Back

Privacy Policy

Last updated: 2026-08-31

Health Habit Coach (the "App") is operated by the App owner. We handle your personal data in line with the Data Protection Principles of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486). By using the App you confirm you have read and understood this policy.

1. What we collect

Account data: email address, display name; if you sign in with Google, the basic account details Google provides.

Health and lifestyle data you enter or upload: weight, height, gender, date of birth, blood pressure, pulse, body composition, sleep, steps, water, exercise, mood, stress, meals, habits, goals and daily routine entries.

Images: meal photos or screenshots from other health apps that you upload for analysis.

Voice: recordings made when you ask a spoken question (used for immediate transcription only).

Technical data: device language, interface preferences, and analytics data if you consent.

2. Why we use it

To provide check-ins, charts, trends, reminders and AI coaching suggestions.

To send reminders through the channel you choose.

With your consent, to understand feature usage in aggregate and improve the product.

To handle feedback and support requests you submit.

We do not use your health data for advertising and we do not sell personal data.

3. Transfers and third parties

Database and sign-in: Supabase (data stored on servers outside Hong Kong).

AI analysis, speech-to-text and read-aloud: large language model providers called through the Lovable AI gateway to generate summaries, analyse images and process speech. Content is sent to overseas servers during processing.

Web analytics: Google Analytics (only after you consent; you can withdraw at any time).

Weather: Open-Meteo (approximate area only, no health data).

WhatsApp reminders (optional): if you enable it, messages are delivered via the third-party service CallMeBot, which we do not operate. Please do not include sensitive health details in reminder text.

These transfers involve moving personal data outside Hong Kong. Enabling the relevant feature means you consent to that transfer.

4. Retention and deletion

Your records are kept until you delete them or delete your account.

You can export your data as CSV in Settings, and permanently delete your account and all related records in the Danger Zone.

Voice recordings are transcribed at the moment you ask and are not stored in our database.

5. Security

Row-level access control means each user can only read their own records; data is encrypted in transit over HTTPS.

Fingerprint / Face ID quick unlock uses the device's built-in WebAuthn mechanism: your biometric data stays on the device and is never sent to or stored on our servers.

No system can be guaranteed completely secure — please protect your password and device.

6. Your rights

Under Cap. 486 you may access and correct your personal data, and request deletion. Most of this can be done in the App (Settings → export data / delete account).

You can change or withdraw analytics consent at any time in Settings.

7. Age limit

The App is intended for users aged 18 or above. Anyone under 18 should use it only with the consent and supervision of a parent or guardian.

8. Medical disclaimer

The App is a lifestyle habit support tool. It is not a medical device and does not provide medical advice, diagnosis or treatment. AI-generated content may be inaccurate — please verify it.

For health concerns, persistently abnormal readings or emergency symptoms, consult a registered healthcare professional or call 999 immediately.

9. Contact

For questions about this policy or your personal data, contact us through Settings → Feedback and we will respond as soon as we can.