Privacy Policy

Last updated: 19 September 2026

ZIYA is a symptom tracking app for perimenopause and menopause. This policy explains what we collect, why, where it is stored, and what you can do about it.

We have tried to write it in plain language. If anything here is unclear, ask us at the address in Contact below.

The short version

• Your health data is stored in your own account and is not sold, rented, or shared for advertising. Not now, not later.
• We run no advertising SDKs. Nothing in this app tracks you across other apps or websites. We use one privacy-focused product-analytics service (PostHog) to count which screens and features are used — it never receives your symptoms, notes, cycle dates or health data, and you can switch it off in Profile → Your data.
• The AI feature sends only anonymous averages — never your name, email, notes, or day-by-day entries.
• You can export everything or delete your account permanently from inside the app, at any time, without contacting us.

1. Who we are

ZIYA is operated by Aretexe LLC, 1942 Broadway St, Suite 314c, Boulder, CO 80302, United States.

For privacy questions, contact us at contact@ziya.health.

We are a United States company, but your health data is stored in the European Union (see section 6), and we apply the rights described in section 7 to every user regardless of where they live.

2. What we collect

We only collect what you enter or explicitly connect. There is no hidden collection.

2.1 Account information

2.2 Profile information (you provide during onboarding)

2.3 Health and tracking data (you enter it)

This is special category data under GDPR Article 9. We treat it accordingly.

• Daily symptom entries and their severity (1–5)
• Mood, sleep quality, and energy ratings
• Free-text notes you write
• Period dates and flow
• Supplements and medications you record

2.4 Wearable and health-platform data (only if you switch it on)

If — and only if — you enable the health sync toggle and grant permission, we read the following from Apple Health (iOS) or Health Connect (Android):

sleep duration and efficiency, resting and average heart rate, heart rate variability, body and basal body temperature, steps, active energy, and weight.

This is off by default. You can revoke it at any time in the app, or in your phone's own Health settings. On Android, revoking permission fully takes effect after the app restarts.

2.5 What we do NOT collect

• We do not collect your precise location.
• We do not access your contacts, photos, camera, or microphone.
• We do not use advertising identifiers.
• We do not run advertising or cross-app tracking SDKs. Our product analytics (see section 5) record screen views and feature use with counts and yes/no flags only — for example "a log was saved with 3 symptoms" — never the symptoms, severities, notes or dates themselves.
• We do not build advertising profiles, and we do not sell data.

2.6 The launch list on our website

If you leave your email address in the "Tell me at launch" form on ziya.health, we store that address and the date you left it. Nothing else. It is not linked to a ZIYA account or to any health data, and you do not need an account to leave it.

We use it to email you when ZIYA launches, and now and then before that with something useful about perimenopause or the app. We keep it until you unsubscribe or ask us to delete it. You can do either at any time, from any email we send or by writing to contact@ziya.health.

3. How we use your data

We use your data to:

1. Show you your own history, patterns, and correlations.
2. Generate your doctor-preparation report.
3. Produce personalised recommendations (see section 4).
4. Send the reminders you have switched on.
5. Operate your subscription.
6. Keep the service secure and working.

We do not use your health data for advertising, and we do not use it to train AI models.

4. The AI recommendations feature — read this carefully

If you use the AI recommendations feature, a summary of your data is sent to OpenRouter, which routes it to a language model provider (currently Google or Alibaba's Qwen models).

What is sent is deliberately minimal. The request contains only:

• your menopause stage and HRT status,
• the names of your top 5 symptoms with averaged severity scores,
• averaged sleep, mood, and energy scores,
• the number of days you have logged.

What is never sent:

• your name, email, or any account identifier,
• your free-text notes,
• your individual daily entries or any dates,
• your period data,
• any wearable or health-platform data.

The summary is computed on our server, not sent from your phone, and the model receives statistics rather than a record about an identifiable person.

The feature runs at most once per day. If you would rather no data be sent to a model provider at all, simply do not use the AI recommendations feature — every other part of ZIYA works without it.

Processing is governed by OpenRouter's privacy terms, available at https://openrouter.ai/privacy.

5. Who else processes your data

We use a small number of service providers ("processors"). We do not share your data with anyone else.

RevenueCat receives a pseudonymous subscriber ID and your purchase receipts. It receives no health data.

PostHog receives your account identifier (a random ID, not your name or email), the device type and app version, which screens you open and events such as "a log was saved" with counts and yes/no flags. It receives no symptoms, notes, cycle dates or any other health data. You can turn analytics off at any time in Profile → Your data, and the switch takes effect immediately.

