BeHealthy Privacy Policy

Last Updated: December 2025

Introduction

BeHealthy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

By using the App, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

When you create an account or use the App, we may collect the following personal information:

• Account Information: Email address, password (encrypted)
• Profile Information: First name, last name, age, gender, height, weight, activity level, health goals
• Health Data:
  • Blood pressure readings (systolic, diastolic, pulse)
  • Blood glucose/sugar readings
  • Weight measurements
  • Food logs (descriptions, calories, macronutrients, meal photos)
  • Medication reminders and logs
  • Injectable medication logs
  • Daily task completions
  • Health symptoms and notes

Camera and Photos

The App uses your device's camera for the following purposes:

1. Health Device Scanning: To scan readings from blood pressure monitors and glucose meters. Images are processed on-device using OCR technology to extract numerical values. Raw camera images are not stored; only the extracted health values are saved.
2. Profile Photos: To set a profile picture for your account. Photos are stored securely and can be deleted at any time.
3. Food Logging: To capture photos of meals for food logging and nutritional tracking. These photos may be temporarily processed to estimate nutritional information and are stored with your food logs.

Camera Permission: The App requires camera permission only when you choose to use camera-based features. You can use the App without granting camera access, but certain features (scanning health devices, profile photos, food photos) will be unavailable.

Automatically Collected Information

• Device Information: Device type, operating system, app version
• Usage Data: App features accessed, time spent in the App, crash reports
• Local Storage: Data is stored locally on your device for offline functionality

Biometric Data

If you enable biometric authentication (Face ID, Touch ID, or fingerprint), biometric data is stored securely on your device and is never transmitted to our servers. We use device-native biometric authentication services that do not share biometric data with third parties.

How We Use Your Information

We use the collected information for the following purposes:

1. Core Functionality: To provide and maintain health tracking features, medication reminders, and personalized insights
2. Account Management: To create and manage your account, authenticate logins, and provide customer support
3. Health Insights: To generate charts, trends, and insights from your health data
4. Gamification: To track streaks, award badges, and provide motivational features
5. Data Synchronization: To sync your data across devices (when cloud sync is enabled)
6. Service Improvements: To analyze usage patterns and improve the App's functionality
7. Communication: To send you important updates about the App (with your consent)

Data Storage and Security

Local Storage

The App uses a local-first architecture, meaning your data is primarily stored on your device. Most features work completely offline, and your data remains on your device even without internet connectivity.

Cloud Storage (Optional)

When you create an account and enable cloud sync, your data is securely stored on Supabase (our cloud service provider). Cloud sync allows you to:

• Access your data across multiple devices
• Backup your health information
• Restore data if you switch devices

Cloud sync is optional. You can use the App as a guest user with data stored only locally on your device.

Security Measures

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data in transit is encrypted using HTTPS/TLS
• Secure Authentication: Passwords are encrypted and never stored in plain text
• Row-Level Security: Database access is restricted using row-level security policies
• Secure Storage: Sensitive data is stored using platform-native secure storage mechanisms
• Regular Updates: We regularly update the App to address security vulnerabilities

Data Retention

• Active Accounts: We retain your data as long as your account is active
• Deleted Accounts: When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes
• Guest Accounts: Guest account data is stored locally on your device and can be deleted by uninstalling the App

Third-Party Services

Supabase

We use Supabase as our cloud database and authentication provider. Supabase stores your data securely and complies with industry-standard security practices. You can learn more about Supabase's privacy practices at: https://supabase.com/privacy

OpenAI (Optional)

If you use the food logging feature with photo analysis, your food photos may be processed by OpenAI's API to estimate nutritional information. This processing is optional and only occurs when you explicitly use the photo analysis feature. Images are sent securely to OpenAI and are subject to OpenAI's privacy policy: https://openai.com/policies/privacy-policy

Other Third-Party Services

• Google Play Services (Android): For text recognition and app functionality
• Apple Services (iOS): For app functionality and optional HealthKit integration

Your Rights and Choices

You have the following rights regarding your personal information:

1. Access: You can access your data at any time within the App
2. Correction: You can update or correct your information in the App settings
3. Deletion: You can delete your account and all associated data through the App settings
4. Data Export: You can export your health data in standard formats (PDF, CSV)
5. Camera Permission: You can revoke camera permission at any time through your device settings
6. Cloud Sync: You can disable cloud sync at any time, which will keep your data stored only locally
7. Biometric Authentication: You can enable or disable biometric authentication in App settings

Guest Mode

The App supports guest mode, allowing you to use the App without creating an account. In guest mode:

• All data is stored locally on your device
• No data is transmitted to our servers
• You can switch to an account later and link your guest data

Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have that information deleted.

International Data Transfers

If you use cloud sync, your data may be transferred to and stored on servers located outside your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the App and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to know what personal information we collect, use, and disclose
• Right to Delete: You have the right to request deletion of your personal information
• Right to Opt-Out: You have the right to opt-out of the sale of personal information (we do not sell personal information)

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: You have the right to access your personal data
• Right to Rectification: You have the right to correct inaccurate personal data
• Right to Erasure: You have the right to request deletion of your personal data
• Right to Restrict Processing: You have the right to restrict how we process your data
• Right to Data Portability: You have the right to receive your data in a portable format
• Right to Object: You have the right to object to certain processing activities

To exercise these rights, please contact us using the information provided below.

Contact Us

Consent

By using the App, you consent to our Privacy Policy and agree to its terms. If you do not agree with this policy, please do not use the App.

---

This Privacy Policy is effective as of the date listed above and applies to all users of the BeHealthy mobile application.