Privacy Policy

1.1 Information You Provide Directly

• Account Information: Name and email address collected at registration via email/password, Google Sign-In, or Sign in with Apple.
• Sleep Preferences: Your target sleep duration (in minutes) and desired wake time.
• Academic Data: Course names and colors, assignments (title, type, due date, completion status), and extracurricular activity schedules (name, day, start/end times).
• Support Messages: When you contact us or submit a feature request, we collect the topic, message body, and your email address.
• Referral Codes: If you apply or share a referral code, we record the association between referring and referred accounts.

1.2 Information Collected Automatically

• Sleep Log Data: Bedtime, wake time, and sleep duration — entered manually or imported from Apple HealthKit (iOS) or Health Connect (Android).
• App Usage Data: AI feature usage frequency tracked for rate-limiting purposes.
• Device Identifiers: Authentication tokens used to maintain your session securely.

1.3 Health Data

If you grant permission, we access sleep data from Apple HealthKit (iOS) or Google Health Connect (Android) solely to populate your sleep logs. We do not use health data for advertising or share it with third parties for advertising purposes. Health data is processed in accordance with Apple's and Google's respective health data policies.

1.4 App Blocking Data (iOS Only)

The App Blocking feature uses Apple's Family Controls framework and the Device Activity API. App selection data is stored locally on your device via an App Group container and SecureStore. We do not transmit your app selection list to our servers.

3.1 Service Providers

We use the following sub-processors to operate the Service:

• Convex, Inc. — Cloud database and backend infrastructure. Your account data, academic data, sleep logs, and support messages are stored on Convex servers.
• Google LLC (Gemini API) — Powers AI coaching responses. Queries you send to Mo are transmitted to Google's Gemini API. Review Google's Privacy Policy.
• Google LLC (Sign-In) — Optional authentication provider.
• Apple Inc. (Sign in with Apple) — Optional authentication provider.

These providers are contractually obligated to process your data only on our behalf and in accordance with this policy.

3.2 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or other governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

3.3 Business Transfers

If HammoFlow is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

7.1 Access and Correction

You may update your profile information (name, sleep goal, wake time) at any time within the app under Settings.

7.2 Account Deletion

You may request deletion of your account and associated data by contacting us at support@hammoflow.app. We will process your request within 30 days.

7.3 Notifications

You may disable push notifications at any time through the Notifications toggle in app Settings or through your device's system notification settings.

7.4 Health Data

You may revoke HealthKit or Health Connect access at any time through your device's system settings (iOS: Settings > Privacy & Security > Health; Android: Health Connect app). Revoking access will prevent future imports but will not delete previously imported sleep logs from your account.

7.5 California Residents (CCPA)

California residents have the right to know what personal information we collect, to request deletion of their information, to opt out of the sale of personal information (we do not sell personal information), and to non-discrimination for exercising these rights. To submit a request, contact us at support@hammoflow.app.

7.6 EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to lodge a complaint with your local supervisory authority. Our legal basis for processing your data is performance of a contract (to provide the Service) and, where applicable, your consent (for health data and notifications). To exercise your rights, contact us at support@hammoflow.app.