Last updated · 19 June 2026

Privacy Policy

HERA handles information about your cycle and wellbeing — among the most sensitive data that exists. We treat it with the care it deserves.

HERA ("HERA," "we," "us," or "our") provides a wellness application that helps women align their lives with their menstrual cycle. This policy explains what we collect, why, how we protect it, and the rights you have. By creating an account or using HERA, you agree to the practices described here. If you do not agree, please do not use the app.

01Who we are

HERA is operated by an individual founder based in Dubai, United Arab Emirates, acting as the data controller responsible for your information. For any privacy-related question or request, contact us at:

02What information we collect

We only collect what we need to make HERA work for you.

Information you give us directly:

• Account information: your email address and password (encrypted — we never see it in plain text).
• Profile information: your name, average cycle length, your goals, struggles, and how you want to feel in your body.
• Cycle information: the dates you log your period and related cycle data. This is sensitive health data and receives the highest level of protection.
• Your reflections: gratitude entries, journal notes, manifestations, desires, goals, and vision board content you choose to add.

Information collected automatically: basic technical data needed to run the service securely (such as session tokens and limited diagnostic information). We do not collect location, contacts, or unnecessary device permissions to use the core app.

03How we use your information

• Create and secure your account.
• Calculate your cycle phase and predictions, and personalize your daily experience.
• Save your entries so they're there when you return, and sync them across your devices.
• Respond to your questions and support requests.
• Keep the service safe, fix problems, and improve how it works.

We do not sell your personal data. We do not use your cycle or health data for advertising. We do not share your intimate data with third parties for their marketing.

04The legal bases we rely on

Where the EU/UK GDPR applies, we rely on: your consent (for your sensitive health and cycle data — you can withdraw it anytime by deleting the data or your account), performance of a contract (to provide the service), and our legitimate interests (to keep the service secure, balanced against your rights).

Where the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies, we process your data on the basis of your consent and to deliver the service you requested. Withdrawing consent does not affect processing that already took place.

05How your information is protected

Your data is stored using Supabase, a secure cloud database provider. We protect it through:

• Encryption of passwords and data in transit.
• Row-Level Security — each user can only ever access their own data; one user can never see another's.
• Access limits — only systems that need your data to run the service can reach it.

No system is perfectly secure, but we use appropriate technical and organizational measures, and we are especially careful with your cycle and health data.

06Sharing your information

We share data only with service providers who help us run HERA, and only as needed: Supabase (secure database and authentication) and our hosting provider (to serve the app). These providers act on our instructions and are bound to protect your data. We may disclose information if required by law, or to protect the safety and rights of our users or HERA. We never sell your data.

07International transfers

HERA serves women around the world, so your data may be processed in countries other than your own. Where data is transferred internationally, we rely on our providers' safeguards (such as standard contractual clauses) to protect it consistent with this policy and applicable law.

08How long we keep your data

We keep your information for as long as your account is active. If you delete specific entries, they are removed. If you delete your account, we delete your personal data from our active systems — your profile, cycle logs, journal entries, goals, and manifestations. Some limited information may remain in secure backups briefly before being overwritten, and we may retain minimal records where the law requires.

09Your rights

• Access the personal data we hold about you.
• Correct information that's wrong — you can edit most of it directly in the app.
• Delete your data and account, anytime, from within the app.
• Withdraw consent to our processing of your sensitive data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable form.
• Complain to a data protection authority if you believe we've mishandled your data.

To exercise any of these rights, use the in-app tools or contact privacy@heraap.live. We'll respond within the timeframe required by law.

10Children

HERA is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact privacy@heraap.live and we will delete it.

11A note on health and medical use

12Changes to this policy

We may update this policy as HERA grows or as laws change. If we make a significant change, we'll let you know in the app or by email. The "Last updated" date at the top shows when this version took effect.

13Contact us

For any question, concern, or request about your privacy, reach us at: