Privacy Policy

Last updated 19 October 2026

Praana is a personal wellness tracker. It reads health data you explicitly grant access to, uses it to show you your own trends, and does not sell it. This page is the same policy shown inside the app.

WHO WE ARE

Who We Are

  1. 1This policy explains what the Praana app and the orinthia.app website collect, why, who it is shared with, and the choices you have. It covers Praana on iPhone, iPad and Apple Watch, and on Android. Where the two differ, the clause says so.
  2. 2Praana is made by Tanmay Murlidhar Reddy, an individual developer established in Ireland, who is responsible (the ‘data controller’) for the data described here. Email: support@orinthia.app.
  3. 3Praana has no ads, does not sell or rent your data, and does not take payments. It is free and has no in-app purchases.

DATA WE COLLECT

Information We Collect

  1. 1Account: when you sign in with Apple (iPhone and iPad only), Google, or an email address and password, we receive your email address, a unique account ID and the name your account provides. We never see your Apple or Google password. Sign in with Apple can hide your real email behind a relay address, and Praana works normally if you do.
  2. 2Profile: your name, date of birth and biological sex are saved to your account in our database (Google Firebase) so they come back when you sign in again. On iPhone, the height, weight, fitness level and blood type you enter are saved too. Your date of birth is also used to apply the age limits below.
  3. 3Health details: data you allow from Apple Health or Health Connect, and what you type in yourself, such as period and symptom logs, medications, blood test results, water, caffeine, meals, mood, journal entries and workouts. This stays on your device except as described in the next sections.
  4. 4Usage analytics: which screens you open, which buttons you tap, settings you change, how much the AI features are used, errors, how long some actions take, and whether you allowed a permission. On iPhone some events include an amount you logged, such as water or caffeine. These events are not anonymous: on iPhone they carry your account ID, and on Android a random ID made on your phone, and either ID can be connected to your account and profile. Your name and email are not stored in the events. They are kept in our Firebase database, used only to improve Praana, never used for ads, and deleted when you delete your account. Google’s Firebase Analytics is not included in either app, and advertising IDs and cross-app tracking are not used.
  5. 5Feedback and bug reports you send with Report a Problem: your message and its category, the screen you were on, an optional screenshot, your device model, system and app version, language, a few technical settings (such as connection type and text size) and your account ID or random analytics ID. On Android, feedback also includes your profile name. These go to our own bug tracker (run on Cloudflare) and our Firebase database.
  6. 6Photos, only when you take or choose one: meal photos for food logging and gym-equipment photos for workout ideas are made smaller and sent to our AI provider to get a result. Form check, barcode scanning, blood-report scanning, QR codes and body progress photos are handled on your device and not uploaded. For a barcode, only the barcode number is sent to Open Food Facts to look up the product.
  7. 7Voice, only when you use the microphone (talking to Ara, or voice commands during a workout): your phone’s own speech service from Apple or Google turns your speech into text. Depending on your device and settings this happens on the phone or on Apple’s or Google’s servers. Praana itself does not record or upload audio.
  8. 8Device check: to block fake requests, Firebase App Check asks Apple or Google to confirm that a request comes from a genuine copy of Praana. This uses a device token, not your personal details.
  9. 9Emergency contact: if you add one, their name and email stay on your device and are printed on your Emergency Med Card. Praana never contacts them.

HEALTH DATA

Apple Health & Health Connect

  1. 1Praana reads or writes health data only after you allow each type in Apple Health (iPhone, iPad, Apple Watch) or Health Connect (Android). You can change this at any time in the Health app or in Health Connect settings.
  2. 2On iPhone, iPad and Apple Watch, Praana can read: heart rate and heart alerts (high, low and irregular rhythm), heart rate variability, resting and walking heart rate, ECG, blood pressure, blood oxygen, blood glucose, body and wrist temperature, sleep and breathing-disturbance (sleep apnea) alerts, activity (steps, distance, flights climbed, active and resting energy, exercise and stand time, swimming, wheelchair pushes, VO2 max), workouts and their routes (which include location), weight, height, body fat and lean mass, nutrition (energy, protein, carbohydrates, fat, water, caffeine), noise exposure, time in daylight, mindful minutes, some symptoms, cycle data (periods, spotting, cycle irregularities, cervical mucus, ovulation, pregnancy and progesterone tests, basal body temperature, sexual activity and contraception), and your date of birth and biological sex.
  3. 3On iPhone, Praana can write: water, caffeine, blood glucose, blood pressure, periods and spotting, the other cycle data you log in OvaFlow, body fat and lean mass, mindful sessions, mood (state of mind), and workouts with running and cycling measurements. On Apple Watch it records the workouts and active energy you track there.
  4. 4On Android, Praana can read heart rate, resting heart rate, heart rate variability, steps, sleep, blood oxygen, total calories burned, distance and exercise sessions. It can read and write blood glucose, blood pressure and periods, and it can write weight, body fat and lean body mass.
  5. 5Health data is processed on your device and is not uploaded to our own servers. It leaves your device only when you use an AI feature (see the next section), when you choose to share a cycle summary with a partner in OvaFlow, or when you export a report and send it somewhere yourself.
  6. 6Health data is never used for advertising or marketing, never sold, never given to data brokers, and never shared except to provide the feature you are using.
  7. 7Praana’s use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements. Its use of Apple Health data follows Apple’s HealthKit rules.

AI & DATA

AI Features & Your Data

  1. 1Some features use AI: Ara (the chat assistant), meal and workout plans, cycle insights, food and equipment photo analysis, doctor-visit preparation, medication guides (such as drug interactions and missed doses), news summaries, and translating Praana’s own screens into your language.
  2. 2These run on Mistral AI, a company based in France. Your request goes first to our own server on Cloudflare, which checks that you are signed in and limits how often each account can use the AI, and then to Mistral.
  3. 3What is sent depends on the feature. For Ara it can include your age, sex, height and weight, goals and health conditions, recent readings (such as heart rate, HRV, blood oxygen, sleep and stress), nutrition, water, workouts, medications and doses, blood test values, cycle phase and symptoms, body composition, injuries, and your conversation so far. On iPhone, Ara also sees short extracts (up to 120 characters) of your last three journal entries; on Android it does not use the journal. Photo features send the photo. Your name and email address are not sent.
  4. 4Praana asks your permission before the first AI use. You can turn AI off at any time in Settings → Privacy & Data → AI features (Ara). When it is off, Praana stops sending your details, conversations and photos to Mistral. Translating Praana’s own screens can still use the AI, and that text contains none of your data.
  5. 5Our server does not save what you send. It records your account ID, the feature used and how much was used, to enforce limits and spot abuse. Mistral processes requests on our behalf as a service provider and does not use them to train its models (training is switched off in our Mistral account).
  6. 6The Contact us helper in Settings also uses Mistral, and works without signing in. It is sent only the questions you type, your app language, phone type and app version, and our server limits how often each connection can use it. Your questions are not kept unless you send them to the Praana team.
  7. 7Talk to Ara (only when you use it): Ara reads her answers aloud in a voice made by Google Cloud Text-to-Speech. Each sentence of the answer goes through our Cloudflare server to Google, which turns it into speech; what you asked is not sent, only Ara’s reply. A sentence with no numbers in it that Ara has said word for word to three different people may be kept on our server as a sound file for up to 90 days, with no account attached, so it does not have to be made again. Other sentences are not kept. Use Ara Chat instead, where answers stay as text, to avoid this.
  8. 8Ara conversations are saved only on your device. AI answers can be wrong; they are marked ‘AI-generated’ and are not medical advice. Report a harmful or wrong answer with Report a Problem.