Sentry receives a report when the app crashes or hits an error: the error itself, your device model, operating system and app version, and your account identifier (a random ID). Request bodies are stripped before sending, so it receives no symptoms, notes, cycle dates or any other health data.

Apple and Google process your payment. We never see or store your card details.

Transfers outside the EEA rely on the European Commission's Standard Contractual Clauses.

6. Where your data is stored

Your account and health data are stored in the European Union (Ireland), on infrastructure operated by Supabase on AWS.

Access is protected by row-level security: database rules enforce that each user can read and write only their own rows.

7. Your rights (all users, and GDPR)

Under GDPR and comparable laws you have the right to:

• Access your data — Profile → *Export my data* gives you a spreadsheet of everything you have logged.
• Delete your data — Profile → *Delete my account* permanently removes your account and all associated records. This is immediate and irreversible.
• Correct your data — every field is editable in the app.
• Withdraw consent — turn off health sync or notifications at any time.
• Object or restrict processing, and to data portability (the CSV export serves this).
• Complain to your national data protection authority.

You do not need to contact us to export or delete your data. Both are built into the app.

Legal basis

We process your health data on the basis of your explicit consent (GDPR Article 9(2)(a)), given when you create an account and enter data. Account and subscription data is processed to perform our contract with you.

You may withdraw consent at any time by deleting your account.

A launch-list email address (section 2.6) is processed on the basis of your consent (GDPR Article 6(1)(a)), given when you submit the form. You may withdraw it at any time by unsubscribing or writing to us.

EU and UK users

We are established in the United States, but GDPR applies to us because we offer this service to people in the EU and monitor health data they provide (Article 3(2)). Your rights above are the same as they would be with an EU-established provider.

8. If you live in the United States

Several US states — including Colorado (our home state), California, Virginia, Connecticut, and others — give residents specific privacy rights. We extend the following to all US users, not only those in states that require it.

You have the right to:

• Know what personal information we collect and how we use it — this policy describes all of it.
• Access a copy of your data — Profile → *Export my data*.
• Delete your personal information — Profile → *Delete my account*.
• Correct inaccurate information — every field is editable in the app.
• Opt out of the sale or sharing of personal information, and of targeted advertising and profiling.
• Not be discriminated against for exercising any of these rights. We do not degrade the service or change pricing because you exercised them.

Sale and sharing — a plain statement

We do not sell your personal information, and we never have. We do not share it for cross-context behavioural advertising. We do not use it for targeted advertising or for profiling with legal or similarly significant effects.

Because we do none of these things, there is no opt-out for you to exercise — but the rights above remain yours regardless.

Sensitive personal information

Health data is sensitive personal information under the Colorado Privacy Act and the California Consumer Privacy Act. We use it only to provide the service you asked for, as described in section 3. We do not use or disclose it for any purpose that would require a separate right to limit its use.

How to exercise these rights

Export and deletion are built into the app and need no request. For anything else, or to appeal a decision we make about a request, email contact@ziya.health. We will respond within 45 days and will tell you if we need an extension.

Colorado residents who disagree with the outcome of an appeal may contact the Colorado Attorney General. California residents may contact the California Privacy Protection Agency.

9. How long we keep your data

We keep your data for as long as your account exists.

When you delete your account, we remove your recommendations, health data, symptom logs, period logs, supplements and medications, and your profile, and then delete the account itself. This happens straight away and cannot be undone.

Backups are overwritten on a rolling basis and are purged within 30 days.

10. Security

• All traffic between the app and our servers uses TLS.
• Your session token is stored in the device's secure keystore (iOS Keychain, Android Keystore).
• Row-level security rules isolate each user's data at the database level.
• Passwords are stored as salted hashes.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authority as the law requires.

11. Children

ZIYA is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

12. Medical disclaimer

ZIYA is not a medical device and does not provide medical advice.

Its insights, correlations, reports, and AI recommendations are informational only. They are not a diagnosis and are not a substitute for a qualified clinician. Always consult a healthcare professional about symptoms or treatment, and never disregard or delay medical advice because of something you read in this app.

If you think you may have a medical emergency, contact your local emergency services immediately.

13. Changes to this policy

If we change this policy in a way that materially affects you, we will notify you in the app before the change takes effect. The date at the top always reflects the current version.

14. Contact

Aretexe LLC 1942 Broadway St, Suite 314c, Boulder, CO 80302, United States Email: contact@ziya.health

We aim to respond to privacy requests within 30 days.