Privacy Policy for HABITATT

1.Introduction

Welcome to HABITATT, a digital healthcare platform owned and operated by GOLDENKIWI PRIVATE LIMITED ("Goldenkiwi", "Company", "we", "our", or "us").

Goldenkiwi Private Limited is the legal owner, developer, and operator of the HABITATT platform. HABITATT is a healthcare technology product designed to assist users through AI-powered health insights, nutrition guidance, health tracking, wellness management, and related digital health services.

This Privacy Policy explains how we collect, use, process, store, protect, disclose, and otherwise handle your personal information when you access or use the HABITATT mobile application, website, APIs, and related services (collectively referred to as the "Platform").

We recognize that health information is among the most sensitive categories of personal data. We are committed to protecting your privacy and handling your information responsibly in accordance with applicable laws.

By accessing or using HABITATT, you acknowledge that you have read and understood this Privacy Policy.

2.Company Information

Throughout this Privacy Policy, references to "HABITATT" refer to the software product operated by GOLDENKIWI PRIVATE LIMITED.

3.Scope

This Privacy Policy applies to:

• HABITATT Mobile Applications
• HABITATT Website
• HABITATT APIs
• AI-powered Health Analysis
• Nutrition Services
• User Accounts
• Customer Support
• Push Notification Services

This Privacy Policy applies worldwide unless superseded by mandatory local privacy laws.

4.Definitions

Personal Data

Information that identifies or can reasonably identify an individual. Examples include:

• Name
• Email address
• Phone number
• Profile photograph
• Date of birth

Sensitive Health Information

Information relating to your health, medical condition, nutrition, symptoms, allergies, laboratory information, AI-generated reports, body images submitted for health analysis, and other wellness-related information.

Processing

Any operation performed on personal information including collection, storage, analysis, transmission, retrieval, modification, deletion, anonymization, or destruction.

Platform

The HABITATT application, website, backend services, APIs, AI services, and associated infrastructure.

5.Eligibility

HABITATT is intended for individuals aged 16 years or older. Users under the age of 16 may not create an account or use the Platform without authorization where permitted by applicable law.

If we become aware that information has been collected from a child below the applicable age threshold without proper authorization, we will take reasonable steps to delete such information.

6.Information We Collect

Depending on how you use the Platform, we may collect the following categories of information.

A. Account Information

• Full Name
• Email Address
• Mobile Number
• Date of Birth
• Gender
• Country
• Profile Photo
• Authentication Provider

B. Authentication Information

You may sign in using one or more authentication providers including: Email & Password, Google Sign-In, Apple Sign-In, and Firebase Phone Authentication (OTP). Authentication services are provided through Google Firebase Authentication. Passwords are never stored in plain text by the Company.

C. Health Information

To provide AI-assisted wellness services, we may collect information including:

• Symptoms
• Medical history voluntarily provided
• Allergies
• Lifestyle information
• Food preferences
• Diet records
• Medication information
• Health goals
• Body measurements
• Progress history
• AI-generated assessments

Because this information relates to your health, it is treated as sensitive personal information.

D. Images and Media

You may voluntarily upload photographs for AI-assisted health analysis (e.g., skin, eye, nail, tongue, or other body images). Uploaded media is securely stored using Cloudinary and remains associated with your account until deleted or your account is deleted in accordance with this Privacy Policy.

E. AI Processing

When you submit an image or health-related information for AI analysis:

• Your uploaded image may be securely transmitted to Google Gemini for processing.
• AI processing is used solely to generate health-related insights and reports requested by you.
• We instruct our AI service providers to process your submissions only for the purpose of providing the requested functionality.

F. Device Information

We may automatically collect device model, manufacturer, OS, app version, language, time zone, crash logs, IP address, push token, and network information.

G. Usage Information

We collect information about features used, session duration, screens visited, interaction history, app performance, and diagnostics to improve the Platform.

H. Analytics

We use Firebase Analytics, Google Analytics, and Firebase Crashlytics to understand application performance and diagnose technical issues.

7.How We Use Your Information

• Creating and managing your account.
• Providing AI-assisted health analysis.
• Generating personalized health reports.
• Maintaining your health history and wellness records.
• Delivering personalized recommendations and nutrition guidance.
• Improving the Platform and user experience.
• Monitoring service performance and security.
• Detecting fraud, abuse, and unauthorized access.
• Sending service-related notifications and important updates.
• Responding to customer support requests.
• Complying with applicable legal obligations.
• Protecting the rights, safety, and security of our users and the Company.

We do not sell your personal information to third parties.