HOW WE USE IT

How We Use Your Data & Why

  1. 1To run Praana and your account: sign-in, restoring your profile, showing your scores, trends and predictions, and sending the reminders you turn on. The legal basis is our agreement with you (the Terms).
  2. 2Health data is a special category of data under the GDPR. We use it only with your explicit consent, which you give when you allow each health permission and the AI features, and which you can withdraw at any time by turning them off.
  3. 3To keep Praana working and safe: analytics, bug reports, sign-in checks, rate limits and device checks. The legal basis is our legitimate interest in a reliable and secure app, weighed against your rights. You can object (see ‘Your Rights’).
  4. 4To meet legal obligations, such as answering a lawful request from an authority.
  5. 5We do not use your data for advertising, do not sell profiles, and do not make decisions about you with legal or similarly significant effects by automated means alone.

SHARING

Who We Share Data With

  1. 1We do not sell or rent your personal data, and we do not share it for advertising.
  2. 2These service providers process data for us only to run Praana: Google Firebase (sign-in, our database and App Check); Cloudflare (our server for AI requests, account deletion and bug reports, and storage for exercise videos and translation files); Mistral AI (the AI features); Google Cloud Text-to-Speech (Ara’s spoken answers, only in Talk to Ara); and Vercel and Google reCAPTCHA (the website).
  3. 3The app also connects to: Apple and Google for sign-in, speech recognition and device checks; Open Food Facts for barcode lookups (barcode number only); Unsplash for some pictures on iPhone; Google Fonts on Android; and the news sites whose health feeds you read (such as WHO, BBC, NPR, The Guardian, ScienceDaily, Medical Xpress and STAT, plus any feed you add). Like any website, these see your device’s internet address, but they receive no health data.
  4. 4Partner sharing in OvaFlow (18 and over): if you choose to share with a partner, a summary is saved in our database under a private link. It contains your first name, cycle phase and day, next period, cycle length and a symptom forecast, and, only if you choose, your fertile window, ovulation day, mood and AI insights. Anyone who has the link or QR code can see it. It is deleted when you delete your account.
  5. 5Parent sharing (under 18): when a teen and their parent or guardian link their Praana accounts, we save the following in our database so the parent can see it: the date of each period the teen logs in OvaFlow, the predicted next period, and every question the teen asks Praana's AI with its answer (including Ara chats, AI workout and meal plans and food photo results). Only the two linked accounts can read it. It is deleted when either of them stops sharing or deletes their account. We also keep a record of when each of them agreed and which features the parent switched on, so we can show that permission was given. That record holds account IDs and dates only, and is deleted when the account is deleted.
  6. 6Exports: Doctor Visit, OvaFlow, Body Composition and Blood Report files (PDF or CSV) are created on your device and go only where you send them with the share sheet.
  7. 7We may disclose data if the law requires it, for example under a valid court order. If Praana is ever transferred to someone else, this policy will keep applying to your data and we will tell you first.

THE WEBSITE

orinthia.app, the Website

  1. 1The website orinthia.app is hosted by Vercel. It counts page views with Vercel Analytics, which uses no cookies and does not follow you to other sites. The website sets no advertising or tracking cookies.
  2. 2You can sign in on the website with your Praana account. This uses Firebase Authentication, and Google reCAPTCHA may check that the visitor is not a bot.
  3. 3If you give the website your email address to hear about a release, it is used only for that and is removed whenever you ask.
  4. 4No health data is entered on, or stored by, the website.

STORAGE

Where It Is Stored & How It Is Protected

  1. 1Most of your data, including health readings, logs, journal entries, Ara conversations, plans and settings, is stored only on your device and protected by your device’s own security, such as your passcode, Face ID or fingerprint. Praana does not add its own encryption on top. You can lock the journal with Face ID, fingerprint or your device passcode.
  2. 2Account and profile data, analytics, feedback and partner-sharing summaries are stored in Google Firebase. Connections are encrypted, and Firebase encrypts the data it stores.
  3. 3On Android, Google’s cloud backup copies only your appearance and notification settings. Moving to a new phone with a phone-to-phone transfer copies Praana’s other data too, except setup progress and the analytics ID. On iPhone, Praana’s on-device data can be included in your normal iPhone backup (iCloud or computer), which Apple controls.
  4. 4Exported files are temporary copies. On Android they are deleted after about an hour.
  5. 5No system is perfectly secure. If a breach puts your data at risk, we will tell you and the data protection authority as the law requires.

