IN/HABIT
Privacy Policy
Last updated: October 29, 2026
How IN/HABIT collects, uses and shares personal information, and the choices available to you.
1. About this policy
STM Brands LLC operates IN/HABIT. In this policy, “we,” “us” and “our” refer to STM Brands LLC. This policy explains how we handle personal information through inhabitdaily.com, our waitlist and referral program, shopping and subscription services when available, promotions, customer support and communications.
Our address is 1178 Broadway, 3rd Floor #4923, New York, NY 10001, United States. For privacy questions or requests, email hello@inhabitdaily.com. Separate program terms govern participation in the giveaway and referral program.
This policy applies to information we control. Other businesses, including social networks, payment services and websites linked from our site, may handle information under their own privacy policies. Shopping-related descriptions apply when you use those services; they do not mean that checkout is currently open.
2. Information we collect
The information we collect depends on how you interact with IN/HABIT. It includes:
- Contact and account information: your email address, name and contact details when provided, account identifiers, signup and verification status, relevant timestamps, marketing enrollment and communication preferences. We retain a submitted waitlist email even if you never confirm it, and record confirmation separately.
- Orders and subscriptions: items, quantities, prices, shipping and billing details, payment references and status, subscription plans, order history, refunds and customer-service records. Stripe collects payment details through its payment services. We receive the transaction information needed to run the store, rather than storing your full payment-card number or security code.
- Referral and campaign information: referral codes and relationships, campaign/source labels, verified referral counts, earned benefits and redemption status. We can associate these records with the account or email involved.
- Device and activity information: IP address, browser and device characteristics, approximate location inferred from IP address, referring pages, pages viewed, interactions, request times, error records, cookie identifiers and advertising or analytics identifiers. Abuse-prevention records can contain hashed email or IP values; these remain potentially identifiable.
- Communications and feedback: support messages, privacy requests, survey answers and reviews you choose to provide. Marketing-email records can include delivery, opens, clicks, bounces, complaints and unsubscribe activity.
- Promotions: an Instagram handle and qualifying follow, eligibility information needed to verify a potential winner, and the winner’s contact, shipping and legally required tax information. Following our Instagram account alone does not enroll you in email marketing.
- Information derived from these records: likely product interests, campaign attribution and audience groups used to understand engagement and make our communications more relevant.
3. Where information comes from
We receive information directly from you when you sign up, shop, contact us or participate in a program. We also collect information automatically through our website and emails.
Service providers supply information needed to operate their services, such as payment and subscription updates, email delivery results, shipment updates and security signals. Analytics and advertising partners provide campaign and audience information. A referral link can tell us which member referred you; we do not ask members to upload their friends’ address books.
Social platforms may provide public profile information and information you share with us through those platforms. We combine relevant information from these sources for the purposes described in this policy.
4. How we use information
We use personal information to:
- Operate the website, save waitlist signups, verify email ownership, provide secure account access and show private referral progress.
- Process purchases, recurring subscriptions, payments, shipping, returns and customer-service requests when shopping is available.
- Attribute qualifying referrals, calculate benefits, administer promotions and prevent duplicate, fraudulent or ineligible participation.
- Send requested verification and account messages, and send launch, referral, product and promotional emails to eligible subscribers.
- Measure website and email performance, understand product interest, personalize communications, build advertising audiences, show relevant ads and measure campaign results.
- Diagnose errors, prevent abuse, protect accounts and systems, maintain records, resolve disputes and comply with legal obligations.
- Process privacy requests and maintain the records needed to respect your choices.
7. Advertising and browser choices
We do not sell personal information for money. However, disclosure of identifiers and activity to advertising partners may be considered a “sale,” “sharing” for cross-context behavioral advertising, or processing for targeted advertising under some privacy laws.
You can request that we stop these uses of your personal information by emailing hello@inhabitdaily.com with the subject “Privacy opt-out.” We honor applicable opt-out preference signals, including Global Privacy Control, as required by law. A signal normally applies to the browser or device sending it; where we can reliably associate it with an account, we apply it as required by applicable law. You may need to set your preference on each browser and device.
Browser settings can block or delete cookies, and advertising platforms offer their own ad controls. Blocking cookies alone does not necessarily stop server-side disclosures. An advertising opt-out does not stop essential processing, contextual advertising or all ads.
We do not respond to the older Do Not Track browser setting, which differs from Global Privacy Control. Where applicable law requires consent before a particular technology or use, we obtain that consent before enabling it.
8. Waitlist and email communications
Joining the waitlist also subscribes your email address to launch, referral and related IN/HABIT marketing updates. We save your email and can send these updates even if you do not click the confirmation link. Confirmation verifies ownership of the email address and unlocks your personal referral link and private progress; it is separate from marketing enrollment.
The initial email welcomes you and provides a confirmation link. Verification and sign-in messages support your requested access. Referral-progress messages are sent when the relevant verified membership or milestone exists.