8.Where and How Your Information is Stored

To provide the HABITATT Platform, we utilize trusted cloud infrastructure and service providers that comply with recognized industry security standards.

9.DigitalOcean Infrastructure

HABITATT's backend infrastructure is hosted on secure cloud servers provided by DigitalOcean. Stored data includes user profiles, health history, AI reports, nutrition records, audit logs, and operational records. Servers are protected using firewalls, encrypted communications, and strict access management controls.

10.Cloudinary Image Storage

Images uploaded through HABITATT are stored securely via Cloudinary. When an account is permanently deleted, associated images are scheduled for deletion in accordance with our retention procedures.

11.Google Gemini AI Processing

HABITATT uses Google Gemini AI services solely to generate health insights requested by you. Google processes submitted information in accordance with its applicable privacy and security practices.

12.Firebase Services

HABITATT utilizes Google Firebase for authentication, push notifications, analytics, and crash reporting. Credentials are managed securely and passwords are never stored in plain text.

13.Analytics and Performance Monitoring

We use Firebase Analytics, Google Analytics, and Firebase Crashlytics to evaluate usage metrics and fix bugs. Where possible, analytics data is aggregated or pseudonymized.

14.Push Notifications

We may send notifications for account security, updates, and health reminders. You can manage or disable push notifications at any time in your device settings.

15.Data Sharing

We do not sell, rent, or trade your personal information. Disclosures occur only to authorized service providers, for legal compliance, or in connection with corporate business transactions.

16.International Data Transfers

Your information may be transferred to and processed in countries outside your home jurisdiction, with appropriate safeguards implemented as required by law.

17.Data Security

We implement administrative, technical, and physical safeguards including HTTPS/TLS encryption, role-based access control, firewall protections, and regular monitoring.

18.Access Controls

Access to user health records is strictly restricted to authorized personnel based on operational necessity and the principle of least privilege.

19.Data Retention

We retain personal information only for as long as necessary to fulfill service delivery, resolve disputes, enforce agreements, and comply with legal requirements.

20.Your Privacy Rights

Depending on your jurisdiction, you may have the right to access, correct, update, or delete your personal information. Where available, you can delete your HABITATT account directly within the application. If you require additional privacy assistance or wish to exercise other privacy rights, please contact support@habitatt.com to exercise your rights.

21.Account Deletion

Users may permanently delete their HABITATT account directly within the application by navigating to:

Settings → Privacy & Legal → Delete Account

Before deletion, users will be asked to confirm their decision to prevent accidental account removal.

Once confirmed, we permanently delete your account and associated personal information from our production systems, including, where applicable:

Images stored through Cloudinary are permanently deleted as part of the account deletion process.

After deletion, your account cannot be recovered, and you will need to create a new account if you wish to use HABITATT again.

Certain encrypted backup copies or limited records may be retained for a temporary period where required for disaster recovery, legal obligations, fraud prevention, security, or regulatory compliance. Such retained information is not available for normal application use and is automatically managed according to our internal retention procedures.

22.Data Retention (Extended)

When data is no longer required, it is securely deleted or anonymized. Backup copies are overwritten according to disaster recovery schedules.

23.Cookies and Similar Technologies

We use cookies and SDKs to maintain sessions, store preferences, and analyze traffic. You can adjust your browser settings to restrict cookies.

24.Third-Party Services

Third-party services (Firebase, Gemini, Analytics, Cloudinary, DigitalOcean) operate under their respective privacy policies.

25.AI Services Disclaimer

AI-generated content is for informational purposes only and does not replace medical advice from a qualified healthcare professional.

26.Children's Privacy

HABITATT is intended for users 16 years of age or older. We do not knowingly collect data from children under 16.

27.Confidentiality

Strict organizational measures are maintained to protect user confidentiality across all systems and personnel.

28.Security Disclaimer

While industry-standard security measures are applied, no internet transmission is 100% secure.

29.Limitation of Liability

GOLDENKIWI PRIVATE LIMITED shall not be liable for indirect or consequential damages, to the maximum extent permitted by applicable law.

30.Technology Partner

The Platform is designed, developed, and maintained by FOX VISTA LLP on behalf of GOLDENKIWI PRIVATE LIMITED.

31.Changes to this Privacy Policy

We may update this policy periodically. Continued use of the platform after updates indicates acknowledgment of changes.

32.Governing Law and Jurisdiction

This policy is governed by the laws of India, with jurisdiction in Thrissur, Kerala.

33.Contact Us

34.Final Statement

Your privacy is important to us. GOLDENKIWI PRIVATE LIMITED is committed to handling your personal information responsibly and transparently.