Privacy Policy

1. Introduction

DailyWell ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

Please read this privacy policy carefully. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account information (email, name, profile picture)
• Habit tracking data (habits, check-ins, streaks)
• AI coaching conversations
• User preferences and settings
• Payment information (processed securely by Google Play)

2.2 Information Collected Automatically

• Device information (type, OS version, unique identifiers)
• Usage data (features used, time spent, crash logs)
• Health data (with your permission via Health Connect)

2.3 Health Connect Integration

With your explicit consent, we may access health data through Google Health Connect, including:

• Steps and physical activity
• Sleep data
• Heart rate (if available)
• Hydration logs

This data is used solely to enhance your habit tracking experience and is never sold to third parties.

3. How We Use Your Information

• To provide and maintain the Service
• To personalize your experience and AI coaching
• To process transactions and send related information
• To send you technical notices and support messages
• To respond to your comments, questions, and requests
• To analyze usage patterns and improve the Service
• To detect, prevent, and address technical issues

4. AI Coaching & Data Processing

Our AI coaching feature is powered by Claude (Anthropic). When you interact with the AI coach:

• Your conversation data is processed to provide personalized coaching
• We do not use your conversations to train AI models
• Conversation history is stored securely and encrypted
• You can request deletion of your conversation history at any time

5. Data Security

We implement industry-standard security measures including:

• OWASP Mobile Top 10 compliance
• Encryption at rest and in transit (TLS 1.3)
• Certificate pinning for API communications
• Secure authentication via Firebase Auth
• Regular security audits and updates

6. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: Firebase (authentication, database), Anthropic (AI coaching)
• Legal Requirements: When required by law or to protect rights
• Business Transfers: In connection with any merger or acquisition

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt-out of marketing communications
• Withdraw consent for Health Connect access

To exercise these rights, contact us at support@hekax.com

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us: