Privacy Policy
Last updated: 7 September 2026
What Happybara is
Happybara is a private journal for noticing patterns in meals, sleep, stress, and how your skin felt. It is not a medical device and does not diagnose conditions.
What we collect
When you create an account we store your sign-in identity (for example Google account id and email), a display name if you set one, and preference settings. When you use the journal we store the entries you choose to log — such as check-ins, meals, sleep, stress, skin observations, notes, food tags, and body areas.
Why we collect it
Journal entries exist only so you can keep a personal timeline, see patterns over your tracking period, and export your own records. Account details exist so you can sign in securely and sync across devices.
Legal basis for journal data
Health and symptom-related journal entries are special-category personal data under GDPR Article 9. We process them only with your explicit consent, given by a separate unchecked checkbox when you sign up or first use the service — not by accepting general terms alone. You can withdraw that consent at any time by deleting your account and data in Settings.
How we protect your entries
Sensitive journal details are encrypted on your device before they are saved. The decryption key stays on your device (and in any recovery key you choose to copy). Your account is also protected by database row security so other users cannot read your rows.
How long we keep data
We keep your account and journal while your account remains open. When you choose Delete account and data, we permanently remove your journal rows, related settings, and Auth account. Soft-delete flags are not used for health records.
Your copies and exports
You can download CSV or JSON exports from Settings (and additional formats from Data) so you keep ownership of your timeline and can share records with a specialist if you wish.
Analytics and third parties
We do not send meals, symptoms, notes, or other journal contents to product analytics, advertising, or crash-reporting tools. Sign-in is provided by Google OAuth through Supabase Auth. Your encrypted journal is stored in our Supabase database. Optional tip/donation links may open an external payment page; that page is separate from your journal.
Your rights
Depending on where you live, you may have rights to access, correct, export, or erase your personal data, and to withdraw consent. In Happybara you can export and permanently delete your account from Settings. For other requests, contact the operator of this Happybara instance.
Demo mode
If demo mode is enabled, sample data stays on this browser only and is cleared when you exit the demo or leave the site.