MotionHabit Privacy Policy
Local accounts and cloud accounts
MotionHabit supports a local account, stored only on your device, or a cloud account backed by Supabase Authentication. Cloud accounts sync your profile, preferences, consent record, weight history, food diary, workout history, water logs, and sleep entries to Supabase's servers so they are available across devices. A local account never leaves your device.
What is stored, and where
MotionHabit always keeps an operational copy of your data in a local database on your device. If you use a cloud account, the same categories of data (never your password) are additionally stored in this app's Supabase project, protected by row-level security so only your own account can read or write your rows.
Health, fitness, and step data
If you enable step tracking, MotionHabit reads daily step counts from your phone's own pedometer, or from Health Connect (Android) or Apple Health/HealthKit (iOS) where available. Step data is stored the same way as your other fitness data. MotionHabit never writes data back to Health Connect/HealthKit.
Sleep entries
If you choose to log sleep, MotionHabit stores the bedtime and wake time you enter manually, the duration derived from them, the date you woke up, and an optional 1-5 quality rating and note. Sleep tracking is for general wellness only; it is not a diagnosis or treatment, and MotionHabit does not read sleep data from any wearable, Health Connect, or HealthKit. Entries are always stored on your device. Sleep data for signed-in cloud-account users is backed up periodically when synchronization is available; backup timing may vary based on connectivity, app activity, and retry conditions. You can delete any entry individually, and deleting your account removes your Sleep data from your device and from the cloud. Exports include the Sleep entries you have not deleted. Sleep data is never sold. A local account’s sleep entries never leave your device.
Subscriptions and purchase processing
Paid plans are billed through Google Play Billing. MotionHabit uses RevenueCat to manage subscription entitlements, identified by an app-generated account ID — never your name or email. RevenueCat and Google Play independently retain purchase/subscription records under their own policies.
No advertising, no analytics, no data sale
MotionHabit includes no advertising or analytics SDK, and never sells or shares your data with third parties for their own marketing purposes.
Third-party service providers
Supabase (cloud authentication and storage), RevenueCat (subscription entitlement processing), and Google Play Billing (payment processing) each process data on MotionHabit's behalf, only for the purpose described above.
Data export and retention
You can export your own data (including the sleep entries you have not deleted) as a JSON file at any time from Settings inside the app. Local data is retained until you delete it or uninstall the app; cloud data is retained until your cloud account is deleted (see below). RevenueCat and Google Play retain purchase/subscription records under their own separate policies.
Account deletion
You can delete your account and its associated data from Settings inside the app, or using the public Account Deletion page. Your RevenueCat purchase-history record is not currently deleted automatically as part of that action — see the Account Deletion page for how to have it removed on request. Deleting your account does not automatically cancel an active Google Play subscription.
Security practices
Cloud data is protected by Supabase row-level security and requires an authenticated session for every request. Local account passwords are stored only as salted hashes. MotionHabit does not claim HIPAA compliance, GDPR certification, end-to-end encryption, or any formal security certification.
Estimates, not medical advice
Calorie targets, activity estimates, step counts, and other fitness calculations are estimates for general guidance only, not medical advice, and are not reviewed by a licensed medical or fitness professional.
Changes to this policy
Updates to this policy will be published here and at the same effective date. Questions: privacy@motionhabit.app.