Privacy Policy

Last updated: June 1, 2026

This Privacy Policy explains what information Habitmatch ("we," "us," the "app") collects, how we use it, and who we share it with. By using Habitmatch you agree to the practices described here.

This document is provided as a starting point and is not legal advice. Before public launch, have it reviewed against your jurisdiction's requirements (e.g. GDPR, CCPA) by a qualified professional.

Information we collect

Account information: your email address and the profile details you choose to provide (display name, profile photo, focus areas, and matching preferences).
Your activity data: the habits, to-dos, and screen-time goals you create; completion status, scores, streaks, and verification notes; and challenge participation.
Messages: messages you exchange with accountability partners and with the in-app AI buddy.
Device and technical data: a push-notification token and basic device identifiers needed to deliver notifications and operate the app.

Screen Time data is processed on your device using Apple's Family Controls / Device Activity frameworks. The app stores the goals and completion status you set; Apple does not share your raw underlying app-usage details with us.

How we use your information

To provide the core app: tracking habits, scoring, streaks, reports, and verification.
To match you with accountability partners and let you and your partners see each other's progress.
To send transactional emails (account confirmation, password reset) and push notifications.
To power the optional AI accountability buddy.
To maintain security and prevent abuse.

How we share your information

We do not sell your personal information. We share data with the following service providers only as needed to operate the app:

Supabase — our backend, authentication, database, and storage provider. Your account and activity data are stored here.
OpenAI — powers the optional AI accountability buddy. When you use it, relevant context such as your habit names, completion status, scores, and streaks may be sent to OpenAI to generate a response. OpenAI does not use API inputs to train its models by default.
Firebase (Google) — used for push-notification delivery (Firebase Cloud Messaging) and abuse prevention (Firebase App Check). We do not use Firebase for advertising.
Email delivery — transactional emails are sent through our email provider on our behalf.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the service.

Information visible to other users

Habitmatch is built around accountability partners. When you are matched with a partner, your profile and your shared progress (such as completion status, scores, and streaks relevant to your accountability relationship) are visible to that partner. Messages you send are visible to their recipient. Be mindful of what you include in your profile and messages.

Data retention and deletion

We retain your information for as long as your account is active. You can permanently delete your account at any time from Settings → Delete Account in the app, which removes your account and associated data. If you need help deleting your account, email support@habitmatch.app.

Security

We use industry-standard measures to protect your data, including encrypted connections and access controls. No method of transmission or storage is completely secure, but we work to protect your information.

Children's privacy

Habitmatch is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them.

Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above when we do. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email support@habitmatch.app.