BodyKind Privacy Policy

1. Information We Collect

We collect only the information necessary to provide, improve, and secure the App.

a. Account Information

When you create an account, we may collect:

• Email address (including Apple relay emails if “Hide My Email” is used)
• Display name
• Account status (guest or verified)
• Subscription plan (free or premium)

b. Authentication Information

If you sign in using Apple or Google, we store:

• Your authentication provider ID
• A secure identifier linked to your account

Note: We do not store your passwords for third-party providers.

c. User Content

We collect content you choose to create inside the app, including:

• Reflections and journaling entries
• Mood check-ins
• Favorite or unhelpful affirmations
• Preferences and onboarding answers

Privacy Note: Your journaling entries and personal reflections are stored securely in our database. We employ strict access controls, and this data is never made public.

d. App Usage, Analytics & Device Data

We collect limited technical data needed to operate, analyze, and debug the app:

• Device installation ID
• App version & Platform (iOS, Android)
• Last active timestamps
• Analytics, Crash Data & Error Tracking: We use Google Firebase to collect anonymous usage data (such as screens visited and features used). We also use Sentry to monitor app performance and identify software errors (crashes or bugs) in real-time. This helps us fix bugs and improve app stability and user experience

e. Notifications & Reminders

We store reminder settings and notification history to deliver affirmations and reflection prompts according to your preferences.

f. Widget Preferences

If you enable widgets, we store:

• Widget type (lock screen or home screen)
• Refresh interval
• Content scope (e.g., favorites, category)

2. How We Use Your Information

We use your information only to:

• Provide and operate BodyKind
• Personalize affirmations and content
• Sync your data across your devices
• Deliver reminders and notifications
• Manage subscriptions and billing
• Provide customer support and fix technical issues
• Analyze app usage to improve features (via Firebase Analytics)
• Comply with legal obligations

We do not sell your personal data.

3. Subscriptions & Payments

BodyKind uses RevenueCat to manage subscriptions.

• We do not collect or store your payment card details.
• All payment processing is handled securely by the Apple App Store or Google Play Store.

4. Data Storage & Security

Your data is securely stored using Supabase, a managed cloud database provider. We utilize:

• Encryption: Data is encrypted in transit (HTTPS) and at rest (in the database).
• Access Controls: Strict policies ensure only authorized systems or personnel can access data for maintenance or support.

While we take reasonable steps to secure your information, no method of electronic storage is 100% secure.

5. Sharing of Information

We only share data with trusted third-party service providers required to run the app:

• Supabase: Secure data hosting and database management.
• RevenueCat: Subscription status management.
• Apple / Google: App distribution and payment processing.
• Google Firebase: For app analytics, usage tracking, and crash reporting.
• Sentry: For real-time error monitoring, crash reporting, and performance tracking to ensure app stability.
• OpenAI: For generating personalized content (see Section 6).

We never sell your data or share it with data brokers or advertising platforms.

6. AI & Automated Processing

BodyKind uses Artificial Intelligence (AI) to help us generate personalised affirmations.

• Processing: We send limited text input to our AI provider to generate a response.
• No Training: Your personal data and journal entries are not used to train third-party AI models.
• Privacy: Data sent to AI providers is used solely for generating the response and is not retained by them for their own service improvements.

7. Your Rights & Account Deletion

You have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your account: You can delete your account and all associated data directly within the app settings.
  • Go to Settings > Account > Delete Account.
• Withdraw consent where applicable.

Deletion Note: When you delete your account, your personal data is permanently removed from our active database.

8. Data Retention

We retain your data only as long as your account is active or as required by law. Once you request deletion:

• All personal data is removed from our live systems immediately.
• Backup systems are cleared within a commercially reasonable time frame (typically 30-90 days).

9. Children's Privacy

BodyKind is not intended for children under the age of 13. We do not knowingly collect personal data from children. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

10. International Users

If you use BodyKind outside your country of residence, your data may be processed in other countries (including the United States) in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are significant, we will notify you through the app or via email.

12. Contact Us

For any privacy-related questions, or to exercise your rights, please contact us at: bodykind.app@gmail.com