HOW LONG

Keeping & Deleting Your Data

  1. 1Data on your device stays until you delete it, delete your account or remove the app. On iPhone you can also clear it with Settings → More → Reset All Data.
  2. 2Delete Account (Settings → Delete Account; on iPhone, Settings → More → Delete Account) permanently deletes your account, profile, analytics, feedback in our database and partner-sharing summaries, ends any parent sharing link and deletes what was shared through it, and then wipes Praana’s data on the device. It cannot be undone.
  3. 3Delete Account also removes every entry Praana itself wrote to Apple Health or Health Connect, such as period, blood pressure, water or weight entries. Entries you or other apps saved there stay. On Android, Praana’s access to Health Connect is then removed.
  4. 4You can also ask for your account to be deleted without the app, at orinthia.app/delete-account or by writing to support@orinthia.app.
  5. 5Bug reports in our bug tracker are not removed automatically when you delete your account. They are kept for 12 months and deleted sooner if you ask.
  6. 6Our server keeps short-term usage counters per account for rate limits, and our hosting providers keep short technical logs. Neither contains what you sent to the AI.

AGE

Children & Young People

  1. 1You must be at least 13 to use Praana. It is not directed at children under 13, and we do not knowingly collect their data. If you think a child under 13 has given us data, write to support@orinthia.app and we will delete it.
  2. 2If you are under 18, or under the age of digital consent where you live (16 in Ireland), please use Praana only with a parent or guardian’s agreement.
  3. 3Praana is for people aged 13 and over, in every country. If you are under 18, OvaFlow and every AI feature stay locked until a parent or guardian with their own Praana account links to you and switches them on. Partner cycle sharing is only for people aged 18 and over.
  4. 4Blood Report and Body Composition use adult reference ranges, so they stay locked until you turn 18, even with a linked parent. Contraception and libido logging in OvaFlow are hidden for under-18s.
  5. 5These limits work from the date of birth you enter. Praana asks for it once, and it cannot be changed later in the app.

TRANSFERS

Where Your Data Is Processed

  1. 1Praana is provided from Ireland, in the European Union. Mistral AI processes AI requests in the EU.
  2. 2Google (Firebase and Cloud Text-to-Speech), Cloudflare and Vercel may process data outside the European Economic Area, including in the United States. Those transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission’s standard contractual clauses in the provider’s data protection terms.
  3. 3If you live in India or elsewhere outside the EU, your data is processed in the EU and by these providers in other countries, as described above.

YOUR RIGHTS

Your Rights

  1. 1You can ask to see, correct, delete or get a copy of your personal data, ask us to limit how we use it, or object to uses based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time; this does not affect what was done before.
  2. 2Much of this you can do yourself: edit your profile in Settings, export reports, turn off health permissions or AI features, and delete your account in the app.
  3. 3For anything else, write to support@orinthia.app. We reply within one month and may ask you to confirm that the account is yours.
  4. 4In the EU you can complain to the Irish Data Protection Commission (dataprotection.ie) or to the data protection authority where you live.
  5. 5In India, under the Digital Personal Data Protection Act 2023, you can also ask how your data is handled, have your complaints answered by us at the same address, and nominate someone to act for you if you die or cannot act yourself.
  6. 6In California and other US states with privacy laws, you have the right to know, correct and delete your data and to opt out of its sale or sharing. We do not sell or share personal data for advertising, and we will not treat you differently for using your rights.

CONTACT

Contact & Changes

  1. 1For privacy questions or requests, write to Tanmay Murlidhar Reddy at support@orinthia.app. You can also use Report a Problem in Settings.
  2. 2If we change this policy, we will update the date at the top and tell you in the app before important changes take effect. If you do not agree, you can stop using Praana and delete your account.
  3. 3If you read this policy in a translation, the English version is the one that legally applies.
  4. 4This Privacy Policy was last updated on 27 October 2026.

Questions about this document? Email support@orinthia.app.