Privacy Policy

Baddie Protocol (“Baddie Protocol,” “we,” “us,” or “our”) provides a 75-day habit and accountability iOS app. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By creating an account or using the app, you agree to this policy.

• Account information.When you sign in with Apple, we receive a unique Apple-provided identifier and, if you choose to share it, your name and email address. You can use Apple’s “Hide My Email” relay at any time.
• Profile. A display name, optional bio, optional profile picture, an invite code we generate for you, and your device timezone.
• Protocol data. The challenge attempts you start, daily task completions, photos you attach to a day (e.g. workout, walk, or progress polaroids), and any notes you add.
• Social graph. The friends you add via invite code and the activity they can see (your day number and task completion state for the current attempt).

• Device & diagnostics. App version, iOS version, device model, and crash logs to fix bugs and improve stability.
• Usage events. Aggregated, non-identifying events about which screens you view and which actions you take, used to improve the product.

We do not use third-party advertising identifiers, and we do not sell your personal information.

• To operate the app and sync your progress across devices.
• To show your activity to friends you’ve added and to show their activity to you.
• To send you transactional notifications (e.g. daily reminders, friend activity) you have enabled in iOS settings.
• To diagnose crashes, prevent abuse, and improve the app.
• To comply with legal obligations.

We rely on a small number of vendors to run the app. Each processes data on our behalf under contract:

• Apple. Sign in with Apple, App Store distribution, and push notifications.
• Supabase. Hosted Postgres database, file storage for photos, and authentication.
• Crash & analytics tooling. Aggregated diagnostics and product analytics.

Information you generate during a challenge attempt — your day number, which of the day’s tasks you’ve completed, your display name, and your profile picture — is visible to friends you have explicitly added. We do not share your personal information with third parties for their own marketing.

• Access & export. Request a copy of your data by emailing the address below.
• Delete your account.Use “Delete account” in the app’s profile settings, or email us. We will delete your account and associated personal data within 30 days, subject to limited retention required by law.
• Notifications.Toggle push notifications in iOS Settings > Notifications > Baddie Protocol.

We keep your account data for as long as your account is active. When you delete your account, we remove your profile, friends relationships, challenge attempts, task completions, and uploaded photos. Backups are rotated within 30 days.

Baddie Protocol is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us and we will delete it.

We may update this policy from time to time. Material changes will be announced in the app or by email when applicable. The “Effective” date above reflects the latest revision.

Questions or requests? Email lucky123kit@gmail.com.