Privacy Policy

1. Introduction

Welcome to HabitRival (“we,” “us,” or “our”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the “Service”).

Please read this policy carefully. If you disagree with its terms, please discontinue use of our Service.

2. Information We Collect

We collect information you provide directly to us, including:

• Account Information: Email address, username, and password when you create an account.
• Profile Data: Display name, profile photo (if provided), and optional biographical details.
• Challenge Data: Habits you track, check-in history, streak data, and challenge activity.
• Social Data: Friend connections, group memberships, and messages within challenges.
• Device Information: Device type, operating system version, and push notification tokens.
• Usage Data: How you interact with the app, features you use, and app performance data.

3. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain our Service
• Process and manage your account registration
• Enable social features like challenges and friend connections
• Send push notifications and reminders you have opted into
• Provide AI coaching insights and personalized recommendations
• Improve and develop new features
• Detect and prevent fraud or abuse
• Respond to your support requests
• Comply with legal obligations

4. Data Storage and Security

Your data is stored securely using Supabase, a trusted cloud infrastructure provider. We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for data at rest
• Row-level security policies on our database
• Regular security audits and monitoring

While we take reasonable steps to protect your information, no security system is impenetrable. We cannot guarantee the absolute security of your data.

5. Sharing Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Friends/Challenge Participants: Your username, check-in activity, and streak data are visible to members of your challenges as intended by the social features.
• Service Providers: We work with Supabase for data storage, Apple for push notifications, and analytics providers — all bound by data processing agreements.
• Legal Requirements: We may disclose information if required by law, court order, or to protect rights and safety.
• Business Transfers: In the event of a merger or acquisition, your data may be transferred as a business asset.

6. Third-Party Services

Our Service integrates with the following third-party services:

• Supabase — database, authentication, and real-time features. Their privacy policy is available at supabase.com/privacy.
• Apple Push Notification Service (APNs) — for delivering push notifications to iOS devices.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a portable format.
• Opt-out: Disable push notifications at any time in your device settings or app preferences.

To exercise these rights, contact us at support@habitrival.com. We will respond within 30 days.

8. Children's Privacy (COPPA)

HabitRival is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@habitrival.com. We will promptly delete such information from our systems.

If you are between 13 and 18 years old, please review this policy with your parent or guardian before using HabitRival.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Service. You may delete your account at any time from the app settings, which will trigger deletion of your personal data within 30 days, except where we are required by law to retain certain information longer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date at the top and, where appropriate, sending you a push notification or email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at: