Privacy Policy

This Privacy Policy describes how SteadfastChat ("we," "our," or "us") collects, uses, and shares information when you use our mobile application (the "App").

1. Information We Collect

Account and Profile Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored securely and never readable by us)
• Role (mentor or client)
• Profile photo (optional, uploaded at your discretion)

Communication Data

We facilitate real-time messaging between mentors and clients. Message content and attachments (including voice messages) are transmitted and stored through Stream Chat, our third-party messaging provider.

Habit Tracking Data

If you use the habit tracking features, we store:

• Habit names and settings (frequency, target counts)
• Daily habit completion logs

Device and Notification Data

With your permission, we collect your device's push notification token to send you real-time message notifications.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Enable real-time messaging between mentors and clients
• Power the habit tracking and progress features
• Send push notifications for new messages (only with your permission)
• Display profile photos within the App

We do not use your information for advertising or sell it to third parties.

3. Information Sharing

We share limited data with the following third-party service providers, solely to operate the App:

These providers are contractually obligated to protect your data and may not use it for their own purposes.

We do not share your data with any analytics providers, advertisers, or data brokers.

4. Permissions

The App requests the following device permissions:

• Camera — To take a profile photo. Used only when you choose to upload a photo.
• Photo Library — To select a profile photo from your device. Used only when you choose to upload a photo.
• Microphone — To record and send voice messages to your mentor or client.
• Push Notifications — To notify you of new messages. You can disable this at any time in your device settings.

5. Data Retention

We retain your account and activity data for as long as your account is active. You may request deletion of your account and all associated data by contacting us at the address below. Upon request, we will delete your data within 30 days.

6. Data Security

Your account is protected by password-based authentication managed by Supabase. Authentication tokens are stored in your device's encrypted secure storage and are never exposed in plaintext. We use HTTPS for all data in transit.

7. Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing

To exercise any of these rights, please contact us at the address below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this document. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact us at: