HabitOff Privacy Policy (Updated)

Effective date: October 4, 2025

1. Data we collect (types) and how we collect it

• Relapse & streak events — when you log a relapse or streak, this data is stored securely in our Supabase database (hosted on trusted cloud infrastructure). This allows you to access your data across devices and ensures backup/reliability.
  
  

• Other items remain the same (chat content, analytics, device info, etc.).
  
  

2. How and why we use your data

• Provide core functionality: relapse/streak tracking is stored in Supabase so you can reliably track your progress.
  
  

3. Sharing and third-party services

We do not sell or rent your personal data.

We may share data with:

• Supabase — our backend database service provider, which securely stores relapse/streak event data and account info. Supabase acts as a data processor on our behalf. You can review their policies here: https://supabase.com/privacy.
  
  

• Other service providers (hosting, analytics, crash reporting, AI chatbot provider).
  
  

• Legal/business transfers as described above.
  
  

4. Data retention

• Relapse & streak data in Supabase — stored until you delete your account, and then deleted from active systems within [30–90] days. Backups may be retained temporarily per Supabase’s backup retention policies.
  
  

5. Security

• Supabase provides managed infrastructure, including authentication, encryption in transit (TLS), and encryption at rest. We configure access controls to ensure only authorized systems can access your data.
  
  

6. For App Store / Play Store reviewers — quick compliance checklist

• Data collected: relapse/streak events (stored in Supabase), chatbot text (if consented), usage analytics, device diagnostics.
  
  

• Shared with third parties: Yes — Supabase (database provider), [insert analytics/crash reporting provider], [insert AI chatbot provider].