Privacy Policy for HABITAT AI

Last Updated: March 1, 2026

Introduction

HABITAT AI ("we," "our," or "us"), operated by Logic Line LLC, is committed to protecting your

privacy. This Privacy Policy explains how information is collected, used, and disclosed when

you use our AI-powered environment wellness application (the "App").

By using HABITAT AI, you consent to the data practices described in this policy.

Information Collection and Use

We do not directly collect, store, or process any personal data on our own servers. All user

data is securely managed through our third-party infrastructure providers: Supabase (database

and authentication) and Apple CloudKit (device sync). The following types of information are

handled through these services:

- Authentication credentials and email addresses (via Apple Sign-In or Google Sign-In)

- User profile information (display name, authentication provider)

- Environment scan analysis results (scores, detected elements, recommendations)

- Progress and gamification data (XP, level, streaks, achievements, missions)

- Subscription status (managed by RevenueCat and Apple)

During onboarding, you may provide personal preferences such as age range, living situation,

work style, sleep quality, and stress level. This data is stored locally on your device only

and is never transmitted to any server.

Environment Photo Processing

When you scan an environment, your device captures a photo for AI analysis. We take special

care to protect your privacy:

- Face detection runs entirely on your device using Apple's Vision framework

- Any detected faces are automatically blurred before the photo leaves your device

- Photos are compressed and resized on-device before transmission

- Photos are sent via encrypted connection (TLS/SSL) to Anthropic's Claude API for analysis

- Photos are not stored on any server — they are analyzed in real-time and discarded

immediately after

- Photos are never used to train any AI models

Third-Party Services

HABITAT AI relies on the following third-party services:

Supabase (Database & Authentication): Your account information, scan results, scores, and

achievements are stored on Supabase infrastructure hosted on Amazon Web Services. Supabase

processes data in accordance with their privacy policy and GDPR compliance standards. Access to

your data is protected by Row Level Security (RLS) — each user can only access their own data.

Anthropic Claude API (AI Analysis): Environment photos are sent to Anthropic's Claude API for

scientific analysis. Photos are processed in real-time and are not retained by Anthropic after

the API response is returned. Anthropic processes data in accordance with their data usage

policy.

RevenueCat (Subscription Management): RevenueCat manages subscription status and purchase

validation. RevenueCat receives your anonymous app user ID and purchase receipts from Apple.

RevenueCat does not receive your email, name, or other personal information.

Apple CloudKit (Data Sync): Your app data is automatically synced across your devices via

Apple's iCloud infrastructure, subject to Apple's privacy policy and your iCloud settings.

Apple Sign-In & Google Sign-In: Authentication is handled securely by Apple and Google

respectively. We receive only the information you authorize during sign-in (typically email and

display name).

We do not use any analytics, advertising, or crash reporting SDKs. We do not integrate any

tracking or behavioral profiling services.

Data Security

Your data is protected through multiple layers of security:

- All data transmission uses TLS/SSL encryption

- Database access is protected by Row Level Security (RLS)

- Authentication tokens are stored in your device's secure Keychain

- Supabase infrastructure provides encryption at rest via AWS standards

- iCloud data is encrypted by Apple's security infrastructure

- AI analysis requests are transmitted over encrypted connections

Your data may be stored in data centers located in various regions worldwide as part of the

cloud infrastructure provided by our service providers. By using the App, you consent to the

potential international transfer of your information.

Data Sharing

We do not sell, rent, or share your personal data with any third parties for marketing or

commercial purposes.

Your data is only shared with the third-party service providers listed above, strictly for the

purpose of operating HABITAT AI. Anonymous, aggregated score data is used to calculate

benchmarking percentiles so you can compare your environmental wellness with other users — no

personal information is included in this process.

Your Rights

You have the following rights regarding your data:

Access: You can view all your data within the app at any time.

Deletion: You can delete your account and all associated data from Settings → Account → Delete

Account. This permanently removes your data from our Supabase database within 30 days.

Portability: Your data synced via iCloud remains accessible through your Apple account.

Modification: You can update your profile information through the app.

Opt-out: You can stop using the app at any time. Uninstalling the app removes all local data

from your device.

Children's Privacy

HABITAT AI is not intended for use by children under the age of 13. We do not knowingly collect

personal information from children under 13. If you believe we have inadvertently collected

such information, please contact us so we can promptly delete it.

Health Disclaimer

HABITAT AI provides science-backed recommendations to improve your physical environments based

on peer-reviewed research. It is not a medical device and does not provide medical advice,

diagnosis, or treatment. The app is not HIPAA-compliant. Do not use HABITAT AI as a substitute

for professional medical or health advice.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes

by updating the "Last updated" date at the top of this policy. Your continued use of HABITAT

AI after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact us:

Logic Line LLC

Email: logiclinelabs@gmail.com

Address: 8 The Green, Suite A, Dover, DE 19901