📋 Quick Summary: We collect only what's needed to track your habits. We never sell your data, never store your raw phone number, and you can delete everything at any time by texting "DELETE MY DATA" to Buddy.
1. Introduction
Welcome to Buddy ("we," "our," or "us"), a WhatsApp AI habit coach operated by ThemeInnov8. We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information.
This Privacy Policy explains how we handle your data when you use Buddy via WhatsApp. By messaging the Buddy WhatsApp number, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
When you use Buddy, we receive the habit messages you send via WhatsApp. Specifically:
- Habit messages: The text content of messages you send to track habits (e.g., "ran 5km", "no coffee today").
- Anonymized account ID: We compute a one-way SHA-256 hash of your WhatsApp phone number. Your raw phone number is never stored. This hash is used solely to associate your messages with your habit history.
2.2 Automatically Collected Data
When you interact with Buddy, we automatically collect:
- Message timestamps
- Habit categories and logged actions (derived from your messages)
- Streak counters and progress metrics
2.3 What We Do NOT Collect
- Your name
- Your email address
- Your location or GPS data
- Your contacts or address book
- Photos, camera, or microphone data
- Your raw phone number (only a one-way hash is stored)
- IP addresses or device identifiers
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Identify your account across sessions | Hashed phone ID (never the raw number) |
| Track habits and maintain streaks | Habit log entries, timestamps |
| Send AI-generated replies and nudges | Your messages, habit history |
| Generate weekly summaries and insights | Aggregated habit logs |
| Improve AI response quality | Anonymized, aggregated usage patterns only |
4. Information Sharing
4.1 With Service Providers
We share data with trusted third parties who help us operate Buddy:
- Firebase / Google Cloud: Authentication, Firestore database, and Cloud Functions for message processing.
- WhatsApp Business Cloud API (Meta): Message delivery only. We do not control Meta's data handling — see Meta's Privacy Policy.
- Google Vertex AI / Gemini: AI responses. Messages sent to the LLM API are not retained by Google per their API terms.
4.2 We Do NOT
- ❌ Sell your personal information to third parties
- ❌ Share your data with advertisers
- ❌ Use your data for targeted advertising
- ❌ Store your raw phone number
- ❌ Share data with other users
5. Data Security
We implement industry-standard security measures to protect your data:
- Phone numbers hashed with SHA-256 before any storage — raw numbers are discarded immediately
- All data encrypted in transit (HTTPS/TLS)
- Firestore security rules restrict access to authorized Cloud Functions only
- No third-party analytics tools have access to personally identifiable data
- Regular security reviews of our Firebase configuration and Cloud Function permissions
While we strive to protect your information, no method of internet transmission is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your information as follows:
- Habit logs: Retained while your account is active
- Streak history: Retained while your account is active
- Anonymized account ID: Deleted within 30 days of an account deletion request
- Aggregated anonymous stats: May be retained indefinitely — these cannot be linked back to any individual
7. Your Rights and Choices
7.1 Access
Text "My Data" to Buddy on WhatsApp to receive a summary of your tracked habits and streak history.
7.2 Correction
Text "Correct [habit] to [value]" to Buddy to update a habit log entry.
7.3 Deletion
You can delete all your data at any time:
- Instant: Text "DELETE MY DATA" to Buddy — you'll receive confirmation within seconds.
- By email: Send a request to theme.innov8@gmail.com — processed within 30 days.
- Dedicated page: Visit our Data Deletion page for full instructions.
7.4 Opt-Out of Nudges
Text "Stop nudges" to Buddy to disable proactive reminder messages at any time.
7.5 Stop Using Buddy
Simply stop messaging Buddy. No further messages will be sent unless you opt into nudges, which you can disable as described above.
8. Children's Privacy
Buddy is not intended for users under the age of 13. We do not knowingly collect data from children under 13. If you believe your child has used Buddy, please contact us at theme.innov8@gmail.com and we will delete their data immediately.
9. International Data Transfers
Your data may be processed in countries other than your own, including the United States, where our service providers (Google/Firebase, Meta) operate. We ensure appropriate data processing agreements are in place for such transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Sending a notice via WhatsApp to active users
- Updating the "Last Updated" date at the top of this page
Your continued use of Buddy after changes constitutes acceptance of the updated policy.
11. Third-Party Services
Buddy integrates with the following third-party services, each with their own privacy policies:
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the CCPA:
- Right to know what personal information we collect
- Right to delete your personal information
- Right to opt-out of sale of personal information — we do not sell data
- Right to non-discrimination for exercising these rights
13. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have additional rights under GDPR:
- Right to access your data
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
Our legal basis for processing your data is your consent (by choosing to message Buddy) and the performance of our service contract with you.
14. Data Protection Officer
For privacy-related inquiries or to exercise your rights, contact us:
📬 Contact Us
Email: theme.innov8@gmail.com
WhatsApp: Text "Help" to Buddy
Subject line: "Privacy Request — Buddy"