Mahere privacy policy
Last updated: [date]. Version [1.0].
1. Who we are
Mahere is provided by [Josef Horák / company name], [address], Czech Republic ([company registration number]). We are the controller of your personal data under the General Data Protection Regulation (GDPR). Contact: privacy@mahere.app.
2. What Mahere is
Mahere is a personal health and nutrition app. You log what you eat, the supplements you take, your training, your sleep, your weight and your blood test results; the app shows them against targets you set and offers an AI coach, a meal planner and a lunch catalogue. Mahere is a wellness app. It is not a medical device and does not provide medical advice.
3. The data we process and why
We process the following categories. Health data is a special category under GDPR Article 9 and we process it only with your explicit consent, which you give when you create your account and can withdraw at any time by deleting the account or switching the relevant feature off.
| Category | Examples | Why | Legal basis |
|---|---|---|---|
| Account data | email address, password (hashed), sign-in times | To create and secure your account | Contract (Art. 6(1)(b)) |
| Profile | name, birth date, sex, height, time zone, goal, notes you write (diet, injuries, schedule), your usual week, your office address | To compute targets and personalise the app | Contract; explicit consent for health-related notes (Art. 9(2)(a)) |
| Nutrition | foods logged, amounts, nutrition values, meal times, saved meals, recipes, shopping purchases | The core function of the app | Explicit consent (Art. 9(2)(a)) |
| Supplements | your plan and what you took | Daily tracker | Explicit consent |
| Training | workouts, sets, loads, your trainer's instructions and your notes | Training pillar | Explicit consent |
| Sleep and recovery | sleep stages, heart-rate variability, resting heart rate, readiness (from Oura or Apple Health) | Recovery pillar | Explicit consent |
| Body | weight, waist, DEXA scan values | Body pillar | Explicit consent |
| Health markers | blood test values as printed on your reports | Shown as trends, never interpreted | Explicit consent |
| Daily check-in | coffees, energy, hunger, mood, joint pain, habits, notes | Context for the coach and the weekly review | Explicit consent |
| Coach conversations | what you write to the coach and its replies | Chat history | Explicit consent |
| Photos | photos of meals, menus, lab or DEXA reports you choose to send | To estimate a meal or read a report | Explicit consent; not stored |
| Connections | encrypted access tokens for services you connect (Oura, TrainHeroic, Rohlík, Košík) | To sync on your behalf | Contract |
| Usage of AI | which AI features you used, how many tokens, the cost | To enforce your monthly allowance and to bill fairly | Legitimate interest (Art. 6(1)(f)): cost control |
| Technical data | IP address and request metadata in our server logs (no health values) | Security, abuse prevention | Legitimate interest: security |
| Anonymous counts (optional) | aggregate counts such as "days logged per week" across users, never per person | To improve the app | Consent (Settings, off by default) |
We do not use your data for advertising, we do not sell it, and we do not build profiles for anyone else.
4. Where your data is stored
Your account and all the data above are stored in a database hosted by Supabase, Inc. in Frankfurt, Germany (European Union), where every row is tied to your account and protected by database-level access rules. Encrypted copies for backup are kept by Supabase in the same region for [7] days.
Our server application runs on Cloudflare, Inc.'s network. Requests pass through Cloudflare's edge; the only data stored there is public information (restaurant menus, dish estimates, coarse office areas) that is not linked to you.
The app keeps a copy of your last two weeks of data and any changes waiting for a connection on your phone, protected by iOS encryption.
5. The AI coach and what it sees
The coach, the daily briefing, the meal planner, photo and menu analysis, lunch dish estimates and report extraction are provided by sending data to Anthropic, PBC ("Claude") as our processor. We send only what the feature needs: your question, relevant parts of your food log and targets, your profile notes, a summary of your sleep and readiness, the photo you chose, or the menu lines to estimate. Under Anthropic's commercial terms, data we send is not used to train models and is retained only briefly for abuse prevention [confirm current retention and zero-retention eligibility]. Anthropic processes data in the United States; the transfer is covered by [the EU–US Data Privacy Framework certification / standard contractual clauses, to be confirmed].
You consent to this processing separately when you first use an AI feature, and you can withdraw it in Settings; the app keeps working without the AI features.
The coach is an AI. Its answers may be wrong. It is not a doctor and does not give medical advice.
6. Apple Health
If you turn Apple Health on, Mahere reads weight, steps, workouts, sleep and heart-rate variability from Health and writes the nutrition of meals you log. Health data is used only to provide the app's functions, is never used for advertising or data mining, is never written to iCloud by Mahere, and leaves your phone only as the rows in your own database described above. You can switch Apple Health off in Settings at any time.
7. Services you connect
When you connect Oura, TrainHeroic, Rohlík or Košík, you sign in at that service yourself. The service gives Mahere an access token, which we store encrypted and use only to read or act on your behalf as you asked (for example, to add items to your cart). We never store a password for these services. Their own privacy policies apply to their processing. You can disconnect any service in Settings; the token is deleted.
8. Public sources
To look up foods and lunch menus, Mahere reads public databases and websites (Open Food Facts, USDA FoodData Central, menicka.cz, Wolt, OpenStreetMap's geocoder). These requests contain search terms, barcodes or coarse coordinates and never your identity.
9. Who else receives data
| Recipient | Role | Location |
|---|---|---|
| Supabase, Inc. | database and authentication | EU (Frankfurt) |
| Cloudflare, Inc. | application hosting | global edge; see section 4 |
| Anthropic, PBC | AI processing | United States |
| Apple Inc. | App Store, TestFlight crash reports you opt into | per Apple's terms |
| [Email provider] | account emails (confirmation, password reset) | [location] |
Each of them processes data under a written agreement with us. We will disclose data if the law requires it and will tell you unless the law forbids that.
10. How long we keep data
For as long as you have an account. When you delete your account, your data is deleted at once and disappears from backups within [7] days. Some data is kept for shorter periods by default: daily briefings [90 days], coach conversations [12 months unless you delete them earlier], AI usage records [24 months]. Records of your consent are kept for [5] years after deletion as proof.
11. Your rights
You can see and change everything in the app. You also have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interest, and to withdraw consent at any time. Export (Settings → Account → Export) and Delete account (Settings → Account) are available in the app; for anything else write to privacy@mahere.app. We answer within thirty days. You can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz) or your local supervisory authority.
12. Children
Mahere is for people aged [16] and over. We do not knowingly process children's data; if you believe a child has an account, write to us and we will delete it.
13. Security
Encryption in transit everywhere; access rules enforced by the database for every row; connection tokens encrypted at rest; no master keys in our code; two-factor authentication on our own accounts; no analytics or advertising code in the app. See mahere.app/security.
14. Changes
We will tell you in the app before a change that matters takes effect and ask for consent again where the law requires it. Earlier versions are available on request.
15. Contact
privacy@mahere.app · [postal address].