Your data

The short answer: your health data lives on your phone. A small amount leaves it, always for a reason you triggered, and you can delete all of it from inside the app.

Where it lives

On your phone, in the system health store

Praana reads from and writes to Apple Health on iPhone and Health Connect on Android. Those are the operating system's own stores, protected by the phone's encryption and your passcode, and you control Praana's access to them from system settings at any time.

Anything you type into Praana that is not health data -- journal entries, notes, goals -- is stored in the app's own storage on the device.

What leaves

Three things, and only three

  • Your profile, so it comes back if you reinstall or sign in on a second device: name, date of birth, biological sex, email.
  • Whatever an AI feature needs for the one answer you asked for. Ask Ara about your sleep and it sends recent sleep figures, not your whole history.
  • Anonymous usage counts -- which screens get opened, which features get used -- so it is clear what to build next. No health values in these.

The AI

What the model sees, and what it does not

AI answers are generated by Mistral. Praana sends the context that one question needs, gets the answer back, and shows it to you labelled as AI.

Your data is not used to train the model. The API key is not in the app: it lives on a Cloudflare Worker between your phone and the provider, because a key shipped inside an app is a key anyone can extract from it.

The model version is pinned rather than tracking a moving alias, so behaviour does not change underneath you without a release.

Cycle sharing

OvaFlow partner view

If you share your cycle with a partner, they scan a code and get a read-only view. You can revoke it whenever you like, and revoking cuts the access immediately. Nobody gets this view unless you hand them the code.

Never

What Praana does not do

  • It does not sell your data. There is no advertising business here to sell it to.
  • It does not share health data with advertisers, data brokers or analytics networks.
  • It does not upload your journal. The journal can be locked behind Face ID or your fingerprint and stays on the device.
  • It does not track you across other apps or websites.

Getting rid of it

Deleting means deleting

Settings, then More, then Delete Account. It removes your profile, the health data stored for your account, any cycle-sharing sessions, your usage counts and the sign-in itself. Deletion runs on the server, not just locally, so it is gone rather than hidden.

Uninstalling the app on its own does not delete the server-side account. Use the deletion flow, or request it from the web if the app is already gone.

This page is written to be read. The privacy policy is the binding version, and if the two ever disagree the policy wins. To delete everything, see Delete your account.