Privacy Policy

Bio Habit ("we", "our", or "us") is an environmental habit-tracking application. We are committed to protecting your privacy and processing your data responsibly. This Privacy Policy explains exactly what we collect, why, and how.

By using Bio Habit, you agree to this policy. If you have any questions, contact us at: biohabit.coreteam@gmail.com

• Account information: Your name and email address, provided when you register.
• Profile data: Username, bio, nationality, and avatar configuration you set in your profile.
• Habit & activity data: Habits you create, daily completions, streaks, points, levels, and achievements.
• Challenge photos: Photos you upload as proof of completing eco-challenges. These are stored securely and only visible to you.
• Community content: Posts, replies, poll votes, and community goal contributions you create voluntarily.
• Usage data: App interactions such as quiz results and challenge completions, used only to improve the app experience.

We do not collect your location, contacts, payment information, or any sensitive personal data beyond what is listed above.

• Authentication: To let you log in securely and keep your account safe.
• App functionality: To display your habits, track progress, calculate streaks and points, and show your environmental impact.
• Personalization: To show your name on leaderboards and generate personalized habit recommendations using AI.
• Community features: To power the shared community board, polls, and group goals.
• App improvement: Anonymous usage analytics to understand which features are most helpful.

All data is stored on secure, encrypted servers provided by Base44 (our app platform). We implement the following protections:

• All data is transmitted over HTTPS (TLS encryption).
• Passwords are never stored — authentication is handled by secure OAuth and token-based systems.
• Database access rules (row-level security) ensure each user can only access their own data.
• API endpoints validate user authentication on every request.
• Challenge photos are stored in private, access-controlled storage.
• We do not expose private user data in the app's frontend code.

We follow industry-standard practices to prevent unauthorized access, data leaks, and account takeover risks. No security system is 100% perfect; if you discover a vulnerability, please contact us immediately.

We use OpenAI's API to generate personalized habit suggestions and quiz questions. Your habit data (not your name or email) may be sent to OpenAI for this purpose. OpenAI's own privacy policy applies. We do not send any personally identifiable information to OpenAI.

We use Base44 as our backend platform for authentication, database, and file storage. Base44 processes data in accordance with applicable privacy laws.

We do not use Facebook Pixel, Google Ads, or any third-party advertising trackers.

You have the following rights at any time:

• Access: View all data we hold about you in your Profile page.
• Correction: Edit your username, bio, nationality, and avatar directly in the app.
• Deletion: Delete your account from Profile → Edit Profile → Delete Account. This permanently removes all your personal data, habits, achievements, and activity within 30 days.
• Data export or manual deletion request: Email us at biohabit.coreteam@gmail.com and we will respond within 14 days.

Community posts are linked to your account. When you delete your account, your posts are either deleted or anonymised in accordance with your request.

Bio Habit is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately so we can delete it.

For any privacy questions, data requests, or security concerns, please contact:

We will acknowledge your request within 48 hours and resolve it within 14 days.