receipt, the link contains the amount and currency so anyone with the link can see it, along with your personal invite code. It does not contain your name or email.

Your data is stored and processed by Google (Firebase Authentication, Cloud Firestore, Firebase App Hosting and Google Analytics), which may store it on servers outside India. We don't share it with anyone else unless the law requires us to.

We keep your account and savings until you ask us to delete them. Analytics data is kept according to Google Analytics retention settings.

• Delete your savings at any time with “Reset my data” on your Profile page.
• Delete your account, or ask for a copy or correction of your data, by emailing admin@betterhabitstudio.com from the address you signed in with. We aim to act within 30 days.
• You can withdraw consent at any time by deleting your account. You can also block location access in your browser settings.

These rights are provided in line with India's Digital Personal Data Protection Act, 2023.

Cravault is not intended for anyone under 18, and we don't knowingly collect their data.

If we change this policy we'll update the date at the top. For significant changes we will tell you in the app.

Better Habit Studio, India.
Email: admin@betterhabitstudio.com

You can raise complaints about how we handle your data at this address. If you're not satisfied with our response, you may approach the Data Protection Board of India.