Privacy Policy

Last updated: August 2026

Hathaa handles sensitive health information. This policy explains exactly what we collect, why, and how you can control or delete it at any time from inside the app.

1. Who we are

Hathaa ("Hathaa", "we", "us") provides a mobile app for menstrual cycle tracking and related wellness insights. This policy covers the Hathaa iOS app and this website. Questions can be sent to support@hathaa.com.

2. What we collect

We only collect what the app needs to function:

Account info: name, email address, and (if you sign in with Google) your Google display name and profile photo, via Firebase Authentication.
Cycle & health data you enter: last period date, cycle length, period duration, symptoms, mood, energy levels, notes, birth year, self-reported diagnosed conditions (e.g. PCOS, thyroid, diabetes, endometriosis), pregnancy or menopause status if applicable.
Optional profile photo, if you choose to upload one.
Apple Health data, only if you explicitly connect it - used solely to improve cycle predictions inside the app. It is never used for advertising and never sold.
Partner sharing data, only if you opt in - see Section 5 below.
AI Coach conversations, if you use that feature - your message and relevant cycle context are sent to our server to generate a response.

We do not collect location data, browsing history, or advertising identifiers. This website does not use tracking cookies or third-party analytics.

3. How we use it

To generate your cycle predictions, phase information, and daily insights.
To power features you actively use - the AI Coach, home screen widget, doctor-visit reports, and partner sharing.
To sync your data across your own devices via your account.
To send account-related emails (password reset, email verification) and, if enabled, reminder notifications.

We do not use your health data for advertising, and we do not sell it to anyone.

4. Who we share it with

We use a small number of service providers to run Hathaa, each bound to only process data on our behalf:

Google Firebase - authentication, database (Firestore), and file storage. Data is encrypted in transit and at rest per Firebase's standard infrastructure.
Anthropic - powers the AI Coach and daily insight features. Relevant, minimal context (e.g. your current phase, logged symptoms) is sent to generate a response; Anthropic does not receive your name or email.
Apple - if you connect Apple Health, data flows through Apple's HealthKit framework under Apple's own privacy rules and your device-level permissions, which you can revoke at any time in iOS Settings.

We do not sell, rent, or share your data with advertisers, data brokers, or any other third party.

5. Partner sharing

Partner sharing is entirely opt-in. If you link a partner's account, you individually choose which categories of information they can see - period status, symptoms, and/or mood - via toggles in your Profile. Whatever you don't enable is never shared. Shared data is visible only to the one linked partner account, enforced at the database level, not just in the app's interface. You can revoke the link at any time, which immediately stops all sharing.

6. Your controls

Edit or delete any logged data directly in the app.
Delete your account entirely from Profile → Account settings - this permanently removes your logs, profile data, uploaded photo, and login credentials.
Disconnect Apple Health at any time via iOS Settings → Privacy → Health.
Unlink a partner at any time from the Partner Sharing screen.
Request a copy or deletion of your data by emailing support@hathaa.com.

7. Data retention

We retain your data for as long as your account is active, so the app can keep functioning. If you delete your account, associated data is deleted from our systems, aside from anything we're legally required to retain.

8. Children's privacy

Hathaa is not directed at, and is not knowingly used by, anyone under 16. If we learn that we've collected data from someone under that age, we'll delete it.

9. International users

Hathaa is developed in India and your data may be processed in India, the United States, or other countries where our service providers (Google, Anthropic) operate, under the safeguards those providers maintain.

10. Changes to this policy

If this policy changes materially, we'll update the "Last updated" date above and, for significant changes, notify you in the app.

11. Contact

Questions, requests, or concerns about your data: support@hathaa.com.

This policy describes our current data practices in plain language. It isn't a substitute for formal legal advice - if you need this reviewed for a specific regulatory regime (GDPR, HIPAA-adjacent obligations, India's DPDP Act, etc.), we'd recommend having a lawyer confirm it before your public launch.