Privacy Policy

Beliefit is operated by Limitless Labs Limited, a company incorporated in Hong Kong under Companies Registry number 80767537, whose registered office is at 100–106 Third Street, Sai Ying Pun, Hong Kong (“Beliefit”, “we”, “us”, “our”). We are the data controller for the personal data described in this policy, which explains what we collect, how we use it, and your rights.

What We Collect

Account information: When you create an account, we collect your email address. If you sign in with Apple or Google, we receive the name and email associated with that account (or a private relay address if you use Apple’s Hide My Email feature).

Usage data: We store your course progress and session completions so you can pick up where you left off.

Analytics and diagnostics: We record how the app is used — screens viewed and actions such as starting a session or completing a course — along with crash and error reports. These records are linked to your account using your account identifier only. They never include your email address or the content of your practice.

Local data: Downloaded course content is stored on your device and is not transmitted to our servers. Daily reminders are scheduled on your device by iOS or Android; we do not receive them and they are not sent from our servers.

How We Use Your Data

We use your data to provide and improve the Beliefit experience:

• To authenticate your account and keep you signed in
• To save and sync your course progress across sessions
• To deliver course content
• To understand which features are used, so we can improve the app
• To diagnose crashes and fix bugs
• To manage subscriptions and restore purchases, where you buy one

We do not use your data for advertising, or sell it to anyone. We do not build profiles of you for any purpose beyond the app’s own functionality and improvement.

Third-Party Services

We use Supabase to securely store your account information and course progress. Supabase acts as our data processor and does not use your data for their own purposes. You can review their privacy practices at supabase.com/privacy.

We use Apple and Google sign-in services. When you choose to sign in with these providers, their respective privacy policies apply to the authentication process.

We use PostHog for product analytics, to understand which parts of the app are used. Events are linked to your account identifier only — we do not send PostHog your email address or any other directly identifying information. Our PostHog data is hosted in the European Union. See posthog.com/privacy.

We use Sentry for crash and error reporting, so we can find and fix problems in the app. Reports are linked to your account identifier only, and Sentry is configured not to collect personally identifying information. Our Sentry data is hosted in the European Union. See sentry.io/privacy.

We use RevenueCat to manage subscriptions and restore purchases. RevenueCat receives your account identifier and your subscription status. Payments themselves are handled by Apple or Google — we never see or store your card details. See revenuecat.com/privacy.

These companies act as our processors: they handle data on our instructions and are not permitted to use it for their own purposes. We do not sell your personal data, and we do not share it with anyone beyond the processors listed above.

International transfers: Because these services operate internationally, your data may be processed outside the country you live in. Where that happens, we rely on our providers’ standard contractual protections to keep your data safeguarded.

Data Storage and Security

Your data is stored securely on Supabase’s infrastructure. We use industry-standard security practices including encrypted connections and secure authentication protocols.

Your Rights

Access your data: You can view your course progress and account information within the app.

Delete your account: You can delete your account from within the app at any time. This permanently removes your email, authentication credentials, and all course progress from our servers, and erases your customer record held by RevenueCat. If you have an active App Store subscription, deleting your account does not cancel it — cancel it with Apple in your device’s subscription settings. Locally downloaded content can be removed by deleting the app.

Contact us: For any privacy-related questions or requests, email us at help@beliefit.app.

Children’s Privacy

You must be at least 16 to create a Beliefit account, as set out in our Terms of Use. Beliefit is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

If we make material changes to this policy, we will update the “Last updated” date above. Continued use of Beliefit after changes constitutes acceptance of the updated policy.

Contact

Beliefit is operated by Limitless Labs Limited, a company incorporated in Hong Kong (Companies Registry number 80767537), registered office: 100–106 Third Street, Sai Ying Pun, Hong Kong. We are the data controller for the data described here.

If you have questions about this privacy policy, or wish to exercise any of your rights, contact us at help@beliefit.app.