Privacy Policy
Last updated: 2026-08-31
Health Habit Coach (the "App") is operated by the App owner. We handle your personal data in line with the Data Protection Principles of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486). By using the App you confirm you have read and understood this policy.
1. What we collect
Account data: email address, display name; if you sign in with Google, the basic account details Google provides.
Health and lifestyle data you enter or upload: weight, height, gender, date of birth, blood pressure, pulse, body composition, sleep, steps, water, exercise, mood, stress, meals, habits, goals and daily routine entries.
Images: meal photos or screenshots from other health apps that you upload for analysis.
Voice: recordings made when you ask a spoken question (used for immediate transcription only).
Technical data: device language, interface preferences, and analytics data if you consent.
2. Why we use it
To provide check-ins, charts, trends, reminders and AI coaching suggestions.
To send reminders through the channel you choose.
With your consent, to understand feature usage in aggregate and improve the product.
To handle feedback and support requests you submit.
We do not use your health data for advertising and we do not sell personal data.
3. Transfers and third parties
Database and sign-in: Supabase (data stored on servers outside Hong Kong).
AI analysis, speech-to-text and read-aloud: large language model providers called through the Lovable AI gateway to generate summaries, analyse images and process speech. Content is sent to overseas servers during processing.
Web analytics: Google Analytics (only after you consent; you can withdraw at any time).
Weather: Open-Meteo (approximate area only, no health data).
WhatsApp reminders (optional): if you enable it, messages are delivered via the third-party service CallMeBot, which we do not operate. Please do not include sensitive health details in reminder text.
These transfers involve moving personal data outside Hong Kong. Enabling the relevant feature means you consent to that transfer.
4. Retention and deletion
Your records are kept until you delete them or delete your account.
You can export your data as CSV in Settings, and permanently delete your account and all related records in the Danger Zone.
Voice recordings are transcribed at the moment you ask and are not stored in our database.
5. Security
Row-level access control means each user can only read their own records; data is encrypted in transit over HTTPS.
Fingerprint / Face ID quick unlock uses the device's built-in WebAuthn mechanism: your biometric data stays on the device and is never sent to or stored on our servers.
No system can be guaranteed completely secure — please protect your password and device.
6. Your rights
Under Cap. 486 you may access and correct your personal data, and request deletion. Most of this can be done in the App (Settings → export data / delete account).
You can change or withdraw analytics consent at any time in Settings.
7. Age limit
The App is intended for users aged 18 or above. Anyone under 18 should use it only with the consent and supervision of a parent or guardian.
8. Medical disclaimer
The App is a lifestyle habit support tool. It is not a medical device and does not provide medical advice, diagnosis or treatment. AI-generated content may be inaccurate — please verify it.
For health concerns, persistently abnormal readings or emergency symptoms, consult a registered healthcare professional or call 999 immediately.
9. Contact
For questions about this policy or your personal data, contact us through Settings → Feedback and we will respond as soon as we can.