Privacy Policy

This policy describes what HWC (the app) actually collects and how it's handled, described plainly and matched to how the app is really built — not a generic template. If something below changes, this page will be updated.

What we collect

• Account info: the email address you sign up with.
• Health data you choose to log: sleep, activity, water, weight, and nutrition entries you enter yourself, plus any photo you choose to submit to the Food Scanner or Health Report Reader features.
• AI chat content: messages you send to the AI assistant, and its replies, so your conversation can be shown back to you.
• Basic device/usage analytics and crash reports (see below), to help us find and fix problems.
• Advertising identifiers, only if you see ads in the app (see "Advertising" below) — collected by our ad provider, not by us directly.

How your data is stored and protected

Your account and health data are stored in a managed Postgres database (Supabase), protected by row-level security policies enforced by the database itself: your account can only read or write rows belonging to your own user ID — this is a real, enforced technical control, not just a policy statement.

Who processes your data

• Supabase — authentication and database hosting.
• Cloudflare — runs the server-side AI requests (chat responses, food-photo and document-photo analysis) and app-related network traffic. Your AI chat messages and any photo you submit for analysis are sent to Cloudflare's AI infrastructure to generate a response; they are not stored by us beyond what's needed to show you your own conversation history.
• Crash/analytics tooling (Sentry for crash reports, PostHog for basic product analytics) — used to find bugs and understand feature usage. Known-sensitive fields are filtered out of crash reports before they're sent.

We do not sell your personal data.

AI features

Messages you send to the AI assistant, and any food or document photo you submit, are processed by an AI model to generate a response for you. These features are built with real, tested safety limits: the assistant is designed to avoid diagnosing conditions or recommending medication changes, and to encourage you to seek professional care when appropriate — but AI-generated text can still be wrong, so use judgment and check anything important with a professional.

Advertising

The app may show ads served by Google AdMob on some non-sensitive screens (never on sign-in/sign-up, health-input forms, camera capture, AI chat input, or health-report content). AdMob may collect an advertising identifier and other device signals to select and measure ads, under Google's own privacy practices. HWC Premium subscribers do not see ads.

Notifications

If you enable reminders, HWC schedules a local notification on your own device. In-app notifications you receive (e.g. from an administrator) are stored against your account the same way your other data is, protected the same way.

Your choices

• You can change your password at any time in Settings.
• You can turn notification reminders on or off in Settings.
• You can request deletion of your account and associated data at any time — see Contact. We will remove your account and profile; some data may be retained briefly where we're required to for security or legal reasons before final deletion.

Children

HWC is not directed at children and is not knowingly used to collect data from children.

Changes to this policy

If this policy changes materially, we'll update the date above.

Contact

Questions about this policy or your data: sarayuth939@gmail.com