Privacy Policy

Last updated February 17, 2026

myChallengeTribe is built on the principle of technology for good. That extends to how we handle your data. We collect only what we need, we never sell your information, and we give you full control over your account.

Information We Collect

Account information: When you create an account we collect your email address, display name, username, and optional profile photo. If you sign in with a magic link we only store your email.
Profile data: Any bio, timezone preference, or avatar you choose to add to your public profile.
Challenge activity: Check-in logs, streak data, XP, badges earned, enrollments, and your progress history. This data powers your dashboard, leaderboard rank, and AI coach recommendations.
Feed & social data: Posts, comments, reactions, and kudos you create in the activity feed.
Usage analytics: We use Google Analytics to collect anonymized page-view and event data (pages visited, features used, session duration). We do not track you across other websites.
Device information: Browser type, operating system, screen size, and IP address are logged automatically by our hosting provider for security and performance purposes.

How We Use Your Data

To operate the platform: Displaying your dashboard, calculating streaks and XP, populating leaderboards, and delivering AI coach responses.
To personalize your experience: Your challenge history and check-in patterns help the AI coach tailor advice to your stage of change.
To send notifications: We may send email notifications about streak reminders, badge achievements, or important account updates. You can opt out of non-essential emails at any time from your profile settings.
To improve the product: Aggregated, anonymized analytics help us understand which features are most valuable and where we can improve.
To maintain security: We log authentication events and monitor for unusual activity to protect your account.

How We Protect Your Data

All data is transmitted over HTTPS with TLS 1.3 encryption.
Passwords are hashed using bcrypt and are never stored in plain text. We also support passwordless magic-link authentication.
Our database is hosted on Supabase with row-level security policies that ensure users can only access their own private data.
We perform regular security reviews and follow OWASP best practices for web application security.
Employee and contractor access to production data is restricted on a need-to-know basis.

Your Rights & Choices

Access & portability: You can view all your personal data from your profile and dashboard at any time.
Correction: You can update your display name, bio, avatar, and email from your profile settings.
Deletion: You may request complete account deletion by contacting us. We will remove your personal data within 30 days, except where retention is required by law.
Opt-out of analytics: You can use browser-based tools such as ad blockers or the Google Analytics opt-out extension to prevent analytics collection.
Cookie preferences: We only use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies.

Cookies & Local Storage

Authentication cookies: Secure, HTTP-only cookies that keep you signed in. These are essential for the platform to function.
Theme preference: A local storage value that remembers your light/dark mode choice.
We do not use advertising cookies, social media tracking pixels, or any third-party cookies beyond Google Analytics.

Third-Party Services

Supabase: Database hosting, authentication, and file storage. Their privacy policy is available at supabase.com/privacy.
Vercel: Application hosting and CDN. Their privacy policy is available at vercel.com/legal/privacy-policy.
OpenAI: Powers the AI coach feature. Conversations are sent to OpenAI's API for processing. We do not share your identity with OpenAI, and we do not use your data to train AI models.
Google Analytics: Anonymized usage analytics. You can opt out using the Google Analytics opt-out browser extension.

Contact & Updates

If you have questions about this privacy policy or your data, please contact us at privacy@mychallengetribe.com.
We may update this policy from time to time. When we make material changes, we will notify you by email or through a notice on the platform.
This policy was last updated on February 17, 2026.

Have questions? Learn more about us or reach out at privacy@mychallengetribe.com.