← Back to Konsist

Privacy Policy

Last updated: October 21, 2026

1. Who we are

Konsist (“we,” “us,” “our”) is the web application at konsist.xyz. This policy explains how we collect, use, store, and protect your personal data when you use our service.

The data controller for Konsist is Allah Bachayo Memon, an individual based in Pakistan. Contact: support@konsist.xyz.

2. Data we collect

We collect only what is necessary to provide the service:

DataPurposeBasis
Email addressAccount creation, login, notificationsContract
Full nameDisplay in appContract
Habit dataCore service functionalityContract
Goal dataCore service functionalityContract
Subscription state and Lemon Squeezy idsKnowing which account is on Pro (payments themselves are processed by Lemon Squeezy, see section 14)Contract

We do not collect location data, device fingerprints, or browsing history. We do not use analytics or tracking pixels. We do not sell or share your data with advertisers.

3. How we use your data

  • Provide and maintain the Konsist service
  • Send transactional emails (password resets, reminders)
  • Keep your account on the plan you chose, with payments processed by Lemon Squeezy
  • Generate your progress analytics and statistics

We never use your data for advertising, profiling, or automated decision-making.

4. Third-party services

We use the following services to operate Konsist:

  • Supabase (database and authentication) — hosted in the EU/US. Your data is stored securely with row-level security.
  • Lemon Squeezy (payments, as merchant of record) — handles your payment details and receipts. We never see or store your card number. See section 14.
  • Resend (email delivery) — sends transactional emails on our behalf.
  • Vercel (hosting) — serves the application.
  • Anthropic (the Weekly Note, Pro only): receives a summary of a Pro user's weekly numbers to write one paragraph. See section 13.

Each provider processes data under their own privacy policy and data processing agreements.

5. Cookies and local storage

Konsist uses only essential cookies required for the service to function:

  • Authentication cookies — Supabase session tokens that keep you signed in. These are strictly necessary and cannot be disabled.
  • Theme preference — stored in localStorage to remember your light/dark mode choice.

We do not use advertising cookies, analytics cookies, or any third-party tracking cookies. See our Cookie Policy for details.

6. Data sharing

Your habit data is private. It is visible only to you.

We never sell, rent, or share your personal data with third parties for their own purposes.

7. Your rights

Under GDPR and applicable data protection laws, you have the right to:

  • Access your personal data
  • Export your data (available in your profile settings)
  • Correct inaccurate data
  • Delete your account and all associated data, yourself, from Profile
  • Opt out of non-essential emails (unsubscribe link in every email)
  • Withdraw consent at any time

To exercise any of these rights, email support@konsist.xyz. We will respond within 30 days.

8. Deleting your account

You can delete your account yourself, from Profile. Any Pro subscription is cancelled first. Then your habits, every entry you logged, your goals, your settings and the account itself are removed straight away, and that cannot be undone. We keep one anonymous record of the deletion: the month you signed up, the date you left, your plan, how many habits, entries and goals you had, your longest streak, the Flex Days you earned and used, and the reason you gave if you gave one. It holds no name and no email. The only trace of your email is a salted one-way hash, which lets us notice a repeat signup without being able to tell who you were. We keep this record so we can see why people leave and what Konsist looked like for them when they did.

9. Data retention

We retain your data for as long as your account is active. When you delete your account, your personal data, habit entries and goals are removed immediately, as described above. Backups are purged within 90 days.

10. Security

We protect your data with:

  • Encryption in transit (TLS/HTTPS)
  • Encryption at rest (Supabase managed encryption)
  • Row-level security policies on all database tables
  • Secure authentication with bcrypt password hashing
  • Service role key separation (admin operations never exposed to the client)

11. Children

Konsist is not intended for users under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you via email or a notice within the app. Your continued use of Konsist after changes constitutes acceptance.

13. The Weekly Note

If you are on Pro, once a week Konsist writes you one short paragraph about your week. To write it, we send a summary of that week's numbers to Anthropic's API: how many days you showed up out of the days something was due, each habit's name, type and how often you did it, your current and longest streak, and the Flex Days you earned and used. We never send the notes you write, your Write It entries, your ratings or anything else you type, and the request carries no name or email. Anthropic does not use data sent through its API to train its models. You can turn the Weekly Note off any time in Profile, and nothing is sent while it is off. Free accounts never send anything.

14. Billing

Pro is sold through Lemon Squeezy, which acts as the merchant of record: your purchase is a contract with Lemon Squeezy, which processes the payment, collects any applicable taxes and issues your receipts. At checkout Lemon Squeezy receives your email address, your payment details and your country. Konsist never sees or stores your card number.

What Konsist stores is the state of your subscription (the plan, whether it is active, cancelled or ended, and the date the current period ends) and the Lemon Squeezy ids of your subscription, customer record and first order, so we know which account is on Pro. Cancelling and updating your payment details happen in Lemon Squeezy's customer portal, which you reach from Profile. Lemon Squeezy handles your data under its own privacy policy.

15. Contact

For questions, concerns, or data requests, email support@konsist.xyz.