You can stop marketing at any time using the unsubscribe link in a marketing email or by contacting hello@inhabitdaily.com. We retain limited suppression records to honor that choice. Signing up again does not automatically override an existing unsubscribe or suppression. Unsubscribing does not automatically delete your membership, and necessary account, order or security messages may still be sent.
Marketing emails can use pixels and tracked links to record opens, clicks and related technical information, such as time, IP address and email-client details. We use this information to measure engagement and improve communications. Email apps and privacy features can affect the accuracy of those measurements. You can block remote images in your email app, although that may not prevent all measurement.
Loading email artwork can also send ordinary request information to the image host or your email app’s image proxy. Never share a verification email or private sign-in link.
9. Retention
We keep information for as long as reasonably needed for the purposes described here. Relevant factors include your account or subscription, outstanding orders or rewards, marketing preferences, tax and accounting requirements, dispute periods, fraud prevention and security.
Temporary signup requests and verification links expire separately from the contact record. We retain your signup email and enrollment record even if the temporary request expires or you never confirm. Unconfirmed contacts remain subject to your unsubscribe and deletion choices.
When information is no longer needed, we delete or de-identify it, subject to applicable legal exceptions and backup cycles. A limited record may remain to honor an opt-out, meet legal obligations or prevent fraud. De-identified information is maintained without attempting to identify you except as permitted by law.
10. Your privacy rights
Depending on where you live and which laws apply, you may have rights to learn about our collection and disclosure, access or obtain a portable copy of your information, correct inaccuracies, request deletion, withdraw consent, and opt out of sale, sharing, targeted advertising or certain consequential profiling.
Contact hello@inhabitdaily.com or write to the address below to exercise a right. You do not need to create an account. We may request information reasonably necessary to verify your identity and protect information from unauthorized disclosure. An authorized agent may submit a request, subject to verification of their authority and any requirements under applicable law.
We respond within the time required by applicable law, explain relevant exceptions and do not unlawfully discriminate against you for exercising a privacy right. If we deny a request, you may ask us to reconsider by emailing with the subject “Privacy appeal.” Where an appeal right applies, we will explain the outcome and any available complaint route.
Rights are not absolute. For example, we may need to preserve transaction records or information needed to resolve a dispute. Withdrawing information needed to administer a referral benefit or order can affect our ability to provide that service.
11. Additional U.S. state disclosures
This section supplements the policy for residents protected by applicable U.S. state privacy laws, including California. It does not assert that every state law applies to every interaction or to our business.
The categories described above include identifiers and contact information; customer records such as billing and delivery details; commercial information such as purchases and subscriptions; internet or electronic activity; approximate geolocation; support and review content; and inferences about interests. Sources, purposes and recipient categories appear in Sections 3–6. For California requests, these descriptions also identify the categories collected and disclosed during the preceding 12 months to the extent we operated the relevant services during that period.
Identifiers, internet activity, approximate location, commercial information and associated interests may be disclosed to advertising partners in a way treated as sale or sharing. Other disclosures to service providers support the business purposes described above. Section 7 explains opt-out choices; Section 10 explains access, deletion, correction, authorized-agent and appeal requests.
We do not seek health information, precise location or other sensitive information for advertising. Limited sensitive information, such as legally required winner tax information, is used for the requested purpose or legal obligations. Where a separate right to limit or consent to sensitive-information processing applies, we honor it. We do not use personal information for automated decisions producing legal or similarly significant effects.
Referral benefits depend on qualifying participation described in the Referral Terms. Unsubscribing from marketing does not by itself remove earned benefits. If a program requires a separate financial-incentive notice under applicable law, we provide that notice before participation.
12. Security and international processing
We use safeguards designed to protect personal information, including access restrictions, authenticated private pages and measures to detect abuse. No website, email service or storage system can guarantee absolute security.
We operate in the United States, and providers may process information in the United States or other countries. Privacy laws may differ from those where you live. Where applicable law requires safeguards for an international transfer, we use the required safeguards.
13. Children
Our services are directed to adults and are not intended for children under 13. We do not knowingly collect personal information from children under 13 or knowingly sell or share personal information of anyone under 16 for targeted advertising. If you believe a child has provided information to us, contact hello@inhabitdaily.com so we can investigate and take appropriate action. Giveaway and referral age requirements are stated separately in their terms.
14. Changes to this policy
We may update this policy as our services or practices change. The date above identifies the latest revision. For a material change, we provide additional notice and obtain any consent required by applicable law before applying the change.
15. Contact us
For questions, privacy requests or appeals, contact STM Brands LLC at hello@inhabitdaily.com or 1178 Broadway, 3rd Floor #4923, New York, NY 10001, United States. Please describe your request and how we can reach you; do not include passwords, full payment-card details or unnecessary sensitive documents.