Privacy policy
This policy explains what Sahara Health collects, why, and what your rights are. The short version: the app keeps your training data on your phone and never uploads it; the website collects your email address and, with your consent, your answers to a health questionnaire, so that we can build and deliver your plan.
Who we are
The data controller is the operator of Sahara Health, a business registered in Poland under tax number NIP 6762560321 ("we"). Contact: support@usesahara.com.
The app
The Sahara app stores your sessions, your daily ratings, your goals and your settings on your device only. We do not run user accounts and we do not upload this data. If you delete the app, the data is gone. Reminders are local notifications generated on your phone; their wording never describes any condition. The app may send anonymous usage events (for example "session completed") to our analytics provider, PostHog, to understand which parts of the program people use. These events carry a random identifier, not your name or email.
The website and the assessment
When you take the assessment on usesahara.com we ask for your consent before processing your answers, because they describe your health. Under the GDPR this is "special category" data and we process it only on the basis of your explicit consent (Article 9(2)(a)). We use the answers to choose your training track and personalise your plan. You can withdraw consent at any time by emailing us, and we will delete the answers.
We collect your email address to send your plan, your access code and, if you buy a plan, receipts and reminders about renewals. Marketing emails include an unsubscribe link. The legal basis is the performance of our contract with you and, for marketing, your consent.
Payments
Payments are processed by Stripe. We never see or store your full card details. Stripe processes your payment data under its own privacy policy. We keep records of purchases, refunds and invoices as required by tax law.
Service providers
We use Stripe (payments), Resend (email delivery), Cloudflare (hosting and email routing), Hetzner (servers in the EU) and PostHog (analytics). Each processes data only on our instructions.
Retention
Assessment answers: until you withdraw consent or 24 months after your last activity. Email and purchase records: for the life of your plan and as long as tax law requires afterwards. App data: on your device, under your control.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to processing, or take it elsewhere. Email support@usesahara.com. You can also complain to the Polish supervisory authority (UODO) or the authority in your own country.
Children
Sahara is for adults. We do not knowingly collect data from anyone under 18.
Changes
If this policy changes materially we will email you and update the date above.