Privacy policy

Who we are

Small Habits by Maleja ("Small Habits", "we") is a wellness app: training, nutrition and habits, with a coach. For any privacy matter email us at smallhabitsbymaleja@gmail.com.

What we collect

• Account: name, email and password (stored hashed, never in plain text), or your Google identifier if you sign in with Google.
• Profile and progress: goal, weight, height, completed workouts, meals you log, progress photos and messages with your coach.
• Meal photos: if you use the photo feature, the image is sent to our AI provider only to estimate calories and is not kept in our storage.
• Wearables and health: only if you connect a device (Google Health, Apple Health), we read steps, resting heart rate, active calories, sleep and workouts. We never use them for advertising.
• Challenge sign-up: phone, shipping address, goal, level and any health condition you choose to share.
• Payments: processed by Stripe (or Apple / Google in the apps). We never see or store your card; we only know your plan and its status.

How we use it

• To provide the service: your workouts, meal plans, log, progress and chat with your coach.
• So your coach can support you: she sees your progress, meals, progress photos and messages.
• Support, security (preventing abuse and unauthorized access) and legal compliance.
• We do not sell your data or use it for third-party advertising.

Who we share it with

• Only service providers that run the app, under contract: Vercel (hosting and file storage), Neon (database), Stripe (payments), Anthropic (AI for calories and the assistant), Google (sign-in and wearables, if connected), Cal.com (session booking, if used).
• Your coach, who is responsible for supporting you.
• Authorities, only when required by law.

How long we keep it

While you have an account. If you delete it, we erase your profile, logs, photos and messages immediately; technical backups are overwritten within 30 days at most. Payment records may be kept as long as tax law requires.

Your rights

• You can view and correct your data in My profile, request a copy or ask us to delete it by emailing smallhabitsbymaleja@gmail.com.
• You can delete your account yourself at any time: My profile → Delete my account.
• If you live in California or the European Union you also have CCPA / GDPR rights (access, deletion, portability, objection); we handle them at the same email.

Children

The app is for people 18 and over. We do not knowingly collect data from minors.

Security

Encrypted connection (HTTPS), hashed passwords, photos in private storage reachable only with a session, and limits on repeated sign-in attempts. No system is 100% secure; if we detect an incident affecting you, we will let you know.

Changes

If we change this policy we will tell you in the app. The date above shows the latest version.