Privacy Policy

Last updated: September 2026

What ZIYA collects

ZIYA collects only what you provide directly:

  • Account email address (for authentication)
  • Symptom logs with severity scores (0–5)
  • Mood, energy, and sleep quality scores (1–5)
  • Period and menstrual cycle data
  • Supplements and medications you choose to record
  • Free-text notes
  • Profile information: name, year of birth, menopause stage, HRT status

Apple Health and Health Connect data

If you choose to connect Apple Health (iOS) or Health Connect (Android), ZIYA may read the following with your explicit permission:

  • Sleep analysis (duration and stages)
  • Heart rate and resting heart rate
  • Heart rate variability (HRV)
  • Body temperature and basal body temperature
  • Step count and active energy burned
  • Weight

Data read from Apple HealthKit and Health Connect is never used for advertising or marketing, and is never shared with third parties for those purposes.

How we use your data

Your data is used solely to provide the ZIYA service: tracking symptoms, generating insights and correlations from your own records, producing your doctor-prep report, and personalising your experience.

AI features

The Ask ZIYA chat feature processes your messages through a third-party AI model provider (OpenRouter). Messages are sent for processing and are not used to train AI models. No personally identifiable information beyond what you type in the chat is sent to the provider.

What we never do

  • We never sell your health data
  • We never share your data with advertisers
  • We never use your health data for advertising or marketing
  • We never share HealthKit or Health Connect data with third parties for advertising purposes

Where data is stored

Your data is stored securely on Supabase infrastructure. All data is encrypted in transit (TLS) and at rest.

Your rights

  • Export: You can export all your data as CSV at any time from within the app.
  • Delete: You can delete your account and all associated data from inside the app (Profile → Delete Account). Deletion is immediate and complete.
  • GDPR: If you are in the EU or UK, you have the right to access, rectify, port, and erase your data. To exercise these rights, email contact@ziya.health.

Children

ZIYA is not intended for anyone under the age of 18. We do not knowingly collect data from children.

Contact

For any privacy questions or requests, email contact@ziya.health.