Privacy Policy
Healthora is a nutrition and weight-coaching app. It builds a personal meal plan, lets you log meals, water, weight and sleep, and connects Premium members with a human coach. Because this involves health information, we collect only what the app needs to work and we never sell your personal information.
This policy explains what we collect, why, who we share it with, and the choices you have.
1. Information We Collect
We collect the information you give us, the information you log while using Healthora, and a small amount of technical information needed to deliver notifications.
| Category | What we collect | When |
|---|---|---|
| Account | Name, email address, password (stored only in hashed form), and a one-time verification code sent to your email | When you sign up, verify your email, or reset your password |
| Google sign-in | Your name and email address from your Google account | Only if you choose "Sign up with Google" |
| Health profile | Height, sex, date of birth, current weight, goal weight, target date, and weekly pace | Onboarding step 1 and step 5 |
| Diet and lifestyle | Dietary restrictions, foods you love and avoid, eating pattern, meal times, sleep quality, stress level (1โ10), usual water intake, and activity level | Onboarding steps 2โ4, and when you edit your food habits |
| Daily logs | Meals you log (food, serving, quantity), water intake, weight entries, and sleep hours | Whenever you log them |
| Coach messages | Questions you send to your coach and the replies you receive | Premium members using Coach Q&A |
| Profile photo | A photo you take or choose from your library | Only if you set a profile photo |
| Subscription status | Your plan (Free or Premium), subscription status, and renewal date | When you choose or change a plan |
| Device information | A push-notification token and your device platform (iOS, Android or web) | Only if you allow notifications |
Payment card details. Premium payments are handled by Stripe. We never see or store your full card number; Stripe sends us only the status of your subscription.
What we do not collect. Healthora does not use advertising or third-party analytics SDKs, does not track your location, and does not access your contacts, microphone, or health data from Apple Health or Google Fit.
Stored on your device. Your sign-in session is kept in your device's secure storage. Some preferences, such as measurement units and unsent message drafts to your coach, stay on your device only.
2. How We Use Your Information
We use your information only to run Healthora and keep it safe. Specifically, we use it to:
- Create your account, verify your email, sign you in, and reset your password.
- Calculate your BMI, daily calorie and water targets, and goal pace.
- Generate and update your personal meal plan, including meal swaps and refreshes after a weight change.
- Show your daily summary, progress charts, and logged history.
- Let your coach review your profile, logs, and progress, answer your questions, and adjust your meal plan.
- Send push notifications you have allowed, such as coach replies and meal reminders based on your meal times.
- Manage your Free or Premium plan and confirm payments with Stripe.
- Protect the service, investigate misuse, and fix problems.
We do not use your information for advertising, and we do not sell it or share it for cross-app tracking.
Automated meal planning. Your meal plan is generated automatically from your health profile and food preferences, using an AI model operated by [AI provider name]. Your coach can review and change any plan. Healthora gives general nutrition guidance and is not a substitute for medical advice.
3. Sharing of Information
We do not sell your personal information. We share it only with your coach and with the service providers below, each limited to what it needs to do its job.
Your coach. Healthora coaches and administrators can see your profile, onboarding answers, logs, progress, meal plan, and coach messages so they can support you. Coach messaging is available to Premium members.
| Provider | Purpose | Information involved |
|---|---|---|
| Google (Google Sign-In) | Signing in with your Google account | Name, email, Google account identifier |
| Google Firebase Cloud Messaging | Delivering push notifications | Device push token, notification content |
| Stripe | Processing Premium subscription payments | Email, payment details (held by Stripe), subscription status |
| [AI provider name] | Generating meal plans | Health profile and food preferences, without your name or email |
| FatSecret | Looking up food and nutrition data | Food names and search terms only |
| Unsplash | Supplying meal photos | Meal names only |
| [Email delivery provider] | Sending verification and password-reset codes | Email address, one-time code |
| [Cloud hosting provider] | Hosting the Healthora servers, database, and files | All information stored by Healthora |
Legal reasons. We may disclose information if required by law, to respond to valid legal requests, or to protect the rights, safety, or property of our users or others.
Business transfers. If Healthora is merged, acquired, or sold, your information may transfer to the new owner, who must continue to protect it under this policy.
4. Data Storage and Security
We protect your information with technical and organizational safeguards, including:
- Encrypted connections (HTTPS) between the app and our servers.
- Passwords stored only as secure hashes, never in readable form.
- Short-lived sign-in tokens that rotate automatically, kept in your device's secure storage (Keychain on iOS, Keystore on Android).
- Access to member data limited to authorized coaches and administrators.
- Payment card details held by Stripe, never on our servers.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach that affects your information, we will notify you as required by law.
5. Your Rights
You can access, correct, or export your personal information at any time, subject to applicable law.
- Access and correct. View your answers under Settings โ My Profile Info, and edit your food habits there. For other changes, contact us.
- Export. Ask us for a copy of your data and we will send it within 30 days.
- Withdraw consent. Turn off notifications in your device settings, or stop using a feature at any time.
Depending on where you live (for example the EU, UK, or California), you may have additional rights, including the right to object to processing or to complain to your local data protection authority.
6. Permissions
Healthora asks for only three device permissions, each only when you use the feature that needs it.
| Permission | Why we ask | When |
|---|---|---|
| Notifications | Coach replies and meal reminders | On the Home screen after onboarding (coaches: on the Q&A inbox) |
| Camera | Taking a profile photo | Only when you tap "Take Photo" |
| Photo library | Choosing a profile photo | Only when you tap "Choose from Library" |
The app works without any of these. You can change them at any time in your device settings.
7. Children's Privacy
Healthora is intended for adults aged 18 and over. Weight-loss guidance is not designed for children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us personal information, please contact us.
8. International Data Transfers
Our servers are located in [country/region]. Some service providers, including Google, Stripe, and [AI provider name], may process information in the United States or other countries. When information leaves your country, we rely on safeguards such as the providers' Standard Contractual Clauses or equivalent protections required by law.
9. Changes to This Policy
We may update this policy when Healthora, our providers, or the law change. We will post the new version here with a new effective date. If a change materially affects how we use your information, we will tell you in the app or by email before it takes effect.
10. Contact Us
For questions about this policy or to make a privacy request, contact:
- Company: Fleet Studio Technologies Private Limited
- Email: technology@fleetstudio.com
- Website: fleetstudio.com
- Address: 100 Nassau St, 2nd Floor, Princeton, NJ 08542, USA
- Phone: +1 (908) 376-6652
We aim to respond to every request within 30 days.
